Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade fast-check from 1.24.2 to 3.1.1 #10

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade fast-check from 1.24.2 to 3.1.1 #10

wants to merge 1 commit into from
+1 −1

Conversation

MarcelRaschke
Copy link
Member

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade fast-check from 1.24.2 to 3.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 69 versions ahead of your current version.
  • The recommended version was released 25 days ago, on 2022-07-26.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TMPL-1583443		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Arbitrary File Write
SNYK-JS-TAR-1579155		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579155		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579152		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-TAR-1579147		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536531		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Overwrite
SNYK-JS-TAR-1536528		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-NTHCHECK-1586032		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Arbitrary File Write
SNYK-JS-NPMCLIARBORIST-1579181		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Arbitrary File Write
SNYK-JS-NPMCLIARBORIST-1579165		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-NORMALIZEURL-1296539		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-567746		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Command Injection
SNYK-JS-LODASH-1040724		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-INI-1048974		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-AJV-584908		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TERSER-2806366		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PROMPTS-1729737		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-PATHVAL-596926		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Denial of Service (DoS)
SNYK-JS-NWSAPI-2841516		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Command Injection
SNYK-JS-NPMCLIGIT-1536784		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Command Injection
SNYK-JS-NODENOTIFIER-1035794		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Reverse Tabnabbing
SNYK-JS-ISTANBULREPORTS-2328088		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Open Redirect
SNYK-JS-GOT-2932019		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2332181		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Prototype Pollution
SNYK-JS-FLAT-596927		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-TAR-1536758		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-2429795		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 Proof of Concept
Information Exposure
SNYK-JS-FOLLOWREDIRECTS-2396346		 472/1000
Why? Proof of Concept exploit, CVSS 7.3		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: fast-check
  • 3.1.1 - 2022-07-26

    Fixes

    • (PR#3066) Bug: Export package.json
    • (PR#3070) Bug: Support __proto__ as key in record
    • (PR#3068) Test: Fix test comparing stringify and JSON.stringify
    • (PR#3069) Test: Fix tests on record wrongly manipulating __proto__
  • 3.1.0 - 2022-07-22

    [Code][Diff]

    Features

    • (PR#2975) Sanitize constraints used internally by "oneof" as much as possible
    • (PR#3048) Add experimental "custom slices" constraint on array
    • (PR#3043) Generate dangerous strings by default

    Fixes

    • (PR#3049) Bug: Fix out-of-range in SlicedBasedGenerator
    • (PR#3050) Bug: Allow strange keys as keys of dictionary
    • (PR#3051) Bug: Better rounding in statistics
    • (PR#3052) CI: Add missing Ubuntu env for e2e
    • (PR#3047) Refactor: Implement sliced based generator for arrays
    • (PR#3059) Script: Add links to buggy PRs in changelog PR
    • (PR#3060) Script: Only commit package.json corresponding to impacted CHANGELOGs
  • 3.0.1 - 2022-06-24

    Basic setup for monorepo
    [Code][Diff]

    Fixes

    • (PR#2986) CI: Switch to Yarn 3 and simple monorepo
    • (PR#2987) CI: Simplify test-bundle script following merge of Yarn 3
    • (PR#2988) CI: Switch to yarn workspace * instead of cd packages/*
    • (PR#2990) CI: Replace npx by yarn dlx
    • (PR#2991) CI: Setup prettier at the root of the project
    • (PR#2992) CI: Drop unneeded benchmarks
    • (PR#2993) CI: Fix script not using the right path
    • (PR#2994) CI: Fix gh-pages publication follwoing move to monorepo
    • (PR#2995) CI: Clean-up .gitignore
    • (PR#2996) CI: Move eslint at top level
    • (PR#2989) CI: Make fast-check self reference itself as a dev dependency
    • (PR#2997) CI: Define top-level script to simplify build and test
    • (PR#2999) CI: Setup for yarn version check
    • (PR#3001) CI: Make use of yarn version for generate changelog
    • (PR#3003) CI: Fix usages of yarn version when generating changelog
    • (PR#3005) CI: Move anything package related next to its package
    • (PR#3008) CI: Check the need for dedupe for each run
    • (PR#3010) CI: Cross-jobs caching for yarn
    • (PR#3011) CI: Enhance and document version related rules for PRs
    • (PR#3014) CI: Run tests against trimmed versions of the packages
    • (PR#3015) CI: Make fast-check's tests rely on its own build
    • (PR#3017) CI: Faster workflow of GH Actions
    • (PR#3023) CI: Factorize test jobs via matrix of GH Actions
    • (PR#3024) CI: Drop es-check related jobs
    • (PR#3032) CI: Handle monorepo in generate changelog
    • (PR#3034) CI: Better links in PR generating changelog
    • (PR#3037) CI: Adapt build script to publish any package
    • (PR#3039) CI: Also commit .yarn/versions with changelogs
    • (PR#3000) Doc: Default to readme from packages/fast-check
    • (PR#3006) Doc: Start following all-contributors specification
    • (PR#3007) Doc: Rework the "bug discovered with fast-check" section of the README
    • (PR#3031) Doc: Add missing README files on bundle related tests
    • (PR#2982) Move: Move example/ to examples/
    • (PR#2983) Move: Move part of test/ into packages/test-bundle-*
    • (PR#2984) Move: Move part of source code into packages/fast-check
    • (PR#2977) Refactor: Simplify logic to read constraints for commands
    • (PR#3016) Test: Check SHA1 of produced bundle in E2E tests
  • 3.0.0 - 2022-05-25
  • 3.0.0-alpha.2.25.0.0 - 2022-05-05
  • 3.0.0-alpha.2.24.0.0 - 2022-05-05
  • 3.0.0-alpha.2.23.0.0 - 2022-05-05
  • 3.0.0-alpha.2.22.0.0 - 2022-05-04
  • 3.0.0-alpha.2.21.0.0 - 2022-05-03
  • 3.0.0-alpha.2.20.0.0 - 2022-05-03
  • 3.0.0-alpha.2.19.0.1 - 2021-12-23
  • 3.0.0-alpha.2.19.0.0 - 2021-11-03
  • 3.0.0-alpha.2.18.0.0 - 2021-11-03
  • 3.0.0-alpha.2.17.0.0 - 2021-07-29
  • 3.0.0-alpha.2.16.0.0 - 2021-07-29
  • 3.0.0-alpha.2.15.0.0 - 2021-07-29
  • 3.0.0-alpha.2.14.0.0 - 2021-07-26
  • 3.0.0-alpha.2.13.0.0 - 2021-03-16
  • 2.25.0 - 2022-04-26
  • 2.24.0 - 2022-03-30
  • 2.23.2 - 2022-03-17
  • 2.23.1 - 2022-03-17
  • 2.23.0 - 2022-03-12
  • 2.22.0 - 2022-02-14
  • 2.21.0 - 2022-01-10
  • 2.20.0 - 2021-11-25
  • 2.19.0 - 2021-10-25
  • 2.18.1 - 2021-10-23
  • 2.18.0 - 2021-10-08
  • 2.17.1 - 2021-10-23
  • 2.17.0 - 2021-06-21
  • 2.16.1 - 2021-10-23
  • 2.16.0 - 2021-06-02
  • 2.15.1 - 2021-10-23
  • 2.15.0 - 2021-05-30
  • 2.14.0 - 2021-03-16
  • 2.13.0 - 2021-02-12
  • 2.12.2 - 2021-02-12
  • 2.12.1 - 2021-02-01
  • 2.12.0 - 2021-01-22
  • 2.11.1 - 2021-02-12
  • 2.11.0 - 2021-01-08
  • 2.10.1 - 2021-02-12
  • 2.10.0 - 2020-12-16
  • 2.9.1 - 2021-02-12
  • 2.9.0 - 2020-12-12
  • 2.8.1 - 2021-02-12
  • 2.8.0 - 2020-12-03
  • 2.7.1 - 2021-02-12
  • 2.7.0 - 2020-11-15
  • 2.6.1 - 2020-11-07
  • 2.6.0 - 2020-10-21
  • 2.5.1 - 2020-11-07
  • 2.5.0 - 2020-10-14
  • 2.4.1 - 2020-11-07
  • 2.4.0 - 2020-09-28
  • 2.3.1 - 2020-11-07
  • 2.3.0 - 2020-09-09
  • 2.2.2 - 2020-11-07
  • 2.2.1 - 2020-08-30
  • 2.2.0 - 2020-08-20
  • 2.1.0 - 2020-08-07
  • 2.0.0 - 2020-07-25
  • 2.0.0-alpha.1.26.0.0 - 2020-07-11
  • 2.0.0-alpha.1.25.1.0 - 2020-06-15
  • 2.0.0-alpha.1.24.1.0 - 2020-04-04
  • 1.26.0 - 2020-07-08
  • 1.25.1 - 2020-06-13
  • 1.25.0 - 2020-06-11
  • 1.24.2 - 2020-04-25
from fast-check GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@snyk-bot
feat: upgrade fast-check from 1.24.2 to 3.1.1

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode
dfe3a56 
Snyk has created this PR to upgrade fast-check from 1.24.2 to 3.1.1.

See this package in npm:
https://www.npmjs.com/package/fast-check

See this project in Snyk:
https://app.snyk.io/org/marcelraschke/project/22346403-8a9e-4aa9-a00f-668fb10adaac?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@MarcelRaschke @snyk-bot