🚨 [security] Update validator 13.5.1 → 13.11.0 (minor)

depfu[bot] commented 1 year ago

🚨 Your current dependencies have known security vulnerabilities 🚨

This dependency update fixes known security vulnerabilities. Please see the details below and assess their impact carefully. We recommend to merge and deploy this as soon as possible!

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ validator (13.5.1 → 13.11.0) · Repo · Changelog

Security Advisories 🚨

🚨 Inefficient Regular Expression Complexity in Validator.js

Impact

Versions of validator prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the rtrim and trim sanitizers.

Patches

The problem has been patched in validator 13.7.0

🚨 Inefficient Regular Expression Complexity in validator.js

validator.js prior to 13.7.0 is vulnerable to Inefficient Regular Expression Complexity

Release Notes

13.11.0

New Features / Validators

#2144 isFreightContainerID: for shipping containers IDs @songyuew

#2188 isMailtoURI @uksarkar

Fixes, New Locales and Enhancements

#2025 isIBAN add MA locale @lroudge

#2117 isCreditCard refactor @pano9000

#2189 isLocale add support for more language tags @kwahome

#2203 isVAT for CU @jimmyorpheus

#2217 isJWT @Prathamesh061

#2222 IsFQDN test enhancements @aalekhpatel07

#2226 isAlpha, isAlphanumeric for kk-KZ @BekStar7

#2229 isEmail support allow_underscores @guspower

#2231 isDate enhance Date declaration compatibility across multiple environments @CiprianS

#2235 isIBAN add white and blacklist options to the isIBAN validator @edilson

#2237 isEmail do not allow non-breaking space in user part @jeremy21212121

isMobilePhone:

#2175 so-SO @ohersi

#2176 fr-CF @cheboi

#2197 es-CU @klaframboise

#2202 pl-PL @czerwony03

#2209 fr-WF @aidos42

#2246 ar-SD @Hussienma

New Contributors 🎉

@ohersi made their first contribution in #2175

@klaframboise made their first contribution in #2197

@aidos42 made their first contribution in #2209

@jimmyorpheus made their first contribution in #2203

@kwahome made their first contribution in #2189

@uksarkar made their first contribution in #2188

@CiprianS made their first contribution in #2231

@BekStar7 made their first contribution in #2226

@jeremy21212121 made their first contribution in #2237

@Prathamesh061 made their first contribution in #2217

@lroudge made their first contribution in #2025

@Hussienma made their first contribution in #2246

@edilson made their first contribution in #2235

@aalekhpatel07 made their first contribution in #2222

@czerwony03 made their first contribution in #2202

@guspower made their first contribution in #2229

Full Changelog: 13.9.0...13.11.0

13.7.0

13.7.0

New Features

#1706 isISO4217, currency code validator @jpaya17

Fixes and Enhancements

#1647 isFQDN: add allow_wildcard option @fasenderos

#1654 isRFC3339: Disallow prepended and appended strings to RFC 3339 date-time @jmacmahon

#1658 maintenance: increase code coverage @tux-tn

#1669 IBAN export list of country codes that implement IBAN @dror-heller @fedeci

#1676 isBoolean: add loose option @brybrophy

#1697 maintenance: fix npm installation error @rubiin

#1708 isISO31661Alpha3: perf @jpaya17

#1711 isDate: allow users to strictly validate dates with . as delimiter @flymans

#1715 isCreditCard: fix for Union Pay cards @shreyassai123

#1718 isEmail: replace all dots in GMail length validation @DasDingGehtNicht

#1721 isURL: add allow_fragments and allow_query_components @cowboy-bebug

#1724 isISO31661Alpha2: perf @jpaya17

#1730 isMagnetURI @tux-tn

#1738 trim: remove regex to prevent ReDOS attack @tux-tn

#1747 maintenance: run scripts in parallel for build and clean @sachinraja

#1748 isURL: higher priority to whitelist @deepanshu2506

#1751 isURL: allow url with colon and no port @MatteoPierro

#1777 isUUID: fix for null version argument @theteladras

#1799 isFQDN: check more special chars @MatteoPierro

#1833 isURL: allow URL with an empty user @MiguelSavignano

#1835 unescape: fixed bug where intermediate string contains escaped @Marcholio

#1836 contains: can check that string contains seed multiple times @Marcholio

#1844 docs: add CDN instructions @luiscobits

#1848 isUUID: add support for validation of v1 and v2 @theteladras

#1941 isEmail: add host_blacklist option @fedeci

New and Improved Locales

isAlpha, isAlphanumeric:

#1716 hi-IN @MiKr13

#1837 fi-FI @Marcholio

isPassportNumber:

#1656 ID @rubiin

#1714 CN @anirudhgiri

#1809 PL @Ronqn

#1810 RU @Theta-Dev

isPostalCode:

#1788 LK @nimanthadilz

isIdentityCard:

#1657 TH @tithanayut

#1745 PL @wiktorwojcik112 @fedeci @tux-tn

#1786 LK @nimanthadilz @tux-tn

#1838 FI @Marcholio

isMobilePhone:

#1679 de-DE @AnnaMariaJansen

#1689 vi-VN @luisrivas

#1695 #1682 zh-CN @laulujan @yisibl

#1734 es-VE @islasjuanp

#1746 nl-BE @divikshrivastava

#1765 es-CU @pasagedev

#1766 es-SV, @hereje

#1767 ar-PS, @brendan-c

#1769 en-BM @HackProAIT

#1770 dz-BT @lakshayr003

#1771 en-BW, @mgndolan

#1772 fr-CM @beckettnormington

#1778 en-PK @ammad20120 @tux-tn

#1780 tk-TM, @Husan-Eshonqulov

#1784 en-GY, @mfkrause

#1785 si-LK @Madhavi96

#1797 fr-PF, @hereje

#1820 en-KI, @c-tanner

#1826 hu-HU @danielTiringer

#1834 fr-BF, en-NA @lakshayr003

#1846 tg-TJ @mgnss

isLicensePlate:

#1565 cs-CZ @filiptronicek

#1790 fi-FI @Marcholio

isVAT:

#1825 NL @zeno4ever

New Contributors 🎉

@jmacmahon made their first contribution in #1654

@drorheller made their first contribution in #1669

@laulujan made their first contribution in #1695

@filiptronicek made their first contribution in #1565

@AnnaMariaJansen made their first contribution in #1679

@luisrivas made their first contribution in #1689

@tithanayut made their first contribution in #1657

@jpaya17 made their first contribution in #1724

@flymans made their first contribution in #1711

@anirudhgiri made their first contribution in #1714

@shreyassai123 made their first contribution in #1715

@MiKr13 made their first contribution in #1716

@DasDingGehtNicht made their first contribution in #1718

@cowboy-bebug made their first contribution in #1721

@sachinraja made their first contribution in #1747

@wiktorwojcik112 made their first contribution in #1745

@divikshrivastava made their first contribution in #1746

@deepanshu2506 made their first contribution in #1748

@fasenderos made their first contribution in #1647

@yisibl made their first contribution in #1682

@MatteoPierro made their first contribution in #1751

@pasagedev made their first contribution in #1765

@theteladras made their first contribution in #1777

@hammad20120 made their first contribution in #1778

@nimanthadilz made their first contribution in #1786

@Marcholio made their first contribution in #1790

@Ronqn made their first contribution in #1809

@danielTiringer made their first contribution in #1826

@HackProAIT made their first contribution in #1769

@MiguelSavignano made their first contribution in #1833

@luiscobits made their first contribution in #1844

@Theta-Dev made their first contribution in #1810

@zeno4ever made their first contribution in #1825

@beckettnormington made their first contribution in #1772

@mgnss made their first contribution in #1846

@lakshayr003 made their first contribution in #1770

Full Changelog: 13.6.1...13.7.0

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

Depfu Status

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands

@depfu rebase
Rebases against your default branch and redoes this update

@depfu recreate
Recreates this PR, overwriting any edits that you've made to it

@depfu merge
Merges this PR once your tests are passing and conflicts are resolved

@depfu cancel merge
Cancels automatic merging of this PR

@depfu close
Closes this PR and deletes the branch

@depfu reopen
Restores the branch and reopens this PR (if it's closed)

@depfu pause
Ignores all future updates for this dependency and closes this PR

@depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR

@depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)