doctor icon indicating copy to clipboard operation
doctor copied to clipboard
verified publisher icon estruyf

[Snyk] Security upgrade @pnp/cli-microsoft365 from 3.7.0-beta.b01397d to 3.7.0

Open snyk-bot opened this issue 4 years ago • 1 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5		 Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908		 No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @pnp/cli-microsoft365 The new version differs by 24 commits.
  • 0731a34 Updates release notes
  • 3fcc7ce Extends spfx doctor with support for SPFx v1.12. Closes #2173
  • 78619f9 Adds support for upgrading SPFx projects to v1.12. Closes #2154
  • bbd07ba Updates release notes
  • d469cde Add site external users report sample. Closes #2277
  • bb5c52d Adds the 'Delete all Microsoft 365 groups and SharePoint sites' sample. Closes #2278
  • 713002b Updates release notes
  • 03aeb2c Updates product name from 'Microsoft Flow' to 'Power Automate'. Closes #2259
  • 0994167 Adds the `spo site apppermission get` command. Closes #2207
  • e182711 Adds the 'List site collections and their lists' sample script. Closes #2272
  • fd082c3 Updates release notes
  • 91e244e Adds the `teams conversationmember add` command. Closes #1878
  • a166647 Extends `aad o365group remove` with skipRecycleBin. Closes #1986
  • 1f77da9 Updates release notes
  • 0bfaa70 Adds the 'Provision a Team with channels and assign a custom icon' sample. Closes #2148
  • ed02913 Adds the `cli config set` command. Closes #1945
  • 89cbe45 Updates release notes
  • dada231 Moves `spo page list` to use pages API. Closes #2241
  • 6ae76e4 Adds Remote Development container. Closes #1832
  • 39ebbbb Updates release notes
  • 9c9ba04 Adds the `spo site apppermission list` command. Closes #2206
  • 97a77f3 Updates dependencies
  • 110642a Updates release notes
  • c026445 Adds missing includeOndriveSites option to `spo site classic list` docs. Closes #2234

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

snyk-bot avatar Sep 15 '21 22:09 snyk-bot

This pull request is being automatically deployed with Vercel (learn more).
To see the status of your deployment, click below or on the icon next to each commit.

🔍 Inspect: https://vercel.com/estruyf/doctor/FoKdLKesdPsTv3Y3wHj2NEMksRY5
✅ Preview: https://doctor-git-snyk-fix-437b39ae654ca7b48172621e25974ce3-estruyf.vercel.app

vercel[bot] avatar Sep 15 '21 22:09 vercel[bot]