Jérémy Lourenço

fix: CVE-2022-28948 by upgrading go-yaml/yaml

3

This PR fixes https://snyk.io/vuln/SNYK-GOLANG-GOPKGINYAMLV2-2840885 by upgrading `go-yaml/yaml` to `v3`. It is dependent on https://github.com/go-yaml/yaml/pull/856.

Support nested array wildcard deletion

3

This PR supersedes #95 by supporting wildcard deletes at all levels in a `Container`'s hierarchy. `searchStrict` has been refactored and renamed into `searchPaths` to provide return parameters that are both...

This PR makes wildcard searches significantly faster by reducing heap allocations where possible. `searchStrict` logic has been encapsulated in a function that returns `interface{}` instead of `*Container` as the first...

fix(cve): bump busboy to fix CVE-2022-24434

49

This PR bumps `busboy` to at least `1.0.0` to remove `dicer` from the transitive dependencies as it contains a denial of service vulnerability: https://security.snyk.io/vuln/SNYK-JS-DICER-2311764. The remaining of the PR is...

After install `vervet` using the Go toolchain, the version returned is the default `develop`. ```shell $ go install github.com/snyk/vervet/v4/cmd/[email protected] $ vervet --version vervet version develop ``` It should return `vervet...

`snyk.io/api/v1` is the deprecated way to access v1 endpoints. The standard way is now `api.snyk.io/v1`.

 Snyk has created this PR to upgrade multiple dependencies. 👯‍♂ The following dependencies are linked and will therefore be updated together. :information_source: Keep your dependencies up-to-date. This makes it...

 Snyk has created this PR to upgrade multiple dependencies. 👯‍♂ The following dependencies are linked and will therefore be updated together. :information_source: Keep your dependencies up-to-date. This makes it...