Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #126

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

negue
Copy link
Owner

@negue negue commented Dec 5, 2023

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 703/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @angular/cli The new version differs by 250 commits.
  • f9527ce release: cut the v17.0.0 release
  • 180dfa3 build: update Angular packages to version 17 stable
  • 8bae6ad release: cut the v17.0.0-rc.5 release
  • 8a9def5 test: add timeout to vite re-use cache
  • 9d4d11c fix(@ angular-devkit/build-angular): allow SSR compilation to work with TS allowJs option
  • ec5e302 refactor(@ schematics/angular): add fallback fonts
  • 3c6d2d8 refactor(@ schematics/angular): remove unused CSS
  • abb1c6f refactor(@ schematics/angular): use control flow to reduce code
  • 81e4917 fix(@ angular/pwa): replace Angular logos
  • ecdcff2 fix(@ schematics/angular): add missing icons in ng-new template
  • 569b714 build: lock file maintenance
  • 303c98c fix(@ angular-devkit/build-angular): normalize exclude path
  • 455aed8 Revert "test: temporary disable Jest E2E tests"
  • 278bfa0 test(@ angular-devkit/build-angular): add test to validate vite cache re-usage
  • a8f041f release: cut the v17.0.0-rc.4 release
  • ae45c4a feat(@ schematics/angular): update `ng new` generated application
  • e10f49e fix(@ angular-devkit/build-angular): convert AOT compiler exceptions into diagnostics
  • 1b38430 fix(@ angular-devkit/build-angular): disable parallel TS/NG compilation inside WebContainers
  • f87f22d fix(@ angular-devkit/build-angular): keep dependencies pre-bundling validate between builds
  • d46fb12 fix(@ angular-devkit/build-angular): disable dependency optimization for SSR
  • 4733cd3 refactor(@ angular-devkit/build-angular): clean externalMetadata arrays on every rebuild
  • a02db0a refactor(@ angular-devkit/build-angular): allow JS transformer result reuse for application dev-server builder
  • 323b005 build: update angular
  • 59c22aa perf(@ angular-devkit/build-angular): start SSR dependencies optimization before the first request

See the full diff

Package name: @nx/angular The new version differs by 250 commits.
  • 15f558d docs(core): move global & nx wrapper to installation page
  • 96b8bdb docs(core): move task related recipes into task section
  • 68064b5 docs(core): improve core features and concepts
  • 470a0a3 fix(misc): update re-exports when updating imports during move (#19637)
  • b90aab6 fix(vue): default unit test to vitest (#19746)
  • c076521 docs(core): contributing guide for docs (#19738)
  • 40a946a fix(core): fix convert to monorepo eslint issue (#19713)
  • 85bda9a fix(react): fix creating a react library with cwd (#19721)
  • f619c80 chore(repo): update nx to 17.0.0-rc.2 (#19740)
  • e887671 fix(vue): downgrade @ vue/eslint-config-prettier to work with prettier v2 (#19741)
  • 90e0795 fix(storybook): update to patch 7.5.1 webpackStatsJson fix (#19736)
  • fb37e0d docs(misc): Add Manage Library Versions recipe (#19666)
  • 2ad467c fix(js): use normalized tsConfig path for generating tmpTscConfig (#18794)
  • d798126 fix(js): Avoid `@ babel/preset-env` warning in js/babel.ts (#14772)
  • 93e1e1b chore(repo): update post install script to manually check for rust version less than 1.70 (#19739)
  • ef4ffe9 fix(linter): add migration for eslint config prettier (#19732)
  • e56dd31 fix(js): update esbuild version (#19728)
  • 7caae07 fix(angular): federate-module should support as-provided for new remotes (#19731)
  • 1d647d4 fix(nx-dev): fix broken linter icon (#19735)
  • b773744 docs(nx-cloud): update release notes (#19687)
  • 0418708 fix(nx-cloud): fix nx connect throwing if run twice (#19729)
  • 879436f fix(core): check nxjson cli exists before looking for keys (#19730)
  • b9e671c fix(react): Error when invalid path is provided to federate-module generator (#19720)
  • 024abd2 fix(core): only show cloud messaging when migrating if not using cloud (#19709)

See the full diff

Package name: @nx/cypress The new version differs by 250 commits.
  • 15f558d docs(core): move global & nx wrapper to installation page
  • 96b8bdb docs(core): move task related recipes into task section
  • 68064b5 docs(core): improve core features and concepts
  • 470a0a3 fix(misc): update re-exports when updating imports during move (#19637)
  • b90aab6 fix(vue): default unit test to vitest (#19746)
  • c076521 docs(core): contributing guide for docs (#19738)
  • 40a946a fix(core): fix convert to monorepo eslint issue (#19713)
  • 85bda9a fix(react): fix creating a react library with cwd (#19721)
  • f619c80 chore(repo): update nx to 17.0.0-rc.2 (#19740)
  • e887671 fix(vue): downgrade @ vue/eslint-config-prettier to work with prettier v2 (#19741)
  • 90e0795 fix(storybook): update to patch 7.5.1 webpackStatsJson fix (#19736)
  • fb37e0d docs(misc): Add Manage Library Versions recipe (#19666)
  • 2ad467c fix(js): use normalized tsConfig path for generating tmpTscConfig (#18794)
  • d798126 fix(js): Avoid `@ babel/preset-env` warning in js/babel.ts (#14772)
  • 93e1e1b chore(repo): update post install script to manually check for rust version less than 1.70 (#19739)
  • ef4ffe9 fix(linter): add migration for eslint config prettier (#19732)
  • e56dd31 fix(js): update esbuild version (#19728)
  • 7caae07 fix(angular): federate-module should support as-provided for new remotes (#19731)
  • 1d647d4 fix(nx-dev): fix broken linter icon (#19735)
  • b773744 docs(nx-cloud): update release notes (#19687)
  • 0418708 fix(nx-cloud): fix nx connect throwing if run twice (#19729)
  • 879436f fix(core): check nxjson cli exists before looking for keys (#19730)
  • b9e671c fix(react): Error when invalid path is provided to federate-module generator (#19720)
  • 024abd2 fix(core): only show cloud messaging when migrating if not using cloud (#19709)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants