newrelic / nr1-slo-r

NR1 SLO-R allows you to define, calculate and report on service-level objective (SLO) attainment.
https://discuss.newrelic.com/t/track-your-service-level-objectives-with-the-slo-r-nerdpack/90046
Apache License 2.0
21 stars 21 forks source link

[Snyk] Upgrade yup from 0.27.0 to 0.32.9 #165

Closed snyk-bot closed 3 years ago

snyk-bot commented 3 years ago

Snyk has created this PR to upgrade yup from 0.27.0 to 0.32.9.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-PROPERTYEXPR-598800
811/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 9.8
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: yup
  • 0.32.9 - 2021-02-17

    v0.32.9

  • 0.32.8 - 2020-12-10

    0.32.8

  • 0.32.7 - 2020-12-10

    0.32.7

  • 0.32.6 - 2020-12-08

    v0.32.6

  • 0.32.5 - 2020-12-07

    v0.32.5

  • 0.32.4 - 2020-12-07

    v0.32.4

  • 0.32.3 - 2020-12-07

    v0.32.3

  • 0.32.2 - 2020-12-07
  • 0.32.1 - 2020-12-04
  • 0.32.0 - 2020-12-03
  • 0.31.1 - 2020-12-01
  • 0.31.0 - 2020-11-23
  • 0.30.0 - 2020-11-19
  • 0.29.3 - 2020-08-04
  • 0.29.2 - 2020-07-27
  • 0.29.1 - 2020-05-27
  • 0.29.0 - 2020-05-19
  • 0.28.5 - 2020-04-30
  • 0.28.4 - 2020-04-20
  • 0.28.3 - 2020-03-06
  • 0.28.2 - 2020-03-05
  • 0.28.1 - 2020-01-28
  • 0.28.0 - 2019-12-16
  • 0.27.0 - 2019-03-14
from yup GitHub release notes
Commit messages
Package name: yup
  • 4a0870c Publish v0.32.9
  • 1aba3b8 chore: clean up
  • 52e5876 fix(types): Array required() and defined() will no longer return any (#1256)
  • da23aea docs: use links instead of just name (#1255)
  • 67c96ae fix: export MixedSchema to fix ts with --declarations (#1204)
  • 3b67dc0 Add Lazy within object and array schema generics (#1170)
  • be3d1b4 fix(types): add generic to Reference.create() (#1208)
  • 5cf2c48 fix(types): reach and getIn make last 2 arguments optional (#1194)
  • e6dbef1 chore: upgraded lodash-es min version from 4.17.11 to 4.17.15 (#1187)
  • 4e7c9ee chore(docs): typescript link (#1184)
  • 9451137 Merge branch 'master' of https://github.com/jquense/yup
  • e8e5b46 fix: do not initialize spec values with undefined (#1177)
  • f82700c 0.32.8
  • c84d487 0.32.7
  • e41040a fix(types): meta() return type
  • e785e1a fix: array handling in SchemaOf type (#1169)
  • 2d71f32 fix(types): SchemaOf doesn't produce a union of base schema
  • b53e5f2 fix(types): make StringSchema.matches options optional (#1166)
  • 3ca0ebf Publish v0.32.6
  • 7f8591d fix: mixed() is the the base class
  • 67de534 Publish v0.32.5
  • 01c6930 fix(types): change base.default() to any
  • 01d50ce Publish v0.32.4
  • 14e2c8c fix(types): rm base pick/omit types as they conflict with more specific ones
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

CLAassistant commented 3 years ago

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

rudouglas commented 3 years ago

Passing all checks except the security/snyk and license/cla checks so not sure on this one?

nr-opensource-bot commented 3 years ago

:tada: This PR is included in version 1.7.9 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: