dynamicss
dynamicss copied to clipboard
Published
20 hours ago •
JinSSJ3
JinSSJ3
[Snyk] Fix for 2 vulnerabilities
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
| Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
|---|---|---|---|---|
 |
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Uncontrolled resource consumption SNYK-JS-BRACES-6838727 |
Yes | No Known Exploit |
|
661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5 |
Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @testing-library/jest-dom
The new version differs by 2 commits.Package name: eslint
The new version differs by 80 commits.- 823b018 8.26.0
- dce6a71 Build: changelog update for 8.26.0
- 6c2be51 Revert "docs: update header (#16403)" (#16451)
- df77409 fix: use `baseConfig` constructor option in FlatESLint (#16432)
- 33668ee fix: Ensure that glob patterns are matched correctly. (#16449)
- 651649b docs: Core concepts page (#16399)
- 4715787 feat: check `Object.create()` in getter-return (#16420)
- e917a9a ci: add node v19 (#16443)
- 740b208 fix: ignore messages without a `ruleId` in `getRulesMetaForResults` (#16409)
- 8f9759e fix: `--ignore-pattern` in flat config mode should be relative to `cwd` (#16425)
- 325ad37 fix: make `getRulesMetaForResults` return a plain object in trivial case (#16438)
- a2810bc fix: Ensure that directories can be unignored. (#16436)
- 631cf72 docs: note --ignore-path not supported with flat config (#16434)
- 1692840 docs: fix syntax in examples for new config files (#16427)
- 28d1902 feat: `no-implicit-globals` supports `exported` block comment (#16343)
- 35916ad fix: Ensure unignore and reignore work correctly in flat config. (#16422)
- 24950b3 docs: update header (#16403)
- 4b70b91 chore: Add VS Code issues link (#16423)
- e940be7 feat: Use ESLINT_USE_FLAT_CONFIG environment variable for flat config (#16356)
- d336cfc docs: Document extending plugin with new config (#16394)
- dd0c58f feat: Swap out Globby for custom globbing solution. (#16369)
- 232d291 chore: suppress a Node.js deprecation warning (#16398)
- 94ba68d 8.25.0
- c705f22 Build: changelog update for 8.25.0
Package name: jest
The new version differs by 76 commits.- 75006e4 v29.0.0
- 7c82a9f chore: update jest-watch-typeahead again
- 352ff29 chore: update changelog for release
- 33ad8c3 docs: Jest 29 blog post (#13103)
- dda77e5 docs: collapse 28.0 and 28.1 docs (#13104)
- c0dc84c chore: update jest-watch-typeahead
- 05f6217 fix: support deep CJS re-exports when using ESM (#13170)
- 490fd88 chore: update yarn (#13169)
- 98936a2 docs: Update Enzyme links to use new URL (#13166)
- 187566a feat(pretty-format): allow to opt out from sorting object keys with `compareKeys: null` (#12443)
- ae2bed7 chore: tweak regex used in e2e tests (#13129)
- 8c56d74 docs: Update Configuration.md for added special notes on usage scenarios for pnpm. (#13115)
- fb1c53d feat(jest-config)!: remove undocumented `collectCoverageOnlyFrom` option (#13156)
- 075b489 fix: ignore `EISDIR` when resolving symlinks (#13157)
- 3bef02e feat(@ jest/test-result, @ jest/types)!: replace `Bytes` and `Milliseconds` types with `number` (#13155)
- 4def94b v29.0.0-alpha.6
- 0f00d4e fix: replace non-CLI `rimraf` usage (#13151)
- 6a90a2c fix: Allow updating inline snapshots when test includes JSX (#12760)
- 983274a feat: Let `babel` find config when updating inline snapshots (#13150)
- d2ff18a chore: make prettierPath optional in `SnapshotState` (#13149)
- 7d8d01c feat(circus): added each to failing tests (#13142)
- a5b52a5 chore(types): separate MatcherContext, MatcherUtils and MatcherState (#13141)
- 79b5e41 chore: get rid of peer dep warning in website
- 812763d chore: enable 'no-duplicate-imports' (#13138)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Uncontrolled resource consumption
