Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: vulnerabilities in @blitz/auth #4082

Merged
merged 3 commits into from
Feb 13, 2023
Merged

fix: vulnerabilities in @blitz/auth #4082

merged 3 commits into from
Feb 13, 2023

Conversation

noxify
Copy link
Contributor

@noxify noxify commented Feb 11, 2023

Closes: ?

What are the changes and their implications?

I just bumped the versions for passport and jsonwebtoken to fix the existing vulnerability CVE-2022-23529

Bug Checklist

  • Changeset added (run pnpm changeset in the root directory)
  • Integration test added (see test docs if needed)

Feature Checklist

@changeset-bot
Copy link

changeset-bot bot commented Feb 11, 2023

🦋 Changeset detected

Latest commit: 91ffa05

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 7 packages
Name Type
@blitzjs/auth Patch
@blitzjs/rpc Patch
@blitzjs/next Patch
@blitzjs/codemod Patch
@blitzjs/config Patch
@blitzjs/generator Patch
blitz Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@noxify
Copy link
Contributor Author

noxify commented Feb 11, 2023

If I missed something, please give me a ping :)

Copy link
Member

@flybayer flybayer left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thank you!!

@flybayer flybayer added the 0 - <(^_^)> - merge it! ✌️ Kodiak automerge label Feb 13, 2023
@kodiakhq kodiakhq bot merged commit 6e88a84 into blitz-js:main Feb 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants