[Snyk] Upgrade: , , semver, uuid, azure-pipelines-task-lib, typed-rest-client #33
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @types/semver from 5.5.0 to 7.5.8.
See this package in npm: https://www.npmjs.com/package/@types/semver
- @types/uuid from 3.4.5 to 10.0.0.
See this package in npm: https://www.npmjs.com/package/@types/uuid
- semver from 5.7.0 to 7.6.3.
See this package in npm: https://www.npmjs.com/package/semver
- uuid from 3.3.2 to 10.0.0.
See this package in npm: https://www.npmjs.com/package/uuid
- azure-pipelines-task-lib from 4.1.0 to 4.16.0.
See this package in npm: https://www.npmjs.com/package/azure-pipelines-task-lib
- typed-rest-client from 1.8.6 to 2.0.2.
See this package in npm: https://www.npmjs.com/package/typed-rest-client
See this project in Snyk:
https://app.snyk.io/org/cachiman-inc/project/62c6e0ba-bb2d-49c8-b2d9-7d64ebce54be?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@types/semver
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
from 5.5.0 to 7.5.8 | 36 versions ahead of your current version
on 2024-02-24
@types/uuid
from 3.4.5 to 10.0.0 | 34 versions ahead of your current version
on 2024-06-20
semver
from 5.7.0 to 7.6.3 | 38 versions ahead of your current version
on 2024-07-16
uuid
from 3.3.2 to 10.0.0 | 22 versions ahead of your current version
on 2024-06-09
azure-pipelines-task-lib
from 4.1.0 to 4.16.0 | 22 versions ahead of your current version | a month ago
on 2024-08-14
typed-rest-client
from 1.8.6 to 2.0.2 | 6 versions ahead of your current version
on 2024-07-08
Issues fixed by the recommended upgrade:
SNYK-JS-MOCKERY-3043117
SNYK-JS-SEMVER-3247795
Release notes
Package name: @types/semver
-
7.5.8 - 2024-02-24
-
7.5.7 - 2024-02-11
-
7.5.6 - 2023-11-21
-
7.5.5 - 2023-11-07
-
7.5.4 - 2023-10-18
-
7.5.3 - 2023-09-25
-
7.5.2 - 2023-09-14
-
7.5.1 - 2023-08-28
-
7.5.0 - 2023-05-08
-
7.3.13 - 2022-10-26
-
7.3.12 - 2022-08-11
-
7.3.11 - 2022-08-10
-
7.3.10 - 2022-06-15
-
7.3.9 - 2021-10-19
-
7.3.8 - 2021-07-23
-
7.3.7 - 2021-07-06
-
7.3.6 - 2021-05-13
-
7.3.5 - 2021-04-26
-
7.3.4 - 2020-09-14
-
7.3.3 - 2020-08-17
-
7.3.2 - 2020-08-13
-
7.3.1 - 2020-06-24
-
7.3.0 - 2020-06-24
-
7.2.0 - 2020-05-13
-
7.1.0 - 2020-01-27
-
6.2.7 - 2023-11-21
-
6.2.6 - 2023-11-07
-
6.2.5 - 2023-10-18
-
6.2.4 - 2023-09-25
-
6.2.3 - 2021-07-06
-
6.2.2 - 2020-09-14
-
6.2.1 - 2020-01-27
-
6.2.0 - 2019-10-25
-
6.0.2 - 2019-09-05
-
6.0.1 - 2019-06-21
-
6.0.0 - 2019-04-01
-
5.5.0 - 2018-01-29
from @types/semver GitHub release notesPackage name: @types/uuid
-
10.0.0 - 2024-06-20
-
9.0.8 - 2024-01-25
-
9.0.7 - 2023-11-07
-
9.0.6 - 2023-10-18
-
9.0.5 - 2023-10-06
-
9.0.4 - 2023-09-14
-
9.0.3 - 2023-08-30
-
9.0.2 - 2023-06-08
-
9.0.1 - 2023-02-22
-
9.0.0 - 2022-11-29
-
8.3.4 - 2022-01-06
-
8.3.3 - 2021-11-17
-
8.3.2 - 2021-11-17
-
8.3.1 - 2021-07-02
-
8.3.0 - 2020-08-12
-
8.0.1 - 2020-08-05
-
8.0.0 - 2020-05-19
-
7.0.8 - 2023-11-07
-
7.0.7 - 2023-10-18
-
7.0.6 - 2023-08-30
-
7.0.5 - 2021-07-02
-
7.0.4 - 2020-05-19
-
7.0.3 - 2020-04-23
-
7.0.2 - 2020-03-17
-
7.0.1 - 2020-03-17
-
7.0.0 - 2020-02-25
-
3.4.13 - 2023-11-07
-
3.4.12 - 2023-10-18
-
3.4.11 - 2023-08-30
-
3.4.10 - 2021-07-02
-
3.4.9 - 2020-04-23
-
3.4.8 - 2020-02-25
-
3.4.7 - 2020-01-28
-
3.4.6 - 2019-10-30
-
3.4.5 - 2019-07-01
from @types/uuid GitHub release notesPackage name: semver
-
7.6.3 - 2024-07-16
-
7.6.2 - 2024-05-09
-
7.6.1 - 2024-05-07
-
7.6.0 - 2024-02-05
-
7.5.4 - 2023-07-07
-
7.5.3 - 2023-06-22
-
7.5.2 - 2023-06-15
-
7.5.1 - 2023-05-12
-
7.5.0 - 2023-04-17
-
7.4.0 - 2023-04-10
-
7.3.8 - 2022-10-04
-
7.3.7 - 2022-04-12
-
7.3.6 - 2022-04-06
-
7.3.5 - 2021-03-23
-
7.3.4 - 2020-12-01
-
7.3.3 - 2020-12-01
-
7.3.2 - 2020-04-14
-
7.3.1 - 2020-04-14
-
7.3.0 - 2020-04-14
-
7.2.3 - 2020-04-13
-
7.2.2 - 2020-04-10
-
7.2.1 - 2020-04-06
-
7.2.0 - 2020-04-06
-
7.1.3 - 2020-02-11
-
7.1.2 - 2020-01-31
-
7.1.1 - 2019-12-17
-
7.1.0 - 2019-12-17
-
7.0.0 - 2019-12-14
-
6.3.1 - 2023-07-10
-
6.3.0 - 2019-07-23
-
6.2.0 - 2019-07-01
-
6.1.3 - 2019-07-01
-
6.1.2 - 2019-06-24
-
6.1.1 - 2019-05-28
-
6.1.0 - 2019-05-22
-
6.0.0 - 2019-03-26
-
5.7.2 - 2023-07-10
-
5.7.1 - 2019-08-12
-
5.7.0 - 2019-03-26
from semver GitHub release notes7.6.3 (2024-07-16)
Bug Fixes
73a3d79#726 optimize Range parsing and formatting (#726) (@ jviide)Documentation
2975ece#719 fix extra backtick typo (#719) (@ stdavis)7.6.2 (2024-05-09)
Bug Fixes
6466ba9#713 lru: use map.delete() directly (#713) (@ negezor, @ lukekarrys)7.6.1 (2024-05-04)
Bug Fixes
c570a34#704 linting: no-unused-vars (@ wraithgar)ad8ff11#704 use internal cache implementation (@ mbtools)ac9b357#682 typo in compareBuild debug message (#682) (@ mbtools)Dependencies
988a8de#709 uninstalllru-cache(#709)3fabe4d#704 remove lru-cacheChores
dd09b60#705 bump @ npmcli/template-oss to 4.22.0 (@ lukekarrys)ec49cdc#701 chore: chore: postinstall for dependabot template-oss PR (@ lukekarrys)b236c3d#696 add benchmarks (#696) (@ H4ad)692451b#688 various improvements to README (#688) (@ mbtools)5feeb7f#705 postinstall for dependabot template-oss PR (@ lukekarrys)074156f#701 bump @ npmcli/template-oss from 4.21.3 to 4.21.4 (@ dependabot[bot])7.6.0 (2024-01-31)
Features
a7ab13a#671 preserve pre-release and build parts of a version on coerce (#671) (@ madtisa, madtisa, @ wraithgar)Chores
816c7b2#667 postinstall for dependabot template-oss PR (@ lukekarrys)0bd24d9#667 bump @ npmcli/template-oss from 4.21.1 to 4.21.3 (@ dependabot[bot])e521932#652 postinstall for dependabot template-oss PR (@ lukekarrys)8873991#652 chore: chore: postinstall for dependabot template-oss PR (@ lukekarrys)f317dc8#652 bump @ npmcli/template-oss from 4.19.0 to 4.21.0 (@ dependabot[bot])7303db1#658 add clean() test for build metadata (#658) (@ jethrodaniel)6240d75#656 add missing quotes in README.md (#656) (@ zyxkad)14d263f#625 postinstall for dependabot template-oss PR (@ lukekarrys)7c34e1a#625 bump @ npmcli/template-oss from 4.18.1 to 4.19.0 (@ dependabot[bot])123e0b0#622 postinstall for dependabot template-oss PR (@ lukekarrys)737d5e1#622 bump @ npmcli/template-oss from 4.18.0 to 4.18.1 (@ dependabot[bot])cce6180#598 postinstall for dependabot template-oss PR (@ lukekarrys)b914a3d#598 bump @ npmcli/template-oss from 4.17.0 to 4.18.0 (@ dependabot[bot])7.5.4 (2023-07-07)
Bug Fixes
cc6fde2#588 trim each range set before parsing (@ lukekarrys)99d8287#583 correctly parse long build ids as valid (#583) (@ lukekarrys)7.5.3 (2023-06-22)
Bug Fixes
abdd93d#571 set max lengths in regex for numeric and build identifiers (#571) (@ lukekarrys)Documentation
bf53dd8#569 add example for>comparator (#569) (@ mbtools)7.5.2 (2023-06-15)
Bug Fixes
58c791f#566 diff when detecting major change from prerelease (#566) (@ lukekarrys)5c8efbc#565 preserve build in raw after inc (#565) (@ lukekarrys)717534e#564 better handling of whitespace (#564) (@ lukekarrys)7.5.1 (2023-05-12)
Bug Fixes
d30d25a#559 show type on invalid semver error (#559) (@ tjenkinson)6.3.1 (2023-07-10)
Bug Fixes
928e56d#591 better handling of whitespace (#591) (@ lukekarrys, @ joaomoreno, @ nicolo-ribaudo)5.7.2 (2023-07-10)
Bug Fixes
2f8fd41#585 better handling of whitespace (#585) (@ joaomoreno, @ lukekarrys)Package name: uuid
-
10.0.0 - 2024-06-09
-
9.0.1 - 2023-09-12
-
9.0.0 - 2022-09-05
-
9.0.0-beta.0 - 2022-08-05
-
8.3.2 - 2020-12-08
-
8.3.2-beta.0 - 2020-11-21
-
8.3.1 - 2020-10-04
-
8.3.0 - 2020-07-27
-
8.3.0-beta.0 - 2020-07-22
-
8.2.0 - 2020-06-23
-
8.2.0-beta.0 - 2020-06-23
-
8.1.0 - 2020-05-20
-
8.0.0 - 2020-04-29
-
8.0.0-beta.0 - 2020-04-29
-
7.0.3 - 2020-03-31
-
7.0.2 - 2020-03-04
-
7.0.2-beta.0 - 2020-03-02
-
7.0.1 - 2020-02-25
-
7.0.0 - 2020-02-24
-
7.0.0-beta.0 - 2020-02-17
-
3.4.0 - 2020-01-16
-
3.3.3 - 2019-08-19
-
3.3.2 - 2018-06-28
from uuid GitHub release noteschore: typo in CHANGELOG
chore(release): 9.0.1
chore(release): 9.0.0
chore(release): 8.3.2
chore(release): 8.3.1
chore(release): 8.3.0
chore(release): 8.2.0
chore(release): 8.1.0
chore(release): 8.0.0
chore(release): 7.0.3
Package name: azure-pipelines-task-lib
-
4.16.0 - 2024-08-14
-
4.15.0 - 2024-07-29
-
4.14.0 - 2024-07-29
-
4.13.0 - 2024-05-27
-
4.12.1 - 2024-05-22
-
4.12.0 - 2024-05-02
-
4.11.0 - 2024-04-11
-
4.10.1 - 2024-03-18
-
4.10.0 - 2024-02-26
-
4.9.1 - 2024-02-15
-
4.9.0 - 2024-01-30
-
4.8.2 - 2024-01-22
-
4.8.1 - 2024-01-18
-
4.8.0 - 2024-01-16
-
4.7.0 - 2023-11-09
-
4.6.1 - 2023-10-12
-
4.6.0 - 2023-09-19
-
4.5.0 - 2023-08-29
-
4.4.0 - 2023-06-16
-
4.3.1 - 2023-03-20
-
4.3.0 - 2023-02-27
-
4.2.0 - 2023-01-09
-
4.1.0 - 2022-12-01
from azure-pipelines-task-lib GitHub release notesPackage name: typed-rest-client
-
2.0.2 - 2024-07-08
- Add
-
2.0.1 - 2024-06-26
- Bump the qs version to fix vulnerability issue (#371) (2024-06-26)
-
2.0.0 - 2024-06-04
- Update autoAssignABTT.yml workflow (#352) (2023-03-15)
- Update azure devops pipeline and fix tests (#357) (2023-06-27)
- Add publish stage to pipeline (#358) (2023-06-28)
- Add pool to Publish_package job (#359) (2023-06-28)
- Add publishToNpm parameter (#360) (2023-06-28)
- Add release notes automatization (#365) (2023-11-30)
- Update github workflows to avoid issues with GITHUB_TOKEN (#366) (2024-01-26)
- 1ES Pipelines Template Adoption (#367) (2024-02-12)
- 1ES Migration (#369) (2024-03-08)
- Fix CG for typed-rest-client (#370) (2024-06-04)
-
1.8.11 - 2023-06-28
- migrate to Node 16 (#332) (2022-07-19)
- Removed mention of node 4 support (#335) (2022-07-20)
- Update samples (#336) (2022-07-27)
- Add webpack sample (#337) (2022-07-27)
- [Repo config] Add
- Unable to read error message from response header (#339) (2022-10-06)
- Update autoAssignABTT.yml workflow (#352) (2023-03-15)
- Update azure devops pipeline and fix tests (#357) (2023-06-27)
- Add publish stage to pipeline (#358) (2023-06-28)
- Add pool to Publish_package job (#359) (2023-06-28)
- Add publishToNpm parameter (#360) (2023-06-28)
- Add release notes automatization (#365) (2023-11-30)
- Update github workflows to avoid issues with GITHUB_TOKEN (#366) (2024-01-26)
- 1ES Pipelines Template Adoption (#367) (2024-02-12)
- 1ES Migration (#369) (2024-03-08)
-
1.8.10 - 2023-06-27
-
1.8.9 - 2022-05-25
-
1.8.6 - 2021-08-30
from typed-rest-client GitHub release notesEHOSTUNREACHtoNetworkRetryErrorslist (#373) (2024-07-08)IMPORTANT NOTE:
Starting from version 2.0.0 the package requires node version 16 and upper.
Version changes:
CODEOWNERSfile (#338) (2022-08-23)Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: