meanjs / mean

MEAN.JS - Full-Stack JavaScript Using MongoDB, Express, AngularJS, and Node.js -
http://meanjs.org
MIT License
4.87k stars 1.98k forks source link

[Snyk] Fix for 1 vulnerabilities #2037

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change
low severity Information Disclosure
SNYK-JS-KINDOF-537849
No
Commit messages
Package name: gulp-load-plugins The new version differs by 4 commits.
  • 2e24542 1.6.0
  • d979a96 bump mocha to fix security issue
  • 595ab83 Bump packages on vulnerability paths (#138)
  • 174cd3b Fix ESLint error (#133)
See the full diff
Package name: snyk The new version differs by 240 commits.
  • 4cea366 Merge pull request #962 from snyk/fix/update-gradle-plugin
  • c3d7b9b fix: bump gradle plugin version, so won't bring unused dependency
  • 1813f8a Merge pull request #958 from snyk/fix/sending-full-error-to-bq
  • 2b6b650 Merge pull request #956 from snyk/fix/use-node-10-during-release
  • 5d83dc4 fix: use node 10 during travis release
  • f20eec4 Merge pull request #953 from snyk/fix/cli-system-test-failures
  • b2944e7 Merge pull request #954 from snyk/feat/enable-nuget-auto-detection
  • 7f79861 fix: CLI system test failures
  • e08eea0 feat: add Nuget files to auto detection with --all-projects
  • 283b29b Merge pull request #952 from snyk/fix/increase-cli-test-timeout
  • 12718f1 fix: stop sending full error to bq
  • c6f0b28 fix: reduce timeout on window open
  • d36a297 Merge pull request #950 from snyk/chore/update_patch_fixture_urls_master
  • c7e00ad Merge pull request #951 from snyk/fix/cli-tests-run-against-any-snyk-api
  • 956571f chore: Update fixtures to point to correct patch urls
  • 878f5a9 fix: allow tests to be run against any snyk API
  • 7edc95e Merge pull request #948 from snyk/feat/prehor-gitignore-snyk-report
  • 20223cf Merge pull request #943 from snyk/jdewinne-help-vs-usage
  • 7925b27 fix: Ignore snyk Docker generated reports and result files
  • 32e4759 Merge pull request #945 from snyk/feat/help-text-for-experimental-features
  • 3b6e939 Merge pull request #944 from snyk/chore/update_patch_fixture_urls_2
  • 91533ad feat: switching from usage to help documentation by default
  • 1d2e226 Merge pull request #932 from snyk/feat/multi-level-auto-detect
  • 922b109 feat: add experimental options to help text
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic