Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: ejs, mariadb, pg, prettier, reflect-metadata, sequelize #13

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: ejs, mariadb, pg, prettier, reflect-metadata, sequelize #13

wants to merge 1 commit into from

Conversation

pranay10318
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

ejs
from 3.1.9 to 3.1.10 | 1 version ahead of your current version | 5 months ago
on 2024-04-12
mariadb
from 3.2.3 to 3.3.1 | 2 versions ahead of your current version | 3 months ago
on 2024-06-05
pg
from 8.11.3 to 8.12.0 | 4 versions ahead of your current version | 3 months ago
on 2024-06-04
prettier
from 3.2.5 to 3.3.3 | 4 versions ahead of your current version | 2 months ago
on 2024-07-13
reflect-metadata
from 0.2.1 to 0.2.2 | 1 version ahead of your current version | 6 months ago
on 2024-03-29
sequelize
from 6.37.1 to 6.37.3 | 2 versions ahead of your current version | 5 months ago
on 2024-04-13

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Improper Control of Dynamically-Managed Code Resources
SNYK-JS-EJS-6689533		 479 No Known Exploit
Release notes
Package name: ejs from ejs GitHub release notes
Package name: mariadb
  • 3.3.1 - 2024-06-05

    3.3.1 (May 2024)

    Full Changelog

    Issues Fixed

    • CONJS-288 ensure pool timeout error give details #268
    • CONJS-289 connection possibly staying in hanging state after batch execution #281
    • CONJS-290 possible ECONRESET when executing batch #281
    • CONJS-292 ensure String object parameter
    • CONJS-286 exchanges stop when closing prepare and prepareCacheLength is set to 0
    • CONJS-287 typescript missing queryoption for prepare command
  • 3.3.0 - 2024-03-21

    3.3.0 (Mar 2024)

    Full Changelog

    Notable changes

    • CONJS-284 pipeline PREPARE and EXECUTE
    • CONJS-264 TLS ephemeral certificate automatic implementation
    • CONJS-279 Improve text encoding decoding

    Issues Fixed

    • CONJS-281 cannot connect to 11.3+ server with character-set-collations = utf8mb4=uca1400_ai_ci
    • CONJS-277 using connection.importFile when connection is not connected to database result in error
    • CONJS-278 Possible buffer overwrite when sending query bigger than 16M
    • CONJS-282 error when using mysql_clear_test password authentication plugin
    • CONJS-283 wrong decoding of binary unsigned MEDIUMINT
    • CONJS-285 DECIMAL field wrong decoding with deprecated option 'supportBigNumbers' set
  • 3.2.3 - 2023-12-19

    3.2.3 (Dec 2023)

    Full Changelog

    • CONJS-207 Add support for connection redirection
    • CONJS-271 wrong binary decoding of 00:00:00 TIME values
    • CONJS-272 Error doesn't always have parameters according to option
    • CONJS-273 Bulk insert error when last bunch of parameters is reaching max_allowed_packet
    • CONJS-274 permit disabling BULK insert for one batch
    • CONJS-207 Add support for connection redirection
from mariadb GitHub release notes
Package name: pg from pg GitHub release notes
Package name: prettier from prettier GitHub release notes
Package name: reflect-metadata from reflect-metadata GitHub release notes
Package name: sequelize from sequelize GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
adf8d03 
Snyk has created this PR to upgrade:
  - ejs from 3.1.9 to 3.1.10.
    See this package in npm: https://www.npmjs.com/package/ejs
  - mariadb from 3.2.3 to 3.3.1.
    See this package in npm: https://www.npmjs.com/package/mariadb
  - pg from 8.11.3 to 8.12.0.
    See this package in npm: https://www.npmjs.com/package/pg
  - prettier from 3.2.5 to 3.3.3.
    See this package in npm: https://www.npmjs.com/package/prettier
  - reflect-metadata from 0.2.1 to 0.2.2.
    See this package in npm: https://www.npmjs.com/package/reflect-metadata
  - sequelize from 6.37.1 to 6.37.3.
    See this package in npm: https://www.npmjs.com/package/sequelize

See this project in Snyk:
https://app.snyk.io/org/pranay10318/project/4faca49d-cd78-46de-a6b5-be4b7b6ef79a?utm_source=github&utm_medium=referral&page=upgrade-pr
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Sep 13, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@codecov Codecov
Copy link

codecov bot commented Sep 13, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@pranay10318 @snyk-bot