Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #23

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • packages/dai/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: babel-jest The new version differs by 209 commits.
  • 170eee1 fix: expose vm context directly from test envs (#9428)
  • e818dca feat: add support for .mjs config (#9431)
  • 8236779 Fix: Prevent maintaining RegExp state between multiple tests (#9289)
  • f19adb1 chore: bump babel (#9427)
  • 2ece4f9 Do not highlight matched asymmetricMatcher in diffs (#9257)
  • 2839036 chore: sort entries in changelog
  • 7ee717d Fix pretty-format to respect displayName on forwardRef. (#9422)
  • abaea37 Normalize --findRelatedTests paths on win32 platforms (#8961)
  • c8c4c4e jest-snapshot: Fix regression in diff for jest-snapshot-seriali… (#9419)
  • 17f6c83 jest-reporters: Use global coverage thresholds as high watermarks (#9416)
  • 72040d9 Avoid clashes with other globals in type declaration (#9415)
  • 5e5db14 Images of snapshot colors for Jest 25 blog (#9410)
  • a31fc41 jest-core: optimize collecting collectCoverageFrom (#9399)
  • 7f69176 chore: bump deps (#9394)
  • 5236155 chore: fix supporter fetching script on node 8
  • 282f400 chore: fetch open collective supporters via gql api (#9377)
  • 8c20a8d chore: deploy website when website deploy script changes (#9375)
  • 4425a1f fix(website): make sure to fetch supporters when deploying the website
  • 5014025 chore: bump @ types/micromatch to ^4.0.0 (#9369)
  • 9419034 Resolve dynamic dependencies correctly when a mapping exists (#9303)
  • a2fcda6 docs: Use `Object.defineProperty()` for stubbing global propert… (#9288)
  • acb9c09 chore: fix examples dependencies (#9344)
  • bc86f50 Add helpful link to custom transformer in the 'transform' confi… (#9309)
  • 75843e3 chore: refresh lockfile (#9338)

See the full diff

Package name: husky The new version differs by 5 commits.

See the full diff

Package name: jest The new version differs by 22 commits.
  • ff9269b chore: bump most dated deps (#8850)
  • 7594141 chore: upgrade to eslint@6 (#8855)
  • b33ce0d chore: upgrade to micromatch v4 (#8852)
  • d6ff72a chore: add node 12 to CI (#8411)
  • 7e9b4ea chore: upgrade jsdom (#8851)
  • 4bb7a2d Use `weak-napi` instead of `weak` in `jest-leak-detector`
  • ce47c6c Get rid of Node 6 support (#8455)
  • bc5c3c7 jest-snapshot: Remove only the added newlines in multiline snapshots (#8859)
  • d523fa8 bug.md: highlights placeholder should be removed (#8836)
  • 08f109c expect: Display expectedDiff more carefully in toBeCloseTo (#8389)
  • b09de2d chore: bump node-notifier for node v6 support
  • 557a39f fix(linter): Fix linting failure introduced in #8847 😓 (#8849)
  • 012472b fix(docs): Update broken links in docs. (#8847)
  • ee2bea1 chore: sort member in imports (#8846)
  • 9ba4594 add Chinese Jest work with AngularJS tutorial (#8828)
  • 0e5b363 chore: reduce reliance on esModuleInterop (#8842)
  • d69f8d3 getTimerCount will not include cancelled immediates (#8764)
  • b4bd77b Fix grammar: "your jest's config"->"your Jest..." (#8843)
  • 54b3dcf Fix grammar: "a known issues"->"a known issue" (#8844)
  • e76c7da docs: update matchMedia methods (#8835)
  • 23b9860 chore: roll new version of docs
  • 3cdbd55 Release 24.9.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant