[Snyk] Upgrade monaco-typescript from 3.3.1 to 4.10.0 #21

MarcelRaschke · 2022-08-20T02:26:04Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade monaco-typescript from 3.3.1 to 4.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 22 versions ahead of your current version.
The recommended version was released 9 months ago, on 2021-11-04.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Override Protection Bypass npm:qs:20170213	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Improper Privilege Management SNYK-JS-SHELLJS-2332187	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-450213	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-SETVALUE-1540541	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-MIXINDEEP-450212	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-INI-1048974	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-469063	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-174183	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-173692	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-ASYNC-2441827	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-AJV-584908	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-HTTPPROXY-569139	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-HIGHLIGHTJS-1045326	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-567742	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Validation Bypass SNYK-JS-KINDOF-537849	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-534988	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-HANDLEBARS-1279029	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Open Redirect SNYK-JS-ECSTATIC-174543	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Prototype Pollution SNYK-JS-DOTPROP-543489	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: monaco-typescript

from monaco-typescript GitHub release notes

Commit messages

Package name: monaco-typescript

4fbf3a1 4.10.0
cfc503d 🆙 `[email protected]`
82dcc20 🆙 `[email protected]`
f650027 🆙 `[email protected]`
49ba01f run prettier
6404233 4.9.1
e3a760e Add `LanguageServiceDefaults.setInlayHintsOptions`
5cba232 4.9.0
4317b53 update deps
d6f84c6 update to latest typescript
66f57d0 Merge pull request editor API microsoft/monaco-editor#84 from paranoidjk/fix-reference
215112d Avoid `Uri.parse` for fileName equality
f2e2b1d Always instantiate `.d.ts` models as `typescript`
6b6fc00 Merge pull request style(monarch.css): Add monospace default for code microsoft/monaco-editor#85 from microsoft/priv_pub
85d22af Publicly expose getters for the lang server and extra libs
c33c68b Merge pull request Inline Results Widget microsoft/monaco-editor#83 from troy351/main
e8f34f3 feat: support find reference to extaLib, treat extraLib as a normal model as well
68f1599 Add type definition of `setInlayHintsOptions`
1a0d39e 4.8.1
632bb45 Update monaco-editor-core to 0.28.1
bc63fbe 4.8.0
e1cadbf Update monaco-editor-core
3ecea82 Merge pull request How to import this library in a create-react-app? microsoft/monaco-editor#82 from Kingwl/inlayhints-support
10e20ba Update ts 4.4