Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade typeorm from 0.2.45 to 0.3.17 #5

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

antz-snyk
Copy link

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade typeorm from 0.2.45 to 0.3.17.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 289 versions ahead of your current version.
  • The recommended version was released 5 months ago, on 2023-06-20.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-XML2JS-5414874
586/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: typeorm
  • 0.3.17 - 2023-06-20

    Bug Fixes

  • 0.3.17-dev.f5d4397 - 2023-06-19
  • 0.3.17-dev.d4607a8 - 2023-05-10
  • 0.3.17-dev.b1a3a39 - 2023-06-20
  • 0.3.17-dev.abb9079 - 2023-05-09
  • 0.3.17-dev.7108cc6 - 2023-06-20
  • 0.3.16 - 2023-05-09

    0.3.16 (2023-05-09)

    Bug Fixes

    Features

    • mariadb uuid inet4 inet6 column data type support (#9845) (d8a2e37)

    Reverts

  • 0.3.16-dev.f5b93c1 - 2023-04-18
  • 0.3.16-dev.e0165e7 - 2023-04-17
  • 0.3.16-dev.d8a2e37 - 2023-04-25
  • 0.3.16-dev.b064049 - 2023-04-18
  • 0.3.16-dev.a188b1d - 2023-05-09
  • 0.3.16-dev.96b7ee4 - 2023-05-09
  • 0.3.16-dev.8795c86 - 2023-05-09
  • 0.3.16-dev.68aa573 - 2023-04-15
  • 0.3.16-dev.54f4f89 - 2023-05-09
  • 0.3.16-dev.3d67901 - 2023-04-18
  • 0.3.16-dev.2a2bb4b - 2023-05-09
  • 0.3.16-dev.21a9d67 - 2023-05-09
  • 0.3.16-dev.06c1e98 - 2023-05-09
  • 0.3.16-dev.9460296 - 2023-05-09
  • 0.3.15 - 2023-04-15

    Bug Fixes

    • make cache optional fields optional (#9942) (159c60a)
    • prevent unique index identical to primary key (all sql dialects) (#9940) (51eecc2)
    • SelectQueryBuilder builds incorrectly escaped alias in Oracle when used on entity with composite key (#9668) (83c6c0e)

    Features

  • 0.3.15-dev.f6a3ce7 - 2023-04-15
  • 0.3.15-dev.f1c5662 - 2023-04-15
  • 0.3.15-dev.3a72e35 - 2023-04-13
  • 0.3.15-dev.115059d - 2023-04-10
  • 0.3.14 - 2023-04-09

    Bug Fixes

    • drop xml & yml connection option support. Addresses security issues in underlying dependency (#9930) (7dac12c)

    Features

  • 0.3.14-dev.daf1b47 - 2023-04-06
  • 0.3.14-dev.0194f17 - 2023-04-06
  • 0.3.13 - 2023-04-06

    Bug Fixes

    • firstCapital=true not working in camelCase() function (f1330ad)
    • handles "query" relation loading strategy for TreeRepositories (#9680) (a11809e), closes #9673
    • improve EntityNotFound error message in QueryBuilder.findOneOrFail (#9872) (f7f6817)
    • loading tables with fk in sqlite query runner (#9875) (4997da0), closes #9266
    • prevent foreign key support during migration batch under sqlite (#9775) (197cc05), closes #9770
    • proper default value on generating migration when default value is a function calling [Postgres] (#9830) (bebba05)
    • react-native doesn't properly work in ESM projects because of circular dependency (#9765) (099fcd9)
    • resolve issues for mssql migration when simple-enum was changed (cb154d4), closes #7785 #9457 #7785 #9457
    • resolves issue with mssql column recreation (#9773) (07221a3), closes #9399
    • transform values for FindOperators #9381 (#9777) (de1228d), closes #9816
    • use forward slashes when normalizing path (#9768) (58fc088), closes #9766
    • use object create if entity skip constructor is set (#9831) (a868979)

    Features

    • add support for json datatype for sqlite (#9744) (4ac8c00)
    • add support for STI on EntitySchema (#9834) (bc306fb), closes #9833
    • allow type FindOptionsOrderValue for order by object property (#9895) (#9896) (0814970)
    • Broadcast identifier for removed related entities (#9913) (f530811)
    • leftJoinAndMapOne and innerJoinAndMapOne map result to entity (#9354) (947ffc3)
  • 0.3.13-dev.f7f6817 - 2023-04-06
  • 0.3.13-dev.f7b210b - 2023-04-05
  • 0.3.13-dev.f1330ad - 2023-04-06
  • 0.3.13-dev.de1228d - 2023-04-06
  • 0.3.13-dev.af4f15c - 2023-04-06
  • 0.3.13-dev.a868979 - 2023-04-06
  • 0.3.13-dev.a11809e - 2023-04-06
  • 0.3.13-dev.98f2205 - 2023-04-05
  • 0.3.13-dev.97280fc - 2023-04-06
  • 0.3.13-dev.58fc088 - 2023-02-09
  • 0.3.13-dev.4fa14e3 - 2023-04-05
  • 0.3.13-dev.4ac8c00 - 2023-04-06
  • 0.3.13-dev.1fcd9f3 - 2023-04-05
  • 0.3.13-dev.099fcd9 - 2023-02-08
  • 0.3.13-dev.07221a3 - 2023-04-05
  • 0.3.13-dev.0619aca - 2023-04-06
  • 0.3.12 - 2023-02-07
    Read more
  • 0.3.12-dev.ef64bfc - 2023-01-28
  • 0.3.12-dev.defb409 - 2023-01-03
  • 0.3.12-dev.ca315f0 - 2023-02-05
  • 0.3.12-dev.c77c43e - 2023-02-06
  • 0.3.12-dev.c669f50 - 2023-01-28
  • 0.3.12-dev.b97633b - 2022-12-28
  • 0.3.12-dev.b8704f8 - 2023-02-06
  • 0.3.12-dev.ae91c05 - 2022-12-27
  • 0.3.12-dev.adce698 - 2023-02-07
  • 0.3.12-dev.a95bed7 - 2022-12-18
  • 0.3.12-dev.9bd3a64 - 2023-02-07
  • 0.3.12-dev.8668c29 - 2022-12-29
  • 0.3.12-dev.7df2ccf - 2023-02-06
  • 0.3.12-dev.7726f5a - 2023-02-06
  • 0.3.12-dev.74f7f79 - 2023-01-11
  • 0.3.12-dev.6fb2121 - 2023-02-05
  • 0.3.12-dev.6c928a4 - 2022-12-19
  • 0.3.12-dev.67973b4 - 2022-12-29
  • 0.3.12-dev.63ab05f - 2023-02-05
  • 0.3.12-dev.54ca9dd - 2023-02-07
  • 0.3.12-dev.4df969e - 2023-01-28
  • 0.3.12-dev.3e1caf0 - 2023-01-03
  • 0.3.12-dev.1a9b9fb - 2023-02-06
  • 0.3.12-dev.18b659d - 2022-12-29
  • 0.3.12-dev.15a4eb9 - 2022-12-29
  • 0.3.12-dev.12fdd73 - 2023-02-07
  • 0.3.12-dev.0eb7441 - 2023-02-07
  • 0.3.12-dev.0d72317 - 2022-12-03
  • 0.3.12-dev.8731858 - 2023-02-07
  • 0.3.12-dev.8251812 - 2022-12-16
  • 0.3.11 - 2022-12-03
    Read more
  • 0.3.11-dev.fc3b4f8 - 2022-12-03
  • 0.3.11-dev.f07fb2c - 2022-12-03
  • 0.3.11-dev.efb4168 - 2022-11-04
  • 0.3.11-dev.d71e9c4 - 2022-12-03
  • 0.3.11-dev.cdabaa3 - 2022-09-20
  • 0.3.11-dev.b5ff79f - 2022-11-04
  • 0.3.11-dev.97fae63 - 2022-12-03
  • 0.3.11-dev.8a837f9 - 2022-09-20
  • 0.3.11-dev.85fa9c6 - 2022-11-05
  • 0.3.11-dev.81fc9a9 - 2022-12-03
  • 0.3.11-dev.7fbc3ad - 2022-12-03
  • 0.3.11-dev.71efa8e - 2022-12-03
  • 0.3.11-dev.6eb674b - 2022-11-05
  • 0.3.11-dev.6ba48bd - 2022-12-03
  • 0.3.11-dev.66acec8 - 2022-11-04
  • 0.3.11-dev.658604d - 2022-12-03
  • 0.3.11-dev.5253c8f - 2022-11-04
  • 0.3.11-dev.4ec04fa - 2022-11-21
  • 0.3.11-dev.4a36d0e - 2022-11-05
  • 0.3.11-dev.38e0eff - 2022-11-04
  • 0.3.11-dev.2e1c9fd - 2022-11-04
  • 0.3.11-dev.2473ff0 - 2022-12-03
  • 0.3.11-dev.1cb738a - 2022-12-03
  • 0.3.11-dev.19536ed - 2022-11-05
  • 0.3.11-dev.7386318 - 2022-12-03
  • 0.3.10 - 2022-09-19

    Bug Fixes

    • "Cannot commit, no transaction is active" error in sql.js (#9234) (749809a), closes #9100
    • add missing support for primaryKeyConstraintName property in EntitySchema (cc63961)
    • malformed query when selecting deeply nested embedded entities (#9273) (83f7b88)
    • prototype pollution issue (e3aac27)
    • typescript 4.8 type issues #9331 (#9357) (a1960e1)
    • Update RelationIdLoader to use DriverUtils.getAlias (#9380) (a917d65), closes #9379

    Features

  • 0.3.10-dev.f24b262 - 2022-09-19
  • 0.3.10-dev.e3aac27 - 2022-08-29
  • 0.3.10-dev.de15df1 - 2022-09-19
  • 0.3.10-dev.cc63961 - 2022-08-30
  • 0.3.10-dev.a1960e1 - 2022-09-15
  • 0.3.10-dev.773a4fe - 2022-09-14
  • 0.3.10-dev.749809a - 2022-09-19
  • 0.3.10-dev.52e5f7c - 2022-09-14
  • 0.3.9 - 2022-08-28

    Bug Fixes

    • fixed regression introduced in 0.3.8 - broken CLI because of #8917 (#9332), closes #9330
  • 0.3.8 - 2022-08-26
    Read more
  • 0.3.8-dev.fd7ae97 - 2022-08-24
  • 0.3.8-dev.eb8f0c6 - 2022-08-24
  • 0.3.8-dev.e49d0c8 - 2022-08-24
  • 0.3.8-dev.de8aaac - 2022-08-24
  • 0.3.8-dev.dadb658 - 2022-08-24
  • 0.3.8-dev.d285fd0 - 2022-07-06
  • 0.3.8-dev.c4f4650 - 2022-08-25
  • 0.3.8-dev.bd96e27 - 2022-08-24
  • 0.3.8-dev.bb33cd0 - 2022-07-11
  • 0.3.8-dev.b8d04dc - 2022-08-25
  • 0.3.8-dev.9f7fc14 - 2022-08-24
  • 0.3.8-dev.8dcd61e - 2022-08-24
  • 0.3.8-dev.72728f1 - 2022-08-25
  • 0.3.8-dev.7198a7a - 2022-08-24
  • 0.3.8-dev.68e8f22 - 2022-08-25
  • 0.3.8-dev.64674e6 - 2022-08-24
  • 0.3.8-dev.5ebc626 - 2022-08-24
  • 0.3.8-dev.5e5abbd - 2022-08-25
  • 0.3.8-dev.46d0021 - 2022-08-24
  • 0.3.8-dev.3a533a4 - 2022-08-24
  • 0.3.8-dev.340ab67 - 2022-08-25
  • 0.3.8-dev.2e67138 - 2022-06-30
  • 0.3.8-dev.15f90e0 - 2022-08-22
  • 0.3.8-dev.109c1fa - 2022-06-29
  • 0.3.8-dev.0b54222 - 2022-07-05
  • 0.3.8-dev.03317a3 - 2022-08-28
  • 0.3.7 - 2022-06-29
  • 0.3.7-dev.ec23922 - 2022-06-22
  • 0.3.7-dev.ec05f1d - 2022-06-29
  • 0.3.7-dev.bcdddc3 - 2022-06-29
  • 0.3.7-dev.a748f3c - 2022-06-29
  • 0.3.7-dev.97e1dc1 - 2022-06-28
  • 0.3.7-dev.60a7960 - 2022-06-28
  • 0.3.7-dev.1b5aa62 - 2022-06-28
  • 0.3.6 - 2022-04-12
  • 0.3.6-dev.ef025bd - 2022-05-31
  • 0.3.6-dev.ea176b2 - 2022-05-20
  • 0.3.6-dev.e296126 - 2022-06-22
  • 0.3.6-dev.e24cced - 2022-06-22
  • 0.3.6-dev.d0ed02d - 2022-05-20
  • 0.3.6-dev.cf3efec - 2022-05-23
  • 0.3.6-dev.cc5a5c1 - 2022-04-11
  • 0.3.6-dev.c814b07 - 2022-04-05
  • 0.3.6-dev.bbdc20f - 2022-05-31
  • 0.3.6-dev.b84cb9b - 2022-04-13
  • 0.3.6-dev.9f8429f - 2022-04-27
  • 0.3.6-dev.9d331b1 - 2022-04-11
  • 0.3.6-dev.9adab34 - 2022-04-13
  • 0.3.6-dev.862a402 - 2022-05-31
  • 0.3.6-dev.7dfb69f - 2022-04-15
  • 0.3.6-dev.78df84c - 2022-04-29
  • 0.3.6-dev.62518ae - 2022-04-12
  • 0.3.6-dev.506133e - 2022-06-10
  • 0.3.6-dev.49cbe23 - 2022-04-18
  • 0.3.6-dev.4687be8 - 2022-04-12
  • 0.3.6-dev.2d8afbe - 2022-04-16
  • 0.3.6-dev.22570f5 - 2022-05-20
  • 0.3.6-dev.1b4cb00 - 2022-05-23
  • 0.3.6-dev.189592c - 2022-05-20
  • 0.3.6-dev.1197d1d - 2022-04-11
  • 0.3.6-dev.07f4537 - 2022-06-22
  • 0.3.6-dev.0659ec3 - 2022-05-30
  • 0.3.6-dev.0418ebc - 2022-04-13
  • 0.3.5 - 2022-04-05
  • 0.3.5-dev.ec6c119 - 2022-03-28
  • 0.3.5-dev.ec27803 - 2022-04-02
  • 0.3.5-dev.eacecce - 2022-03-26
  • 0.3.5-dev.e58c796 - 2022-03-31
  • 0.3.5-dev.c5dfc11 - 2022-03-29
  • 0.3.5-dev.baa2f44 - 2022-04-02
  • 0.3.5-dev.b1a0107 - 2022-03-30
  • 0.3.5-dev.9d1e246 - 2022-04-02
  • 0.3.5-dev.9ac8e9e - 2022-03-26
  • 0.3.5-dev.7832a1a - 2022-04-05
  • 0.3.5-dev.69c33a2 - 2022-04-04
  • 0.3.5-dev.3730fd0 - 2022-04-04
  • 0.3.5-dev.2205a1a - 2022-04-02
  • 0.3.5-dev.1693a17 - 2022-04-04
  • 0.3.5-dev.002274c - 2022-03-26
  • 0.3.5-dev.6774605 - 2022-04-02
  • 0.3.4 - 2022-03-26
  • 0.3.4-dev.d2cfd22 - 2022-03-26
  • 0.3.4-dev.ceee439 - 2022-03-26
  • 0.3.4-dev.c75bcae - 2022-03-23
  • 0.3.4-dev.68a5c23 - 2022-03-23
  • 0.3.4-dev.54c7db4 - 2022-03-25
  • 0.3.4-dev.4b37030 - 2022-03-26
  • 0.3.4-dev.17d391c - 2022-03-26
  • 0.3.4-dev.494008 - 2022-03-26
  • 0.3.3 - 2022-03-23
  • 0.3.3-dev.f010205 - 2022-03-22
  • 0.3.3-dev.a641c5d - 2022-03-23
  • 0.3.3-dev.7cc1848 - 2022-03-23
  • 0.3.3-dev.52a641c - 2022-03-23
  • 0.3.3-dev.2b83776 - 2022-03-23
  • 0.3.2 - 2022-03-22
  • 0.3.2-dev.edf27d9 - 2022-03-22
  • 0.3.2-dev.ce5973c - 2022-03-21
  • 0.3.2-dev.c8fb1bb - 2022-03-21
  • 0.3.2-dev.b53a481 - 2022-03-21
  • 0.3.2-dev.97699e8 - 2022-03-22
  • 0.3.2-dev.35106df - 2022-03-22
  • 0.3.2-dev.28309eb - 2022-03-21
  • 0.3.2-dev.05fc744 - 2022-03-22
  • 0.3.1 - 2022-03-21
  • 0.3.1-dev.d61f857 - 2022-03-18
  • 0.3.1-dev.9f1b8e3 - 2022-03-21
  • 0.3.1-dev.941b584 - 2022-03-17
  • 0.3.0 - 2022-03-17
  • 0.3.0-rc.41 - 2022-03-12
  • 0.3.0-rc.40 - 2022-03-12
  • 0.3.0-rc.39 - 2022-03-12
  • 0.3.0-rc.38 - 2022-03-12
  • 0.3.0-rc.37 - 2022-03-12
  • 0.3.0-rc.36 - 2022-02-26
  • 0.3.0-rc.35 - 2022-02-22
  • 0.3.0-rc.34 - 2022-02-22
  • 0.3.0-rc.33 - 2022-02-22
  • 0.3.0-rc.32 - 2022-02-17
  • 0.3.0-rc.31 - 2022-02-17
  • 0.3.0-rc.30 - 2022-02-17
  • 0.3.0-rc.29 - 2022-02-17
  • 0.3.0-rc.28 - 2022-02-12
  • 0.3.0-rc.27 - 2022-02-11
  • 0.3.0-rc.26 - 2022-02-11
  • 0.3.0-rc.25 - 2022-02-11
  • 0.3.0-rc.24 - 2022-02-11
  • 0.3.0-rc.23 - 2022-02-11
  • 0.3.0-rc.22 - 2022-02-09
  • 0.3.0-rc.21 - 2020-10-01
  • 0.3.0-rc.20 - 2020-09-29
  • 0.3.0-rc.19 - 2020-03-02
  • 0.3.0-rc.18 - 2020-03-02
  • 0.3.0-rc.17 - 2020-02-11
  • 0.3.0-rc.16 - 2020-02-07
  • 0.3.0-rc.15 - 2020-02-07
  • 0.3.0-rc.14 - 2020-02-07
  • 0.3.0-rc.13 - 2020-01-28
  • 0.3.0-rc.12 - 2020-01-28
  • 0.3.0-rc.11 - 2020-01-27
  • 0.3.0-rc.10 - 2020-01-27
  • 0.3.0-rc.9 - 2020-01-27
  • 0.3.0-rc.8 - 2020-01-27
  • 0.3.0-rc.7 - 2020-01-26
  • 0.3.0-rc.5 - 2020-01-26
  • 0.3.0-rc.4 - 2020-01-26
  • 0.3.0-rc.3 - 2020-01-26
  • 0.3.0-rc.2 - 2019-12-16
  • 0.3.0-rc.1 - 2019-12-16
  • 0.3.0-alpha.24 - 2019-09-12
  • 0.3.0-alpha.23 - 2019-03-15
  • 0.3.0-alpha.22 - 2018-10-19
  • 0.3.0-alpha.21 - 2018-10-08
  • 0.3.0-alpha.20 - 2018-10-05
  • 0.3.0-alpha.19 - 2018-10-01
  • 0.3.0-alpha.18 - 2018-09-25
  • 0.3.0-alpha.17 - 2018-09-25
  • 0.3.0-alpha.16 - 2018-09-12
  • 0.3.0-alpha.15 - 2018-09-10
  • 0.3.0-alpha.14 - 2018-09-06
  • 0.3.0-alpha.13 - 2018-09-06
  • 0.3.0-alpha.12 - 2018-08-31
  • 0.3.0-alpha.11 - 2018-08-31
  • 0.3.0-alpha.10 - 2018-08-14
  • 0.3.0-alpha.9 - 2018-08-14
  • 0.3.0-alpha.8 - 2018-08-14
  • 0.3.0-alpha.7 - 2018-08-02
  • 0.3.0-alpha.6 - 2018-06-30
  • 0.3.0-alpha.5 - 2018-05-24
  • 0.3.0-alpha.4 - 2018-05-24
  • 0.3.0-alpha.3 - 2018-05-24
  • 0.3.0-alpha.2 - 2018-05-24
  • 0.3.0-alpha.1 - 2018-05-24
  • 0.2.46-dev.486f8c5 - 2022-03-04
  • 0.2.46-dev.5608956 - 2022-03-15
  • 0.2.45 - 2022-03-04
from typeorm GitHub release notes
Commit messages
Package name: typeorm
  • b1a3a39 fix: #10040 TypeORM synchronize database even if it is up to date (#10041)
  • 7108cc6 chore: use new CircleCI convenience images (#10101)
  • f5d4397 fix: add missing await (#10084)
  • d4607a8 test: fix test from #9034 with STI for Oracle (#10037)
  • abb9079 version bump
  • 607d6f9 fix: added transaction retry logic in cockroachdb (#10032)
  • 8795c86 fix: support More/LessThanOrEqual in relations (#9978)
  • 06c1e98 fix: create correct children during cascade saving entities with STI (#9034)
  • 96b7ee4 fix: correct encode mongodb auth credentials (#10024)
  • 9460296 fix: convert the join table ID to the referenceColumn ID type (#9887)
  • 938f94b fix: add onDelete option validation for oracle (#9786)
  • a188b1d fix: for running cli-ts-node-esm use exit code from child process (#10030)
  • 7c5627f fix: added instanceName to options (#9968)
  • 0305805 fix: add `trustServerCertificate` option to `SqlServerConnectionOptions` (#9985)
  • 21a9d67 fix: RelationIdLoader has access to queryPlanner when wrapped in transaction (#9990)
  • 5be20e2 fix: express option bug in init command (#10022)
  • 2a2bb4b fix: allow json as alias for longtext mariadb (#10018)
  • 54f4f89 revert: "refactor: remove date-fns package (#9634)"
  • 99bef49 fix: mongodb typings breaks the browser version (#9962)
  • d8a2e37 feat: mariadb uuid inet4 inet6 column data type support (#9845)
  • f5b93c1 refactor: query methods should accept generic for return type (#9957)
  • 0e56f0f fix: select + addOrderBy broke in 0.3.14 (#9961)
  • 3d67901 fix: resolve duplicate subscriber updated columns (#9958)
  • b064049 docs: update entity-manager-api.md (#9956)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment