egg-boilerplate-d-ts
egg-boilerplate-d-ts copied to clipboard
[Snyk] Security upgrade egg from 2.37.0 to 3.10.0
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- package.json
Vulnerabilities that will be fixed
With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity |
---|---|---|---|---|
![]() |
461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5 |
Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433 |
Yes | No Known Exploit |
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: egg
The new version differs by 60 commits.- df1148f Release 3.10.0
- 7b8edbf feat: use egg-core@5 (#5111)
- 4b8de60 docs: correct word (#4965)
- 98e9db0 test: add missing deps for unittest (#5110)
- 73c96fd Release 3.9.2
- 713a081 fix: currentContext typo (#5107)
- af78b29 Release 3.9.1
- 237306c test: no lock file (#5105)
- fb21c9f Release 3.9.1
- 6dc86f5 test: use artusjs/github-actions to run CI (#5103)
- 13bbe6c fix: Enable auto npm release workflow (#5102)
- 2c4eb9c 🐛 FIX: Should import types from urllib-next root path (#5101)
- 53ada86 Release 3.9.0 (#5100)
- af12069 chore: update workflow for gh-pages (#5098)
- 344139e 🐛 FIX: Typo on HttpClient request (#5097)
- 1021faf 👌 IMPROVE: Keep more compatible d.ts on httpclient request (#5092)
- 9d6acfd 📦 NEW: Run async function in the anonymous context scope (#5094)
- 5128bb9 Release 3.8.0 (#5089)
- 75d025b 👌 IMPROVE: Upgrade egg-schedule to v4 (#5088)
- 3d2ce91 Release 3.7.0 (#5086)
- e94c7df 📦 NEW: Upgrade egg-logger v3 to enable localStorage (#5085)
- c76e16c 📖 DOC: Use @ eggjs/tsconfig for tsconfig.json (#5066)
- 9a83bbe chore: Change version to 3.6.0
- 51c78c0 Release 3.6.0 (#5081)
Check the changes in this PR to ensure they won't cause issues with your project.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons: