Yacht
Yacht copied to clipboard
[Snyk] Security upgrade @vue/cli from 4.5.13 to 5.0.1
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- frontend/package.json
- frontend/package-lock.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
591/1000 Why? Recently disclosed, Has a fix available, CVSS 6.1 |
Open Redirect SNYK-JS-EXPRESS-6474509 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @vue/cli
The new version differs by 250 commits.- 92d80a8 v5.0.1
- c913cdc v5.0.0
- e75a288 chore: pre release sync
- e7f07d8 docs: remove `@ next` [skip ci]
- 80bbf38 test: skip nightwatch --parallel test for now
- 9be19f0 test: fix tsx import
- 5cf0e13 feat: bump default typescript version to 4.5
- 22a4a53 chore: dependency maintenance
- 9577cf5 chore: Merge branch 'master' into dev
- 8b5ab22 fix: remove --skip-plugin from arguments passed to the plugins (#6972)
- ff035c6 chore(deps): bump follow-redirects from 1.14.7 to 1.14.8 (#6993)
- d302581 fix: update mini-css-extract-plugin to ^2.5.3 (#6987)
- 2d8fa26 test(nightwatch): skip selenium test for now
- 7a17d98 chore: replace eslint-plugin-graphql with @ graphl-eslint/eslint-plugin
- 75a6d69 v5.0.0-rc.3
- c214c3a chore: pre release sync
- 42fc8d4 docs: add cache-loader and nightwatch breaking changes [skip ci]
- 926855f feat!: make `cache-loader` optional (#6985)
- 342c386 fix: there's a command response format change in nightwatch v2
- b78a003 chore: update web drivers
- 6c91e1a chore: update lockfile
- 37bdc0e chore: remove the console log completely and fix lint error
- 1c1f1ef chore: fix typo (#6964)
- a2b6409 feat: add build stats hash support (#6980)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: