frappe_pwa
frappe_pwa copied to clipboard
[Snyk] Security upgrade snyk from 1.323.1 to 1.680.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
- package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4 |
Open Redirect SNYK-JS-GOT-2932019 |
No | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: snyk
The new version differs by 250 commits.- 34c9347 Merge pull request #2161 from snyk/chore/fix-lerna-release
- faaaa85 chore: update release to use local lerna installation
- bf56735 Merge pull request #2159 from snyk/fix/use-oauth-token-for-analytics
- 14a0b76 fix: use OAUTH token if set for analytics
- 2f32793 Merge pull request #2156 from snyk/test/json-file-output-cleanup
- 271a052 Merge pull request #2160 from snyk/test/flakey-test-232
- a898dfb Merge pull request #2158 from snyk/test/deprecated-mock-server-option
- 37a1fa1 Merge pull request #2152 from snyk/chore/remove-update-notifier
- 25b201c test: use common test setup
- fa5bc2e Merge pull request #2155 from snyk/chore/document-uselocalpackage
- 01e348d Merge pull request #2157 from snyk/test/analytics-fix
- 1fec66e test: use async/await instead of callbacks
- 6b91de7 chore: remove update notifier
- 8e296a6 test: simplify fixture paths
- 39da98f test: remove deprecated option from fake server
- 97f1dc3 test: increase analytics test timeout
- 6573d1b test: remove spy from acceptance test
- aed2812 chore: document useLocalPackage
- 104b07d Merge pull request #2148 from snyk/chore/ci-optimization
- 04d18cd Merge pull request #2121 from snyk/test/color-text-by-severity-test
- 906e766 chore: use lerna from devDeps
- 28b1197 chore: use large resource class
- 338f7a9 Merge pull request #1968 from snyk/chore/jest-27
- f1d45a0 Merge pull request #2145 from snyk/feat/enable-iac-analytics-for-ignore
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: