ibm-watson-data-lab / simple-search-service

A faceted search engine and content API.
39 stars 27 forks source link

[Snyk] Upgrade couchimport from 0.6.2 to 1.5.1 #99

Open snyk-bot opened 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade couchimport from 0.6.2 to 1.5.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-MINIMIST-559764
601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: couchimport
  • 1.5.1 - 2020-10-19
  • 1.5.0 - 2020-05-19
    • add --retry/-r option to retry requests that yielded an HTTP 429 response
  • 1.4.6 - 2020-05-18
  • 1.4.5 - 2020-04-17

    Bug fix for overwrite mode

  • 1.4.4 - 2020-04-09

    Fix IAM bugs on import

  • 1.4.3 - 2020-04-07

    Added maxwps/COUCH_MAX_WPS to allow rate limiting of writes during couchimport runs.

  • 1.4.2 - 2020-02-24
    • typescript defs
    • swap out request library for axios
  • 1.4.1 - 2019-10-31
  • 1.4.0 - 2019-10-18
  • 1.3.0 - 2019-10-08
  • 1.2.0 - 2019-08-29
  • 1.1.2 - 2018-10-16
  • 1.1.1 - 2018-10-16
  • 1.1.0 - 2018-10-16
  • 1.0.0 - 2018-09-13
    • code refactor
    • remove un-needed dependencies
    • update dependencies
    • modernise code
    • tidy variable names
    • standard js linting
  • 0.7.0 - 2017-09-20
    • added support for transforms that produce multiple documents
  • 0.6.2 - 2017-07-12

    0.6.2

from couchimport GitHub release notes
Commit messages
Package name: couchimport Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs