mpbuild icon indicating copy to clipboard operation
mpbuild copied to clipboard

[Snyk] Security upgrade dumi from 1.1.54 to 2.0.0

Open ximing opened this issue 1 year ago • 1 comments

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • packages/website/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 658/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: dumi The new version differs by 250 commits.
  • 69fbd91 build: release 2.0.0
  • 8f03c4b chore: update umi version
  • b784efb docs: complete docs for release (#1275)
  • 353d365 build: release 2.0.0-rc.16
  • 1af245c feat: add rtl support for default theme
  • 78e5b12 docs: update group qrcode (#1273)
  • dc5251e build: release 2.0.0-rc.15
  • 0f30b9a feat: mobile devices responsive for demo grid
  • 1dec868 fix: wrong regexp for safari browser
  • 416cc9c build: release 2.0.0-rc.14
  • eb7e431 fix: compatible with trailing slash url
  • fb5d11f refactor: search worker compatible with ssr
  • 638885d refactor: improve ux for search bar result
  • 6d8b941 perf: use service worker for useSiteSearch api
  • 8d4ad3f fix: font color may lost bug for Container component
  • 3d71a04 fix: missing router base for demo url
  • 592e7e3 refactor: disable did you know from umi
  • c97bd5d fix: extraRoutePaths from default config are lost
  • 273680e fix: style tag may not working in markdown
  • 0f36a5d feat: support open in stackblitz (#1271)
  • 25f9ad0 test: update embed case
  • a411baa build: release 2.0.0-rc.11
  • 423dc3a fix: unexpected lowercase for locale routes
  • 4472818 fix: demo render failed on windows os

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

ximing avatar Dec 14 '23 15:12 ximing

Seems you are using me but didn't get OPENAI_API_KEY seted in Variables/Secrets for this repo. you could follow readme for more information

cr-gpt[bot] avatar Dec 14 '23 15:12 cr-gpt[bot]