Open snyk-bot opened 2 years ago
(*) Note that the real score may have changed since the PR was raised.
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
Vulnerabilities that will be fixed
With an upgrade:
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
SNYK-JS-ANSIREGEX-1583908
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: knex
The new version differs by 250 commits.- eb136f1 Merge branch 'master' of https://github.com/tgriesser/knex
- 2072163 Update version in changelog (#3138)
- f28ae7a Merge branch 'master' of https://github.com/tgriesser/knex
- f757e36 Bump version to 0.16.4 (#3137)
- 18532b2 Bump version to 0.16.4
- 286d84b Prepare for 0.16.4-next3 release (#3136)
- 1948c3d Add boolean as a column name in join (#3121)
- fe6083e Support nullable timestamps on MySQL (#3100)
- b15ee3d make unionAll()'s call signature match union() (#3055)
- e7ed005 Fix queryContext not being passed to raw queries (#3111)
- 11fdc0c Add missing clearOrder & clearCounters types (#3109)
- 7ecbcd5 Update changelog and version number (#3108)
- 5fea86e Update dependencies (#3107)
- 19926d8 [#3033] fix: sqlite3 drop/renameColumn() breaks with postProcessResponse (#3040)
- 24fcf27 Fix transaction support for migrations (#3084)
- de1c934 Include 'string' as accepted Knex constructor type definition (#3105)
- 0aacab5 Fix for #2998 - Migrator & TypeScript (#3041)
- fcd21d9 Add command for executing tests on SQLite (#3101)
- 1da56a3 Update mssql dev dep to v5 stable (#3096)
- b9a648c Format code (#3088)
- 0db7859 add test that clearing offset (#2954)
- f3f0750 Make TS stubs modern (#3080)
- 68723e0 Update changelog (#3086)
- 1b39d67 Tests for drop-and-recreate with async/await (#3083)
See the full diffPackage name: nodemon
The new version differs by 16 commits.- ee92ee4 test: split require tests
- 33ae6da test: fix failing test when required
- a4490e2 fix: package.json & package-lock.json to reduce vulnerabilities
- 9bd07eb docs: changed verbose logging and CLI documentation to reflect support single file watch functionality
- c279760 test: make sigint test to actually check child pid (#1656)
- cd45d74 test: fix fork test
- 496c335 chore: undo change to spawn code
- 47dfb8b fix: pipe stderr correctly
- ed91703 fix: ubuntu loop waiting for sub processes
- 9a67f36 feat: update chokidar to v3
- 6781b40 docs: add license file
- 0e6ba3c fix: wait for all subprocesses to terminate (fixes issue #1476)
- b58cf7d chore: Merge branch 'master'
- 95a4c09 docs: add to faq
- 3a2eaf7 choe: merge master
- 3d90879 chore: add logo to site
See the full diffCheck the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic