Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to fix 12 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.json
package-lock.json
Vulnerabilities that will be fixed with an upgrade:
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-567746
SNYK-JS-Y18N-1021887
SNYK-JS-UNDERSCORE-1080984
SNYK-JS-LODASH-6139239
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-ASYNC-2441827
SNYK-JS-SEMVER-3247795
SNYK-JS-LODASH-608086
SNYK-JS-YARGSPARSER-560381
SNYK-JS-COLORSTRING-1082939
SNYK-JS-LODASH-1018905
Release notes
Package name: ping
Restrict files being published by npm publish
updated version
Version v0.4.0 release
Package name: winston
Compared to v3.3.3, this version fixes some issues and includes some updates to project infrastructure,
such as replacing Travis with Github CI and dependabot configuration.
There have also been several relatively minor improvements to documentation, and incorporation of some updated dependencies.
Dependency updates include a critical bug fix [#2008] in response to self-vandalism by the author of a dependency.
v3.3.2...v3.3.3
v3.3.1...v3.3.2
info.message
andmeta.message
(#1740) 227ca0acreateLogger
type (#1807) ef97171v3.3.0...v3.3.1
require
change (#1754) 73ae01fnpm
logging levels on README.md (#1737) 7bb258cLogDNA Winston
Transport (#1610) 8f4cddcchild
on default logger (#1603) 80d34393.2.1...v3.3.0
Version 3.2.1
Package name: winston-daily-rotate-file
This release removes support for winston@2. If you're using this version of winston, please do not upgrade to this release, and instead remain on
winston-daily-rotate-file@3
.3.10.0
Package name: yargs
17.6.0 (2022-10-01)
Features
Bug Fixes
Bug Fixes
17.5.0 (2022-05-11)
Features
Bug Fixes
17.4.1 (2022-04-09)
Bug Fixes
17.4.0 (2022-03-19)
Features
Bug Fixes
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Code Injection
[//]: # ...