knockout-store
knockout-store copied to clipboard
[Snyk] Security upgrade karma from 3.1.4 to 5.0.8
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
⚠️ Warning
Failed to update the package-lock.json, please update manually before merging.
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: karma
The new version differs by 146 commits.- 16010eb chore(release): 5.0.8 [skip ci]
- a409696 chore: remove unused `grunt lint` command (#3515)
- 47f1cb2 fix(dependencies): update to latest log4js major (#3514)
- b60391f fix(dependencies): update and unlock socket.io dependency (#3513)
- 4d49948 chore(release): 5.0.7 [skip ci]
- f399063 fix: detect type for URLs with query parameter or fragment identifier (#3509)
- 17b50bc chore(release): 5.0.6 [skip ci]
- 0cd696f fix(dependencies): update production dependencies (#3512)
- 7c24a03 chore: fix broken HTML markup in the changelog file (#3507)
- fdc4f9d refactor(test): remove no debug matching option (#3504)
- 35d57e9 chore(release): 5.0.5 [skip ci]
- e99da31 fix(cli): restore command line help contents (#3502)
- 4f2fe56 chore: add Node 14 to the build matrix (#3501)
- 100b227 refactor(test): move execKarma into the World (#3500)
- f375884 refactor(test): reduce execKarma to a reasonable size (#3496)
- a3d1f11 refactor(test): add common method to start server in background (#3495)
- e4a5126 refactor(test): write config file in its own steps (#3494)
- 0bd5c2b refactor(test): adjust sandbox folder location and simplify config logic (#3493)
- b788f94 refactor(test): extract proxy into a separate Given claim (#3492)
- 633f833 chore(release): 5.0.4 [skip ci]
- 810489d refactor(test): migrate Proxy to ES2015 (#3490)
- fa95fa3 fix(browser): make sure that empty results array is still recognized (#3486)
- 255bf67 refactor(test): migrate World to ES2015 (#3489)
- be5db67 chore(test): remove usage of deprecated defineSupportCode (#3488)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report