Update dependency class-transformer to ^0.3.0 [SECURITY]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
class-transformer	^0.2.0 -> ^0.3.0

GitHub Vulnerability Alerts

CVE-2020-7637

class-transformer through 0.2.3 is vulnerable to Prototype Pollution. The 'classToPlainFromExist' function could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload.

---

Release Notes

typestack/class-transformer (class-transformer)

v0.3.1

Compare Source

Added

• table of content added to readme

Changed

• moved from Mocha to Jest
• added Prettier for code formatting
• added Eslint for linting
• updated CI configuration
• removed some unused dev dependencies
• updated dependencies to latest version

Fixed

• circular dependency fixed
• dev dependencies removed from package.json before publishing (no more security warnings)
• transformer order is deterministic now (#​231)
• fix prototype pollution issue (#​367)
• various fixes in documentation

v0.2.3

Compare Source

Changed

• enableImplicitConversion has been added and imlplicit value conversion is disabled by default.
• reverted #​234 - fix: write properties with defined default values on prototype which broke the @Exclude decorator.

v0.2.2

Compare Source

NOTE: This version is deprecated.

This version has introduced a breaking-change when this library is used with class-validator. See #​257 for details.

Added

• implicity type conversion between values.

v0.2.1

Compare Source

NOTE: This version is deprecated.

Added

• add option to strip unkown properties via using the excludeExtraneousValues option

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.