search

probot / reminders

set reminders on Issues and Pull Requests
https://github.com/apps/reminders
ISC License
162 stars 24 forks source link

fix(deps): update dependency chrono-node to v2 [security] #59

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 2 years ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
chrono-node ^1.3.4 -> ^2.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2021-23371

This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces.

Release Notes

wanasit/chrono ### [`v2.5.0`](https://togithub.com/wanasit/chrono/releases/tag/v2.5.0) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.4.2...v2.5.0) - New Added basic support for Spanish (by [@​S4M3R](https://togithub.com/S4M3R)) Others: - New: Support timeunit abbriviation (English) - Support "midday" casual time in English (by [@​kieranm](https://togithub.com/kieranm)) ### [`v2.4.2`](https://togithub.com/wanasit/chrono/releases/tag/v2.4.2) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.4.1...v2.4.2) - Fix: slash date format accept invalid dates - Fix: forward date to correctly increment day by one [#​456](https://togithub.com/wanasit/chrono/issues/456) (by [@​Swivelgames](https://togithub.com/Swivelgames)) - Fix: Midnight follow by date - Fix: Incorrect date(day) value in Chinese Local time expression parsers when date by [@​maxwellyue](https://togithub.com/maxwellyue) - Other refactoring/fixes by [@​mikemikhaylov](https://togithub.com/mikemikhaylov) [@​7qt](https://togithub.com/7qt) ### [`v2.4.1`](https://togithub.com/wanasit/chrono/releases/tag/v2.4.1) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.9...v2.4.1) Minor version v2.3 -> v2.4 - New weekday calculation (e.g. "This Friday", "Next Saturday") - Fixed inconsistent behaviors ([#​464](https://togithub.com/wanasit/chrono/issues/464)) - New: Introduced weekday enum Other: - RU: Small fixes for the locale ([`a3c3bf8`](https://togithub.com/wanasit/chrono/commit/a3c3bf8), [`a89da1d`](https://togithub.com/wanasit/chrono/commit/a89da1d)) ### [`v2.3.9`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.9) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.8...v2.3.9) - \[New] Russian locale (`chrono.ru`) by [@​mikemikhaylov](https://togithub.com/mikemikhaylov) ([#​458](https://togithub.com/wanasit/chrono/issues/458)) - \[Fix] Recognize timezone mentioned enclosed in parentheses by [@​JoakimNil](https://togithub.com/JoakimNil) ([#​449](https://togithub.com/wanasit/chrono/issues/449)) - \[Fix] (FR) recognize for more day pattern by [@​trothe](https://togithub.com/trothe) [`195976d`](https://togithub.com/wanasit/chrono/commit/195976d) - \[Fix] (zh-hans) re-export by [@​j1g5awi](https://togithub.com/j1g5awi) [`0838c52`](https://togithub.com/wanasit/chrono/commit/0838c52) ### [`v2.3.8`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.8) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.7...v2.3.8) - (new) Added parsing for quarter [`f4964a6`](https://togithub.com/wanasit/chrono/commit/f4964a6) (by [@​PriyankaSand](https://togithub.com/PriyankaSand)) - (new, DE) Improve German casual relative expression parsing [`668b5fe`](https://togithub.com/wanasit/chrono/commit/668b5fe) (by [@​georgd](https://togithub.com/georgd)) - (new, DE) Other German improvement (month name, era, time parsing) ### [`v2.3.7`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.7) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.6...v2.3.7) - New: Recognize relative time from an absolute date (e.g. "2 weeks before 2020-02-13") from [@​liamcain](https://togithub.com/liamcain) (PR [#​430](https://togithub.com/wanasit/chrono/issues/430)) - Fix: MSK (Moscow Time) from UTC+4:00 to UTC+3:00 from [@​DylanFrese](https://togithub.com/DylanFrese) (PR [#​421](https://togithub.com/wanasit/chrono/issues/421)) - Fix: "after" and "after this" reference [`0d1c9bd`](https://togithub.com/wanasit/chrono/commit/0d1c9bd) ### [`v2.3.6`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.6) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.5...v2.3.6) - New: Chinese Hans support (chrono.zh.hans) support from [@​QingWei-Li](https://togithub.com/QingWei-Li) (PR [#​427](https://togithub.com/wanasit/chrono/issues/427)) - Fix: Ambiguous timezone names when time is not mentioned [`afbba58`](https://togithub.com/wanasit/chrono/commit/afbba58) ### [`v2.3.5`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.5) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.4...v2.3.5) - New: Chinese Hant support (`chrono.zh.hant`) support from [@​DingWeizhe](https://togithub.com/DingWeizhe) (MR [#​417](https://togithub.com/wanasit/chrono/issues/417)) - Improvement: also assign meridium on relative time parsing [`c4cd375`](https://togithub.com/wanasit/chrono/commit/c4cd375) ### [`v2.3.4`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.4) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.3...v2.3.4) - Fix: improve timezone adjustment (dayligth-saving related) [`543c3bc`](https://togithub.com/wanasit/chrono/commit/543c3bc) - Fix: incorrect date when ref timezone is unknown [`801ca4e`](https://togithub.com/wanasit/chrono/commit/801ca4e) ### [`v2.3.3`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.3) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.2...v2.3.3) - New: Allow null reference timezone; result timezone will not be implied or assigned unless one is read from a parsed date [`d337a53`](https://togithub.com/wanasit/chrono/commit/d337a53) - Fix: Require a word boundary after short tokens that can be interpreted as numbers [`8efe94c`](https://togithub.com/wanasit/chrono/commit/8efe94c) ### [`v2.3.2`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.2) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.1...v2.3.2) - Fix: ForwardRefiner to activate on the same weekday [`699c871`](https://togithub.com/wanasit/chrono/commit/699c871) ### [`v2.3.1`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.1) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.3.0...v2.3.1) - Fix: (performance) Regex backtracking in consecutive space patterns [#​399](https://togithub.com/wanasit/chrono/issues/399) - New: Enhance Dutch (NL) Support [`0cfef4e`](https://togithub.com/wanasit/chrono/commit/0cfef4e) ### [`v2.3.0`](https://togithub.com/wanasit/chrono/releases/tag/v2.3.0) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.7...v2.3.0) - New: Date/Timezone Reference API (see. *Parsing Reference (Date / Timezone)* in Readme) ### [`v2.2.7`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.7) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.6...v2.2.7) - Improvement: Apply case-sensitive timezone extraction on date expressions [`f036345`](https://togithub.com/wanasit/chrono/commit/f036345) - Fix: Time parsing ending with "a" or "p" [`77fbd83`](https://togithub.com/wanasit/chrono/commit/77fbd83) - New: BCE/CE year label support [`dde6103`](https://togithub.com/wanasit/chrono/commit/dde6103) - New: "tmrw" as abbr for "tomorrow" [`b9c02f5`](https://togithub.com/wanasit/chrono/commit/b9c02f5) ### [`v2.2.6`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.6) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.5...v2.2.6) - Fix: Improve performance by avoid unnecessary parsing in time exp [`cdfb6bc`](https://togithub.com/wanasit/chrono/commit/cdfb6bc) - Fix: negative time range parsing [`053cc8f`](https://togithub.com/wanasit/chrono/commit/053cc8f) - Fix: handling quote sign around time parsing [`6a52cf3`](https://togithub.com/wanasit/chrono/commit/6a52cf3) ### [`v2.2.5`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.5) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.4...v2.2.5) - Fix: Performance improvement by reduce the usage of dayjs in results [`38cbefb`](https://togithub.com/wanasit/chrono/commit/38cbefb) - Fix: Small performance improvement through caching [`fab8f51`](https://togithub.com/wanasit/chrono/commit/fab8f51) - New: Adding basic benchmark [`ac08a8c`](https://togithub.com/wanasit/chrono/commit/ac08a8c) ### [`v2.2.4`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.4) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.3...v2.2.4) - Fix: improve parsing performance by caching complied regex [`036f7aa`](https://togithub.com/wanasit/chrono/commit/036f7aa) - Fix: unblounded regex backtracking in timeunit parsing [`98815b5`](https://togithub.com/wanasit/chrono/commit/98815b5) ### [`v2.2.3`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.3) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.2...v2.2.3) - Fix: vague time parsing in strict mode [`b582ae7`](https://togithub.com/wanasit/chrono/commit/b582ae7) - Add Typedoc integration [`3d044ee`](https://togithub.com/wanasit/chrono/commit/3d044ee) - Fix: Import bug in v2.2.2 [`16737f5`](https://togithub.com/wanasit/chrono/commit/16737f5) ### [`v2.2.2`](https://togithub.com/wanasit/chrono/compare/v2.2.1...v2.2.2) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.1...v2.2.2) ### [`v2.2.1`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.1) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.2.0...v2.2.1) - Fix: time expression ending with numbers only - New: Make (in|within|for) optional if forwardDate=true ([#​372](https://togithub.com/wanasit/chrono/issues/372)) - New: Improved NL support ([#​373](https://togithub.com/wanasit/chrono/issues/373)) ### [`v2.2.0`](https://togithub.com/wanasit/chrono/releases/tag/v2.2.0) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.11...v2.2.0) - (minor-incompatible) Removing edge-case time checking for ambitious case-like "midnight" or "tomorrow" at ~1AM. - Fix: stop guessing single digit after dot as minute ([#​374](https://togithub.com/wanasit/chrono/issues/374)) ### [`v2.1.11`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.11) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.10...v2.1.11) - Fix: when parsing relative time, also imply time milisecond unit - Bump dayjs and typescript version ### [`v2.1.10`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.10) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.9...v2.1.10) - \[New/Fix] Improve certainty-level and timezone handling in relative time parsing ([#​175](https://togithub.com/wanasit/chrono/issues/175)) - \[Fix] short month names handling ([#​357](https://togithub.com/wanasit/chrono/issues/357)) - \[Fix] "for" time unit reference ### [`v2.1.9`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.9) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.8...v2.1.9) - \[Fix] handle some preprosition words in within format parser [`8dfc495`](https://togithub.com/wanasit/chrono/commit/8dfc495) - \[Fix] timezone offset hour only handling [`a186fdf`](https://togithub.com/wanasit/chrono/commit/a186fdf) - \[Fix] pattern year-month-day handling [`76d493b`](https://togithub.com/wanasit/chrono/commit/76d493b) - \[New] Add NL locale ### [`v2.1.8`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.8) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.7...v2.1.8) - \[New] Added FR timeunit date/time parsing - \[New] Add Portuguese (PT) language support ### [`v2.1.7`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.7) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.6...v2.1.7) - \[Fix] Avoid `export * ...` syntax usages [#​341](https://togithub.com/wanasit/chrono/issues/341) ### [`v2.1.6`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.6) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.5...v2.1.6) - \[New] Add German support (`chrono.de`) - \[New] Improve vague timeunit expressions parsing (e.g. in around 2 hours) - \[New] Better casual unit parsing support (e.g. -4hr3min, or next 3weeek 4days) - \[Fix] Use null instead of undefined in timezone (see [#​340](https://togithub.com/wanasit/chrono/issues/340)) ### [`v2.1.5`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.5) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.4...v2.1.5) - \[New] FR date with month name e.g. "10 Fevrier 2012" - \[New] FR weekday parsing e.g. "la deadline était vendredi dernier" - \[Fix] A problem related to space suffix in time parsing reported in [#​337](https://togithub.com/wanasit/chrono/issues/337) ### [`v2.1.4`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.4) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.3...v2.1.4) - \[New] French date parser (prototype) [`2e12e32`](https://togithub.com/wanasit/chrono/commit/2e12e32) - \[New] Casual date parsing (e.g. today, tomorrow, etc) also implies the reference time [`17bb16f`](https://togithub.com/wanasit/chrono/commit/17bb16f) - \[Fix] ParsingComponent.get() suppose to return undefined instead of null [`e1a3c04`](https://togithub.com/wanasit/chrono/commit/e1a3c04) ### [`v2.1.3`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.3) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.2...v2.1.3) - \[New] support + timeunit pattern [#​294](https://togithub.com/wanasit/chrono/issues/294) - \[New] Imply ref time when parsing timeunit reference [`ce989eb`](https://togithub.com/wanasit/chrono/commit/ce989eb) - \[Fix] check and improve year 90s extraction [`31d2a61`](https://togithub.com/wanasit/chrono/commit/31d2a61) ### [`v2.1.2`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.2) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.1...v2.1.2) \[Fix] Stop using remaining lookbehind reported in [#​332](https://togithub.com/wanasit/chrono/issues/332) ### [`v2.1.1`](https://togithub.com/wanasit/chrono/compare/v2.1.0...v2.1.1) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.1.0...v2.1.1) ### [`v2.1.0`](https://togithub.com/wanasit/chrono/releases/tag/v2.1.0): 2.1.0 [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.0.3...v2.1.0) ##### Package loading - The main module is now `dist/index.js` - Typescript's TypeInfo information is now available `dist/index.d.ts` - Change the module type to `commonjs` - \~~Use `import chrono from 'chrono-node'` instead of `import * as chrono from 'Chrono-node'`~~ (only Node.js) ##### Fixes - Stop using lookbehind - Minor interface changes ### [`v2.0.3`](https://togithub.com/wanasit/chrono/compare/v2.0.2...v2.0.3) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.0.2...v2.0.3) ### [`v2.0.2`](https://togithub.com/wanasit/chrono/releases/tag/v2.0.2) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.0.1...v2.0.2) - Fix the webpack building script #### What's changed in v2 ##### For Users - Chrono’s default now handles only international English. While in the previous version, it tried to parse with all known languages. - Minor interface redesign ##### For contributors and advanced users - The project is rewritten in TypeScript - New Parser and Refiner interface (see chrono.ts) ### [`v2.0.1`](https://togithub.com/wanasit/chrono/compare/v2.0.0...v2.0.1) [Compare Source](https://togithub.com/wanasit/chrono/compare/v2.0.0...v2.0.1) ### [`v2.0.0`](https://togithub.com/wanasit/chrono/compare/v1.4.8...v2.0.0) [Compare Source](https://togithub.com/wanasit/chrono/compare/v1.4.8...v2.0.0)

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR has been generated by Mend Renovate. View repository job log here.