nest icon indicating copy to clipboard operation
nest copied to clipboard

chore(deps): update dependency mysql2 to v3.9.7 [security]

Open renovate[bot] opened this issue 1 year ago • 2 comments

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
mysql2 (source) 3.9.6 -> 3.9.7 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.


Release Notes

sidorares/node-mysql2 (mysql2)

v3.9.7

Compare Source

Bug Fixes

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • [ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] avatar Apr 23 '24 23:04 renovate[bot]

âš  Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

â™» Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @nestjs/[email protected]
npm error Found: [email protected]
npm error node_modules/ts-morph
npm error   dev ts-morph@"22.0.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peerOptional ts-morph@"^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^20.0.0 || ^21.0.0" from @nestjs/[email protected]
npm error node_modules/@nestjs/graphql
npm error   dev @nestjs/graphql@"12.1.1" from the root project
npm error   peer @nestjs/graphql@"^12.0.0" from @nestjs/[email protected]
npm error   node_modules/@nestjs/apollo
npm error     dev @nestjs/apollo@"12.1.0" from the root project
npm error
npm error Conflicting peer dependency: [email protected]
npm error node_modules/ts-morph
npm error   peerOptional ts-morph@"^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^20.0.0 || ^21.0.0" from @nestjs/[email protected]
npm error   node_modules/@nestjs/graphql
npm error     dev @nestjs/graphql@"12.1.1" from the root project
npm error     peer @nestjs/graphql@"^12.0.0" from @nestjs/[email protected]
npm error     node_modules/@nestjs/apollo
npm error       dev @nestjs/apollo@"12.1.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2024-05-02T08_56_46_290Z-eresolve-report.txt

npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-05-02T08_56_46_290Z-debug-0.log

renovate[bot] avatar Apr 23 '24 23:04 renovate[bot]

Pull Request Test Coverage Report for Build ff63b8bb-8319-4abb-912f-628bb0b7af54

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 92.124%

Totals Coverage Status
Change from base Build b32e22d6-f72e-486a-85a2-044c2b5df08f: 0.0%
Covered Lines: 6737
Relevant Lines: 7313

💛 - Coveralls

coveralls avatar Apr 23 '24 23:04 coveralls