parse-server icon indicating copy to clipboard operation
parse-server copied to clipboard

refactor: Upgrade pg-monitor from 2.0.0 to 2.1.0

Open parseplatformorg opened this issue 1 year ago • 2 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade pg-monitor from 2.0.0 to 2.1.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2024-04-07.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: pg-monitor
  • 2.1.0 - 2024-04-07
    • Added GitHub CI
    • Updated dependencies
  • 2.0.0 - 2022-12-30

    Updating to support (and require) pg-promise version 11.

from pg-monitor GitHub release notes
Commit messages
Package name: pg-monitor
  • 265e7f7 finished
  • e679aab Merge branch 'master' of https://github.com/vitaly-t/pg-monitor
  • 4ddbcf8 update
  • 4362ce7 Merge pull request #34 from cone56/patch-1
  • ea0e8c9 Remove statement saying it works with any version of pg-promise

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

parseplatformorg avatar Apr 29 '24 02:04 parseplatformorg

I will reformat the title to use the proper commit message syntax.

Thanks for opening this pull request!

  • ❌ Please link an issue that describes the reason for this pull request, otherwise your pull request will be closed. Make sure to write it as Closes: #123 in the PR description, so I can recognize it.

🎉 This change has been released in version 7.3.0-alpha.3

parseplatformorg avatar Jul 17 '24 17:07 parseplatformorg

🎉 This change has been released in version 7.3.0-beta.1

parseplatformorg avatar Oct 03 '24 19:10 parseplatformorg

🎉 This change has been released in version 7.3.0

parseplatformorg avatar Oct 03 '24 20:10 parseplatformorg