[Snyk] Upgrade @tensorflow/tfjs-core from 3.11.0 to 4.20.0 #557

aravindvnair99 · 2024-06-26T04:31:44Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @tensorflow/tfjs-core from 3.11.0 to 4.20.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 40 versions ahead of your current version.
The recommended version was released on 22 days ago.

Release notes

Package name: @tensorflow/tfjs-core

4.20.0 - 2024-06-03
Core (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Data (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Layers (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Converter (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Node (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
- Update tar package version for tfjs-node & tfjs-node-gpu (#8280). Thanks, @ gaikwadrahul8.
Wasm (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Cpu (4.19.0 ==> 4.20.0)

Misc
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
Webgl (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
WebGPU (4.19.0 ==> 4.20.0)

Misc
- Update lockfiles branch tfjs_4.20.0_lockfiles lock files. (#8296). Thanks, @ dbcp1.
- Update monorepo to 4.20.0. (#8294). Thanks, @ dbcp1.
4.20.0-rc.0 - 2024-05-28
- Update lockfiles branch tfjs_4.20.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.19.0 - 2024-04-30
Core (4.18.0 ==> 4.19.0)

Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Data (4.18.0 ==> 4.19.0)

Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Layers (4.18.0 ==> 4.19.0)

Features
- Add support for GELU and approximate activation functions (#8224). Thanks, @ Vectorrent.
Bug fixes
- Update exception logic in convolutional.ts (#8248). Thanks, @ gaikwadrahul8.
Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Converter (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Node (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
- Update installation steps for Windows / Mac OS X for tfjs-node in README.md (#8101). Thanks, @ gaikwadrahul8.
Wasm (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
- Fixing typos in READMEs (#8213). Thanks, @ Branchverse.
Cpu (4.18.0 ==> 4.19.0)

Misc
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
Webgl (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
WebGPU (4.18.0 ==> 4.19.0)

Misc
- Update lockfiles branch tfjs_4.19.0_lockfiles lock files. (#8264). Thanks, @ dbcp1.
- Update monorepo to 4.19.0. (#8263). Thanks, @ dbcp1.
- Export WebGPUProgram as type to fix g3 isolatedModules issue (#8252).
4.19.0-rc.0 - 2024-04-24
- Update lockfiles branch tfjs_4.19.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.18.0 - 2024-04-17
Core (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Data (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Layers (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Converter (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
- nightly test fix (#8214).
- Fixed typos in documentation string. (#7782). Thanks, @ shmishra99.
Node (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Wasm (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Cpu (4.17.0 ==> 4.18.0)

Misc
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
Webgl (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
WebGPU (4.17.0 ==> 4.18.0)

Misc
- Update lockfiles branch tfjs_4.18.0_lockfiles lock files. (#8251). Thanks, @ dbcp1.
- Update monorepo to 4.18.0. (#8250). Thanks, @ dbcp1.
4.18.0-rc.0 - 2024-04-11
- Update lockfiles branch tfjs_4.18.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.17.0 - 2024-01-30
Core (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Data (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Layers (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Converter (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
- merge g3 cl (#8138).
Node (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
- Fix for windows installation #7341 (#8122). Thanks, @ vicmmg.
- Update broken link for MacOS Catalina guide in README.md (#8032). Thanks, @ gaikwadrahul8.
Wasm (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Cpu (4.16.0 ==> 4.17.0)

Misc
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
Webgl (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
WebGPU (4.16.0 ==> 4.17.0)

Misc
- Update lockfiles branch tfjs_4.17.0_lockfiles lock files. (#8162). Thanks, @ dbcp1.
- Update monorepo to 4.17.0. (#8161). Thanks, @ dbcp1.
4.17.0-rc.0 - 2024-01-23
- Update lockfiles branch tfjs_4.17.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.16.0 - 2024-01-11
Core (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Data (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Layers (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Converter (4.15.0 ==> 4.16.0)

Bug fixes
- apply g3 fixes for jax (#8099).
Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
- Add support for complex64 data type in parseDtypeParam function (#8083). Thanks, @ Lutra-Fs.
Node (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Wasm (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Cpu (4.15.0 ==> 4.16.0)

Misc
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
Webgl (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
WebGPU (4.15.0 ==> 4.16.0)

Misc
- Update lockfiles branch tfjs_4.16.0_lockfiles lock files. (#8137). Thanks, @ dbcp1.
- Update monorepo to 4.16.0. (#8136). Thanks, @ dbcp1.
4.16.0-rc.0 - 2024-01-09
- Update lockfiles branch tfjs_4.16.0-rc.0_lockfiles lock files.
- Update verdaccio.yaml
4.15.0 - 2023-12-12
4.15.0-rc.0 - 2023-12-05
4.14.0 - 2023-11-30
4.14.0-rc.0 - 2023-11-17
4.13.0 - 2023-11-07
4.13.0-rc.0 - 2023-10-30
4.12.0 - 2023-10-18
4.12.0-rc.0 - 2023-10-11
4.11.0 - 2023-09-13
4.10.0 - 2023-08-01
4.9.0 - 2023-07-18
4.8.0 - 2023-06-20
4.7.0 - 2023-06-06
4.6.0 - 2023-05-17
4.5.0 - 2023-05-05
4.4.0 - 2023-04-06
4.3.0 - 2023-03-17
4.2.0 - 2023-01-03
4.1.0 - 2022-11-20
4.0.0 - 2022-10-13
3.21.0 - 2022-10-05
3.20.0 - 2022-08-23
3.19.0 - 2022-07-22
3.18.0 - 2022-05-20
3.17.0 - 2022-05-12
3.16.0 - 2022-04-19
3.15.0 - 2022-03-22
3.14.0 - 2022-03-03
3.13.0 - 2022-01-12
3.12.0 - 2021-12-08
3.11.0 - 2021-10-27

from @tensorflow/tfjs-core GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @tensorflow/tfjs-core from 3.11.0 to 4.20.0. See this package in npm: @tensorflow/tfjs-core See this project in Snyk: https://app.snyk.io/org/aravindvnair99-github-marketplace/project/3e229b24-b2de-4c21-9d58-eebf425f44fc?utm_source=github&utm_medium=referral&page=upgrade-pr

guardrails · 2024-06-26T04:32:14Z

⚠️ We detected 8 security issues in this pull request:

Insecure File Management (1)

Severity

Details

Docs

High

Title: Path Traversal from user input

Spot-the-Hole/functions/index.js

Line 562 in 7a1adfe

path.join(os.tmpdir(), path.basename(req.files.file[0].fieldname)),

📚

More info on how to fix Insecure File Management in JavaScript.

Insecure Use of Crypto (1)

Severity

Details

Docs

Medium

Title: Insecure use of random generator

Spot-the-Hole/functions/index.js

Line 204 in 7a1adfe

result += characters.charAt(Math.floor(Math.random() * charactersLength));

📚

More info on how to fix Insecure Use of Crypto in JavaScript.

Vulnerable Libraries (6)

Severity	Details
High	pkg:npm/[email protected] upgrade to: > 4.2.1
Critical	pkg:npm/@tensorflow/[email protected] upgrade to: > 3.14.0
Medium	pkg:npm/[email protected] upgrade to: 1.6.0
High	pkg:npm/[email protected] upgrade to: > 0.3.1
N/A	pkg:npm/[email protected] upgrade to: 3.1.10
Critical	pkg:npm/[email protected] upgrade to: > 11.3.0

More info on how to fix Vulnerable Libraries in JavaScript.

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

stale · 2024-07-10T06:02:02Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-07-20T19:15:04Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

stale · 2024-07-21T05:45:49Z

No longer marked as stale.

stale · 2024-08-04T13:34:19Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-08-12T06:24:12Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

stale · 2024-08-13T05:19:46Z

No longer marked as stale.

stale · 2024-08-28T01:52:30Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-09-07T07:11:33Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

stale · 2024-09-08T07:24:10Z

No longer marked as stale.

sonarcloud · 2024-09-08T07:24:39Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

stale · 2024-09-29T14:12:59Z

Automatically marked as stale due to lack of recent activity. Will be closed if no further activity occurs. Thank you for your contributions.

stale · 2024-10-19T09:54:16Z

Automatically closed due to lack of recent activity. Tag @aravindvnair99 to reopen. Thank you for your contributions.

pull-request-size bot added the size/XS label Jun 26, 2024

stale bot added the stale label Jul 10, 2024

stale bot closed this Jul 20, 2024

aravindvnair99 reopened this Jul 21, 2024

stale bot removed the stale label Jul 21, 2024

stale bot added the stale label Aug 4, 2024

stale bot closed this Aug 12, 2024

aravindvnair99 reopened this Aug 13, 2024

stale bot removed the stale label Aug 13, 2024

stale bot added the stale label Aug 28, 2024

stale bot closed this Sep 7, 2024

aravindvnair99 reopened this Sep 8, 2024

stale bot removed the stale label Sep 8, 2024

stale bot added the stale label Sep 29, 2024

stale bot closed this Oct 19, 2024

[Snyk] Upgrade @tensorflow/tfjs-core from 3.11.0 to 4.20.0 #557

[Snyk] Upgrade @tensorflow/tfjs-core from 3.11.0 to 4.20.0 #557

Conversation

aravindvnair99 commented Jun 26, 2024

Snyk has created this PR to upgrade @tensorflow/tfjs-core from 3.11.0 to 4.20.0.

Core (4.19.0 ==> 4.20.0)

Misc

Data (4.19.0 ==> 4.20.0)

Misc

Layers (4.19.0 ==> 4.20.0)

Misc

Converter (4.19.0 ==> 4.20.0)

Misc

Node (4.19.0 ==> 4.20.0)

Misc

Wasm (4.19.0 ==> 4.20.0)

Misc

Cpu (4.19.0 ==> 4.20.0)

Misc

Webgl (4.19.0 ==> 4.20.0)

Misc

WebGPU (4.19.0 ==> 4.20.0)

Misc

Core (4.18.0 ==> 4.19.0)

Misc

Data (4.18.0 ==> 4.19.0)

Misc

Layers (4.18.0 ==> 4.19.0)

Features

Bug fixes

Misc

Converter (4.18.0 ==> 4.19.0)

Misc

Node (4.18.0 ==> 4.19.0)

Misc

Wasm (4.18.0 ==> 4.19.0)

Misc

Cpu (4.18.0 ==> 4.19.0)

Misc

Webgl (4.18.0 ==> 4.19.0)

Misc

WebGPU (4.18.0 ==> 4.19.0)

Misc

Core (4.17.0 ==> 4.18.0)

Misc

Data (4.17.0 ==> 4.18.0)

Misc

Layers (4.17.0 ==> 4.18.0)

Misc

Converter (4.17.0 ==> 4.18.0)

Misc

Node (4.17.0 ==> 4.18.0)

Misc

Wasm (4.17.0 ==> 4.18.0)

Misc

Cpu (4.17.0 ==> 4.18.0)

Misc

Webgl (4.17.0 ==> 4.18.0)

Misc

WebGPU (4.17.0 ==> 4.18.0)

Misc

Core (4.16.0 ==> 4.17.0)

Misc

Data (4.16.0 ==> 4.17.0)

Misc

Layers (4.16.0 ==> 4.17.0)

Misc

Converter (4.16.0 ==> 4.17.0)

Misc

Node (4.16.0 ==> 4.17.0)

Misc

Wasm (4.16.0 ==> 4.17.0)

Misc

Cpu (4.16.0 ==> 4.17.0)

Misc

Webgl (4.16.0 ==> 4.17.0)

Misc

WebGPU (4.16.0 ==> 4.17.0)

Misc

Core (4.15.0 ==> 4.16.0)