Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade tweetnacl-util from 0.15.0 to 0.15.1 #9

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

X-oss-byte
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade tweetnacl-util from 0.15.0 to 0.15.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 4 years ago, on 2020-01-29.
Release notes
Package name: tweetnacl-util
  • 0.15.1 - 2020-01-29

    0.15.1

  • 0.15.0 - 2017-03-19
    • Added validation of base64-encoded input: decodeBase64 will throw if the string contains invalid characters. If you want to ignore whitespace, you should remove it before passing to decoder. (Previously only browser version would throw in this case. Turns out Node.js Buffer doesn't validate encoding at all, for "performance" reasons — that is, it returns some kind of output even for invalid input — for example Buffer.from("бред", "base64") results in <Buffer d7 9e> — which is ridiculous.)
    • Buffer.from is now used on modern Node.js versions (versions that don't have from will continue using the deprecated constructor.)

    This is the last version to be published on Bower: for simplicity, newer versions will only be published on NPM.

from tweetnacl-util GitHub release notes
Commit messages
Package name: tweetnacl-util

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@stackblitz
Copy link

stackblitz bot commented Aug 12, 2023

Review PR in StackBlitz Codeflow Run & review this pull request in StackBlitz Codeflow.

@socket-security
Copy link

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
tweetnacl-util 0.15.0...0.15.1 None +0/-0 8.14 kB dchest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants