Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #126

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

adamlaska
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • tools/node-lint-md-cli-rollup/package.json
    • tools/node-lint-md-cli-rollup/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: unified-args The new version differs by 43 commits.

See the full diff

Package name: unified-engine The new version differs by 144 commits.
  • ed25e2d 11.0.0
  • 4c53efa Add support for `URL` to `filePath`, `ignorePath`, `output`, `rcPath`
  • d6c6555 Change to require Node.js 16
  • 796d7b9 Change to use `exports`
  • 6561ed3 Refactor docs
  • e34c274 Remove `VFileReporterOptions` type
  • 2249314 Change to include dotfiles by default
  • 65da801 Refactor code-style
  • ed7b512 Add Gallium to Actions
  • b0900f2 Add `ignore-scripts` to `.npmrc`
  • fe5f9d3 Refactor `tsconfig.json`
  • 8fe7100 Refactor `package.json`
  • 42f0823 Update `unified`, `vfile`, `@ types/unist`, utilities
  • 7413acd Update `glob`
  • 6bb9bb5 Update dev-dependencies
  • 72ddbc9 Add export of hidden `Configuration` class
  • 1fdd4a8 Fix docs to reflect updated example
  • 791b38f Update dev-dependencies
  • 5468193 10.1.0
  • 245bd28 Add support for async reporters
  • 398ebe2 Refactor some docs
  • be03fa5 Use Node test runner
  • 0f6a2fa Update Actions
  • 00591bf Refactor `tsconfig.json`

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

…cli-rollup/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
Copy link

google-cla bot commented Nov 30, 2023

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Copy link

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages Version New capabilities Transitives Size Publisher
ini 1.3.5...1.3.8 None +0/-0 9.3 kB isaacs
unified-engine 6.0.1...11.0.0 None +39/-16 2.22 MB wooorm
unified-args 7.0.0...9.0.1 None +2/-26 59.2 kB wooorm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants