[Snyk] Upgrade jayson from 3.2.0 to 3.7.0 #1

BitcoinOutput · 2023-07-16T05:20:34Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade jayson from 3.2.0 to 3.7.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 18 versions ahead of your current version.
The recommended version was released a year ago, on 2022-08-12.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Command Injection SNYK-JS-LODASH-1040724	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	467/1000 Why? Proof of Concept exploit, CVSS 7.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: jayson

3.7.0 - 2022-08-12
bump version to 3.7.0
3.6.7 - 2022-08-12
bump to v3.6.7
3.6.6 - 2021-12-15
bump version to 3.6.6
3.6.5 - 2021-10-12
bump to v3.6.5
3.6.4 - 2021-06-26
Bump version to 3.6.4
3.6.3 - 2021-05-21
Merge branch 'master' of github.com:tedeh/jayson
3.6.2 - 2021-04-30
bump version to 3.6.2
3.6.1 - 2021-04-28
bump version to 3.6.1
3.5.2 - 2021-04-25
bump version 3.5.2
3.5.1 - 2021-04-25
3.4.4 - 2020-12-18
bump to version 3.4.4
3.3.4 - 2020-08-22
3.3.3 - 2020-06-08
3.3.2 - 2020-06-08
3.3.1 - 2020-05-28
3.3.0 - 2020-04-22
3.2.2 - 2020-04-22
3.2.1 - 2020-04-15
3.2.0 - 2019-11-27

from jayson GitHub release notes

Commit messages

Package name: jayson

8d788a2 bump version to 3.7.0
bbed54b add Server.prototype.callp method that returns a promise which closes Merge master into milestone/2.1.0 mimblewimble/grin-wallet#182
1d2308e move __some__ ts definitions to dev dependencies
7296fad bump to v3.6.7
af022f1 update README
511a309 Merge pull request Owner API should leverage VersionedSlate and not Slate directly mimblewimble/grin-wallet#201 from tedeh/dependabot/npm_and_yarn/path-parse-1.0.7
7587f62 Merge pull request use VersionedSlate for the owner_rpc api mimblewimble/grin-wallet#202 from tedeh/dependabot/npm_and_yarn/glob-parent-5.1.2
4fb0e54 Merge pull request Fix typos in subcommand descriptions mimblewimble/grin-wallet#208 from tedeh/dependabot/npm_and_yarn/moment-2.29.4
0386653 travis remove node 18
f404ba1 travis update node versions
80a192d Bump moment from 2.29.2 to 2.29.4
6a94e22 upgrade typescript and add tests for constructorless instantiation
6f3885a Constructors can now be invoked without 'new'
b400e93 Merge branch 'master' of github.com:tedeh/jayson
b860c04 remove fathom
260fffc Bump glob-parent from 5.1.1 to 5.1.2
21de441 Merge pull request Store XORed wallet seed in-mem mimblewimble/grin-wallet#200 from tedeh/dependabot/npm_and_yarn/ansi-regex-3.0.1
41cd312 Merge pull request Merge milestone/2.1.0 into master mimblewimble/grin-wallet#199 from tedeh/dependabot/npm_and_yarn/postcss-7.0.39
a2a9123 Bump path-parse from 1.0.6 to 1.0.7
fb4a941 Merge pull request Please provide 32bit binaries for Windows mimblewimble/grin-wallet#197 from tedeh/dependabot/npm_and_yarn/moment-2.29.2
4f4c03d Bump ansi-regex from 3.0.0 to 3.0.1
587bdca Bump postcss from 7.0.35 to 7.0.39
04fb69b Merge pull request coinbase transaction not showing until wallet restore mimblewimble/grin-wallet#198 from tedeh/dependabot/npm_and_yarn/minimist-1.2.6
c945f74 Bump minimist from 1.2.5 to 1.2.6