search

tabacws-sandbox / juice-shop-checkPR

MIT License
0 stars 0 forks source link

Update dependency sqlite3 to ^5.1.5 #74

Open mend-for-github-com[bot] opened 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Type Update Change
sqlite3 dependencies minor ^5.0.8 -> ^5.1.5

By merging this PR, the issue #71 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-43441
High High 7.5 CVE-2022-25881

Release Notes

TryGhost/node-sqlite3 (sqlite3) ### [`v5.1.5`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.5) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5) #### What's Changed - 🔒 Fixed code execution vulnerability due to Object coercion by [@​daniellockyer](https://togithub.com/daniellockyer) - Updated bundled SQLite to v3.41.1 by [@​daniellockyer](https://togithub.com/daniellockyer) - Fixed rpath linker option when using a custom sqlite by [@​jeromew](https://togithub.com/jeromew) in [https://github.com/TryGhost/node-sqlite3/pull/1654](https://togithub.com/TryGhost/node-sqlite3/pull/1654) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.4...v5.1.5 ### [`v5.1.4`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.4) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4) #### What's Changed - Fixed glibc compatibility by downgrading CI to Ubuntu 20 by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1664](https://togithub.com/TryGhost/node-sqlite3/pull/1664) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.3...v5.1.4 ### [`v5.1.3`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.3) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3) #### What's Changed - Updated bundled SQLite to v3.40.0 by [@​daniellockyer](https://togithub.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.2...v5.1.3 ### [`v5.1.2`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.2) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2) #### What's Changed - Updated bundled SQLite to v3.39.4 by [@​daniellockyer](https://togithub.com/daniellockyer) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.1...v5.1.2 ### [`v5.1.1`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.1) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1) #### What's Changed - Added Darwin ARM64 binaries by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1594](https://togithub.com/TryGhost/node-sqlite3/pull/1594) A huge thanks to [MacStadium](https://www.macstadium.com/) for providing an M1 Mac Mini so we can offer ARM64 binaries. **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.1.0...v5.1.1 ### [`v5.1.0`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.1.0) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.11...v5.1.0) ✨ We're very excited to announce node-sqlite3's first minor release of v5, packed with features and improvements. If you encounter any problems, please open a detailed issue using the [templates](https://togithub.com/TryGhost/node-sqlite3/issues/new/choose). #### What's Changed - Updated bundled SQLite to v3.39.3 by [@​daniellockyer](https://togithub.com/daniellockyer) - Added ability to receive updates from `sqlite3_update_hook` by [@​soukand](https://togithub.com/soukand) in [https://github.com/TryGhost/node-sqlite3/pull/1267](https://togithub.com/TryGhost/node-sqlite3/pull/1267) - Added support for setting SQLite limits by [@​paulfitz](https://togithub.com/paulfitz) in [https://github.com/TryGhost/node-sqlite3/pull/1548](https://togithub.com/TryGhost/node-sqlite3/pull/1548) - Added library types file by [@​bpasero](https://togithub.com/bpasero) in [https://github.com/TryGhost/node-sqlite3/pull/1527](https://togithub.com/TryGhost/node-sqlite3/pull/1527) - Added `package-lock.json` to `.gitignore` by [@​JoelEinbinder](https://togithub.com/JoelEinbinder) in [https://github.com/TryGhost/node-sqlite3/pull/1628](https://togithub.com/TryGhost/node-sqlite3/pull/1628) - Fixed remaining method declarations by [@​alexanderfloh](https://togithub.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1633](https://togithub.com/TryGhost/node-sqlite3/pull/1633) - Fixed importing `sqlite3#verbose` using destructuring syntax by [@​mahdi-farnia](https://togithub.com/mahdi-farnia) in [https://github.com/TryGhost/node-sqlite3/pull/1632](https://togithub.com/TryGhost/node-sqlite3/pull/1632) #### New Contributors - [@​JoelEinbinder](https://togithub.com/JoelEinbinder) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1628](https://togithub.com/TryGhost/node-sqlite3/pull/1628) - [@​mahdi-farnia](https://togithub.com/mahdi-farnia) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1632](https://togithub.com/TryGhost/node-sqlite3/pull/1632) - [@​soukand](https://togithub.com/soukand) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1267](https://togithub.com/TryGhost/node-sqlite3/pull/1267) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.11...v5.1.0 ### [`v5.0.11`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.11) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.10...v5.0.11) #### What's Changed - Restored compatibility for Alpine 3.15 by [@​daniellockyer](https://togithub.com/daniellockyer) in [https://github.com/TryGhost/node-sqlite3/pull/1626](https://togithub.com/TryGhost/node-sqlite3/pull/1626) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.10...v5.0.11 ### [`v5.0.10`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.10) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.9...v5.0.10) #### What's Changed - Updated bundled SQLite to v3.39.2 by [@​daniellockyer](https://togithub.com/daniellockyer) - Addressed CodeQL warnings by [@​bpasero](https://togithub.com/bpasero) in [https://github.com/TryGhost/node-sqlite3/pull/1614](https://togithub.com/TryGhost/node-sqlite3/pull/1614) #### New Contributors - [@​bpasero](https://togithub.com/bpasero) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1614](https://togithub.com/TryGhost/node-sqlite3/pull/1614) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.9...v5.0.10 ### [`v5.0.9`](https://togithub.com/TryGhost/node-sqlite3/releases/tag/v5.0.9) [Compare Source](https://togithub.com/TryGhost/node-sqlite3/compare/v5.0.8...v5.0.9) #### What's Changed - Updated bundled SQLite to v3.39.1 by [@​daniellockyer](https://togithub.com/daniellockyer) - Fixed method declarations to conform with napi default for methods by [@​alexanderfloh](https://togithub.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1510](https://togithub.com/TryGhost/node-sqlite3/pull/1510) - Fixed propagation of async hook ids through callbacks by [@​alexanderfloh](https://togithub.com/alexanderfloh) in [https://github.com/TryGhost/node-sqlite3/pull/1511](https://togithub.com/TryGhost/node-sqlite3/pull/1511) - Updated sqlcipher homebrew CPPFLAGS location by [@​frovere](https://togithub.com/frovere) in [https://github.com/TryGhost/node-sqlite3/pull/1613](https://togithub.com/TryGhost/node-sqlite3/pull/1613) #### New Contributors - [@​alexanderfloh](https://togithub.com/alexanderfloh) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1510](https://togithub.com/TryGhost/node-sqlite3/pull/1510) - [@​frovere](https://togithub.com/frovere) made their first contribution in [https://github.com/TryGhost/node-sqlite3/pull/1613](https://togithub.com/TryGhost/node-sqlite3/pull/1613) **Full Changelog**: https://github.com/TryGhost/node-sqlite3/compare/v5.0.8...v5.0.9