[Snyk] Upgrade: , commander, inquirer, moment, octokit, pretty-bytes, terminal-kit#300
Open
X-oss-byte wants to merge 1 commit intomasterfrom
Open
[Snyk] Upgrade: , commander, inquirer, moment, octokit, pretty-bytes, terminal-kit#300X-oss-byte wants to merge 1 commit intomasterfrom
X-oss-byte wants to merge 1 commit intomasterfrom
Conversation
Snyk has created this PR to upgrade:
- @octokit/rest from 16.39.0 to 16.43.2.
See this package in npm: https://www.npmjs.com/package/@octokit/rest
- commander from 4.1.0 to 4.1.1.
See this package in npm: https://www.npmjs.com/package/commander
- inquirer from 7.0.4 to 7.3.3.
See this package in npm: https://www.npmjs.com/package/inquirer
- moment from 2.29.4 to 2.30.1.
See this package in npm: https://www.npmjs.com/package/moment
- octokit from 1.0.0-hello-world to 1.8.1.
See this package in npm: https://www.npmjs.com/package/octokit
- pretty-bytes from 5.3.0 to 5.6.0.
See this package in npm: https://www.npmjs.com/package/pretty-bytes
- terminal-kit from 2.1.8 to 2.11.7.
See this package in npm: https://www.npmjs.com/package/terminal-kit
See this project in Snyk:
https://app.snyk.io/org/sammyfilly/project/d6ea63e1-524f-4ec8-8d41-420cdc49a4ba?utm_source=github&utm_medium=referral&page=upgrade-pr
|
|
|
![sourcery-ai[bot]](https://avatars.githubusercontent.com/in/48477?s=60&v=4){kind=small}
There was a problem hiding this comment.
We have skipped reviewing this pull request. Here's why:
- It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
- We don't review packaging changes - Let us know if you'd like us to change this.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@octokit/rest
from 16.39.0 to 16.43.2 | 12 versions ahead of your current version | 4 years ago
on 2020-06-24
commander
from 4.1.0 to 4.1.1 | 1 version ahead of your current version | 5 years ago
on 2020-02-03
inquirer
from 7.0.4 to 7.3.3 | 9 versions ahead of your current version | 4 years ago
on 2020-07-23
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 9 months ago
on 2023-12-27
octokit
from 1.0.0-hello-world to 1.8.1 | 21 versions ahead of your current version | 2 years ago
on 2022-06-22
pretty-bytes
from 5.3.0 to 5.6.0 | 4 versions ahead of your current version | 4 years ago
on 2021-02-21
terminal-kit
from 2.1.8 to 2.11.7 | 48 versions ahead of your current version | 2 years ago
on 2022-09-22
Release notes
Package name: @octokit/rest
-
16.43.2 - 2020-06-24
- typescript: return type for
-
16.43.1 - 2020-02-03
-
16.43.0 - 2020-02-03
-
16.42.2 - 2020-02-03
-
16.42.1 - 2020-02-03
-
16.42.0 - 2020-02-03
-
16.41.2 - 2020-02-02
-
16.41.1 - 2020-01-31
-
16.41.0 - 2020-01-31
-
16.40.2 - 2020-01-30
-
16.40.1 - 2020-01-29
-
16.40.0 - 2020-01-28
-
16.39.0 - 2020-01-27
from @octokit/rest GitHub release notes16.43.2 (2020-06-24)
Bug Fixes
octokit.hook.wrapcallback (#1770) (0798dcd)Package name: commander
-
4.1.1 - 2020-02-03
- TypeScript definition for
-
4.1.0 - 2020-01-06
- two routines to change how option values are handled, and eliminate name clashes with command properties (#933 #1102)
- see storeOptionsAsProperties and passCommandToAction in README
- Remove trailing blanks from wrapped help text (#1096)
- update dependencies
- extend security coverage for Commander 2.x to 2020-02-03
- improvements to README
- improvements to TypeScript definition documentation
- move old versions out of main CHANGELOG
- removed explicit use of
from commander GitHub release notesFixed
.action()should include Promise for async ([#1157])Added
.parseAsyncto use instead of.parseif supply async action handlers (#806 #1118)Fixed
Changed
ts-nodein testsPackage name: inquirer
-
7.3.3 - 2020-07-23
-
7.3.2 - 2020-07-13
-
7.3.1 - 2020-07-10
-
7.3.0 - 2020-07-02
-
7.2.0 - 2020-06-15
-
7.1.0 - 2020-03-10
-
7.0.7 - 2020-03-10
-
7.0.6 - 2020-03-04
-
7.0.5 - 2020-02-29
-
7.0.4 - 2020-01-25
from inquirer GitHub release notesPackage name: moment
-
2.30.1 - 2023-12-27
-
2.30.0 - 2023-12-26
-
2.29.4 - 2022-07-06
from moment GitHub release notes2.30.1
2.30.0
2.29.4
Package name: octokit
-
1.8.1 - 2022-06-22
- set correct user agent (#2231) (de8c3a5)
-
1.8.0 - 2022-06-15
- remove defunkt
- remove defunkt
-
1.7.2 - 2022-06-08
- re-enable throttling plugin (#2224) (124a9f0)
-
1.7.1 - 2021-11-22
- docs: correct proxy servers headline not rendering (#2169) (163f925)
-
1.7.0 - 2021-10-07
-
1.6.2 - 2021-09-30
- removes defunkt endpoints:
- deps:
-
1.6.1 - 2021-09-24
- graduate previews
-
1.6.0 - 2021-09-22
-
1.5.0 - 2021-08-31
- typescript:
- typescript: fix type for
-
1.4.0 - 2021-08-10
- typescript:
-
1.3.0 - 2021-08-03
-
1.2.0 - 2021-08-02
-
1.1.0 - 2021-06-23
-
1.0.6 - 2021-06-11
-
1.0.5 - 2021-05-18
-
1.0.4 - 2021-05-07
-
1.0.3 - 2021-04-18
-
1.0.3-debug.1 - 2021-04-25
-
1.0.2 - 2021-04-15
-
1.0.1 - 2021-04-13
-
1.0.0 - 2021-04-08
-
1.0.0-hello-world - 2018-05-31
from octokit GitHub release notes1.8.1 (2022-06-22)
Bug Fixes
Features
.rest.dependabot.addSelectedRepoToOrgSecret().rest.dependabot.removeSelectedRepoFromOrgSecret().rest.teams.listLinkedExternalIdpGroupsToTeamForOrg().rest.teams.linkExternalIdpGroupToTeamForOrg().rest.teams.unlinkExternalIdpGroupFromTeamForOrg().rest.enterpriseAdmin.listLabelsForSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.addCustomLabelsToSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.setCustomLabelsForSelfHostedRunnerForEnterprise().rest.enterpriseAdmin.removeAllCustomLabelsFromSelfHostedRunnerForEnterprise().rest.actions.listLabelsForSelfHostedRunnerForOrg().rest.actions.addCustomLabelsToSelfHostedRunnerForOrg().rest.actions.setCustomLabelsForSelfHostedRunnerForOrg().rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForOrg().rest.actions.listLabelsForSelfHostedRunnerForRepo().rest.actions.addCustomLabelsToSelfHostedRunnerForRepo().rest.actions.setCustomLabelsForSelfHostedRunnerForRepo().rest.actions.removeAllCustomLabelsFromSelfHostedRunnerForRepo().rest.codespaces.listInRepositoryForAuthenticatedUser().rest.codespaces.createWithRepoForAuthenticatedUser().rest.repos.listTagProtection().rest.repos.createTagProtection().rest.codespaces.listForAuthenticatedUser().rest.codespaces.createForAuthenticatedUser().rest.codespaces.listSecretsForAuthenticatedUser().rest.codespaces.getPublicKeyForAuthenticatedUser().rest.codespaces.getSecretForAuthenticatedUser().rest.codespaces.createOrUpdateSecretForAuthenticatedUser().rest.codespaces.deleteSecretForAuthenticatedUser().rest.codespaces.listRepositoriesForSecretForAuthenticatedUser().rest.codespaces.setRepositoriesForSecretForAuthenticatedUser().rest.codespaces.addRepositoryForSecretForAuthenticatedUser().rest.codespaces.removeRepositoryForSecretForAuthenticatedUser().rest.codespaces.getForAuthenticatedUser().rest.codespaces.updateForAuthenticatedUser().rest.codespaces.deleteForAuthenticatedUser().rest.codespaces.exportForAuthenticatedUser().rest.codespaces.getExportDetailsForAuthenticatedUser().rest.codespaces.codespaceMachinesForAuthenticatedUser().rest.codespaces.startForAuthenticatedUser().rest.codespaces.stopForAuthenticatedUser().rest.dependabot.getOrgSecret().rest.dependabot.createOrUpdateOrgSecret().rest.dependabot.deleteOrgSecret().rest.codespaces.getRepoSecret().rest.codespaces.createOrUpdateRepoSecret().rest.codespaces.deleteRepoSecret().rest.dependabot.getRepoSecret().rest.dependabot.createOrUpdateRepoSecret().rest.dependabot.deleteRepoSecret().rest.actions.getGithubActionsDefaultWorkflowPermissionsOrganization().rest.actions.setGithubActionsDefaultWorkflowPermissionsOrganization().rest.dependabot.listSelectedReposForOrgSecret().rest.dependabot.setSelectedReposForOrgSecret().rest.actions.getWorkflowAccessToRepository().rest.actions.setWorkflowAccessToRepository().rest.actions.getGithubActionsDefaultWorkflowPermissionsRepository().rest.actions.setGithubActionsDefaultWorkflowPermissionsRepository().rest.orgs.listCustomRoles().rest.actions.getActionsCacheUsageForOrg().rest.enterpriseAdmin.removeCustomLabelFromSelfHostedRunnerForEnterprise().rest.actions.removeCustomLabelFromSelfHostedRunnerForOrg().rest.actions.removeCustomLabelFromSelfHostedRunnerForRepo().rest.reactions.deleteForRelease().rest.repos.deleteTagProtection().rest.enterpriseAdmin.getServerStatistics().rest.actions.getActionsCacheUsageForEnterprise().rest.actions.getGithubActionsDefaultWorkflowPermissionsEnterprise().rest.enterpriseAdmin.listSelfHostedRunnerGroupsForEnterprise()-visible-to-organizationparamter.rest.secretScanning.listAlertsForEnterprise().rest.billing.getGithubAdvancedSecurityBillingGhe().rest.actions.getActionsCacheUsageByRepoForOrg().rest.actions.listSelfHostedRunnerGroupsForOrg()- new parameter:visible_to_repository.rest.codeScanning.listAlertsForOrg().rest.orgs.listSamlSsoAuthorizations()- new parameters:per_page,page,login.rest.dependabot.getOrgPublicKey().rest.dependabot.listOrgSecrets().rest.teams.externalIdpGroupInfoForOrg().rest.teams.listExternalIdpGroupsForOrg().rest.secretScanning.listAlertsForOrg()- new parameters:sort,direction.rest.billing.getGithubAdvancedSecurityBillingOrg().rest.repos.codeownersErrors().rest.codespaces.listDevcontainersInRepositoryForAuthenticatedUser().rest.codespaces.repoMachinesForAuthenticatedUser().rest.codespaces.getRepoPublicKey().rest.codespaces.listRepoSecrets().rest.dependabot.getRepoPublicKey().rest.dependabot.listRepoSecrets().rest.dependencyGraph.diffRange().rest.reactions.listForRelease().rest.secretScanning.listLocationsForAlert().rest.actions.updateSelfHostedRunnerGroupForOrg()- new parameters:allows_public_repositories,restricted_to_workflows,selected_workflows.rest.orgs.update()- new parameter:members_can_fork_private_repositories.rest.actions.createSelfHostedRunnerGroupForOrg()- new parameters:allows_public_repositories,restricted_to_workflows,selected_workflows.rest.migrations.startForOrg()- new parrameters:exclude_metadata,exclude_git_data,org_metadata_only.rest.repos.createInOrg()- new parameter:use_squash_pr_title_as_default.rest.actions.reRunJobForWorkflowRun().rest.actions.reRunWorkflowFailedJobs().rest.codespaces.createWithPrForAuthenticatedUser().rest.migrations.startForAuthenticatedUser()- new parrameters:exclude_metadata,exclude_git_data,org_metadata_only.rest.actions.setGithubActionsDefaultWorkflowPermissionsEnterprise().rest.orgs.convertMemberToOutsideCollaborator()- new parameter:async.rest.actions.getActionsCacheUsage().rest.actions.listWorkflowRunsForRepo(): new parameter:check_suite_id.rest.actions.listWorkflowRuns(): new parameter:check_suite_id.rest.codeScanning.listAlertsForRepo(): new parameters:direction,sort.rest.repos.getAllEnvironments(): new parameters:per_page,page.rest.secretScanning.listAlertsForRepo(): new parameters:direction,sort.rest.repos.updatePullRequestReviewProtection(): new parameters:dismissal_restrictions.apps,bypass_pull_request_allowances.rest.repos.updateStatusCheckProtection(): new parameter:checks.rest.codeScanning.updateAlert(): new parameter:dismissed_comment.rest.repos.update():secret_scanning_push_protection,use_squash_pr_title_as_default.rest.actions.reRunWorkflow(): new parameter:enable_debug_logging.rest.users.createGpgKeyForAuthenticatedUser(): new parameter:name.rest.repos.updateBranchProtection(): new parameter:required_status_checks.checks,required_pull_request_reviews.{apps,bypass_pull_request_allowances},block_creationsBug Fixes
.rest.apps.createFromManifest()has no request body.rest.projects.getPermissionForUser(): correct response type and example.rest.repos.update():visibilityparameter cannot be set tovisibility.rest.actions.reRunWorkflow(): no longer deprecated.rest.reactions.deleteLegacy().rest.apps.createContentAttachment()1.7.2 (2022-06-08)
Bug Fixes
1.7.1 (2021-11-22)
Bug Fixes
1.7.0 (2021-10-07)
Features
.actions.downloadWorkflowRunAttemptLogs(),.actions.getWorkflowRunAttempt(),.repos.generateReleaseNotes(),.checks.rerequestRun(). Graduatenebula,zzzax,switcheroo,baptistepreviews. Removes defunkt/repos/{owner}/{repo}/actions/runs/{run_id}/retryendpoint. Renames methods to have consistentAuthenticatedUser()suffix, deprecates previous method names (#2163) (e02541c)1.6.2 (2021-09-30)
Bug Fixes
GET /repos/{owner}/{repo}/community/code_of_conduct,DELETE /reactions/{reaction_id}.encrypted_valueandkey_idparameters are required for.rest.actions.{createOrUpdateEnvironmentSecret,setSelectedReposForOrgSecret}().access_tokenparameter is required for.rest.apps.deleteAuthorization(). Previews graduated:ant-man,flash,scarlet-witch,squirrel-girl(03e3055)luke-cagepreview graduated (#2158) (6864592)1.6.1 (2021-09-24)
Bug Fixes
dorian,inertia,london,lydian,wyandotte(#2157) (6d878ac)1.6.0 (2021-09-22)
Features
octokit.rest.repos.{enable,disable}LfsForRepo(),octokit.rest.repos.mergeUpstream({ owner, repo, branch })(7e3cd91)1.5.0 (2021-08-31)
Features
.rest.packages.deletePackageForUser(),.rest.packages.deletePackageVersionForUser(),.rest.packages.restorePackageForUser(),.rest.packages.restorePackageVersionForUser(),.rest.secretScanning.listAlertsForOrg()(#2150) (670986f)Bug Fixes
labelsparameter in.issues.{add,set}Labels()(#2150) (670986f)1.4.0 (2021-08-10)
Features
permissionskey in responses now consistently includemaintainandtriageroles (#2145) (b47bf5c)Package name: pretty-bytes
-
5.6.0 - 2021-02-21
- Add ability to control number of fractional digits (#62) 8388e69
-
5.5.0 - 2020-12-23
- Allow
-
5.4.1 - 2020-08-31
- Fix
-
5.4.0 - 2020-08-29
- Add
-
5.3.0 - 2019-07-26
- Add
from pretty-bytes GitHub release notesv5.5.0...v5.6.0
localeoption to contain a list of BCP47 tags (#63) c7ea91av5.4.1...v5.5.0
binaryandbitsoption being used together (#61) 1333349v5.4.0...v5.4.1
binaryoption (#60) 4ef01f4v5.3.0...v5.4.0
bitsoption (#53) cb93e5bv5.2.0...v5.3.0
Package name: terminal-kit
-
2.11.7 - 2022-09-22
-
2.11.6 - 2022-09-16
-
2.11.5 - 2022-09-14
-
2.11.4 - 2022-09-12
-
2.11.3 - 2022-09-09
-
2.11.2 - 2022-09-09
-
2.11.1 - 2022-09-08
-
2.11.0 - 2022-09-08
-
2.10.6 - 2022-09-08
-
2.10.5 - 2022-09-07
-
2.10.4 - 2022-09-07
-
2.10.3 - 2022-09-07
-
2.10.2 - 2022-09-07
-
2.10.1 - 2022-09-06
-
2.10.0 - 2022-09-06
-
2.9.8 - 2022-09-05
-
2.9.7 - 2022-09-05
-
2.9.6 - 2022-09-05
-
2.9.5 - 2022-09-05
-
2.9.4 - 2022-09-05
-
2.9.3 - 2022-09-04
-
2.9.2 - 2022-09-04
-
2.9.1 - 2022-09-04
-
2.9.0 - 2022-09-04
-
2.8.12 - 2022-09-03
-
2.8.11 - 2022-09-03
-
2.8.10 - 2022-09-01
-
2.8.9 - 2022-08-31
-
2.8.8 - 2022-08-31
-
2.8.7 - 2022-08-24
-
2.8.6 - 2022-08-24
-
2.8.5 - 2022-08-24
-
2.8.4 - 2022-08-24
-
2.8.3 - 2022-08-23
-
2.8.2 - 2022-08-23
-
2.8.1 - 2022-08-23
-
2.8.0 - 2022-08-23
-
2.7.0 - 2022-08-23
-
2.6.0 - 2022-08-22
-
2.5.1 - 2022-08-03
-
2.5.0 - 2022-08-03
-
2.4.0 - 2022-01-19
-
2.3.0 - 2021-12-09
-
2.2.4 - 2021-12-05
-
2.2.3 - 2021-11-22
-
2.2.2 - 2021-11-21
-
2.2.1 - 2021-11-20
-
2.2.0 - 2021-11-20
-
2.1.8 - 2021-10-12
from terminal-kit GitHub release notesFix TextBuffer#moveTo() not respecting 'forceInBound' property
Add missing API method: TextBox#setTabWidth()
Element: get key binding/action binding
TextBuffer fixes, and .removeTrailingSpaces()
New (missing) method: EditableTextBox#setStateMachine()
Element#redraw() is DEPRECATED, replaced by Element#outerDraw() (more meaningful name) ; fix some drawing issue ; EditableTextBox has new property: this.autoCompleteHintMinInput
TextBuffer: Support for regexp with .regexpFindNext()
New (pseudo) widget: Border, add border (with or without shadow) to any other widgets, just by setting the 'parent' parameter
Fix InlineInput and InlineFileInput completion's hint
EditableTextBox now supports 'smartStartOfLine' action (aka smarthome)
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: