Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: minimatch, glob, , event-kit, , underscore-plus, fs-plus, temp, async, pathwatcher, atom-keymap, etch, atom-select-list, marked, resolve, first-mate, chart.js, color, devtron, find-parent-dir, focus-trap, fs-admin, fstream, git-utils, tree-sitter-css, less-cache, mocha, mocha-junit-reporter, mocha-multi-reporters, normalize-package-data, nslog, postcss, postcss-selector-parser, scandal, scrollbar-style, sinon, text-buffer, tree-sitter, typescript-simple, winreg #1442

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

[Snyk] Upgrade: minimatch, glob, , event-kit, , underscore-plus, fs-plus, temp, async, pathwatcher, atom-keymap, etch, atom-select-list, marked, resolve, first-mate, chart.js, color, devtron, find-parent-dir, focus-trap, fs-admin, fstream, git-utils, tree-sitter-css, less-cache, mocha, mocha-junit-reporter, mocha-multi-reporters, normalize-package-data, nslog, postcss, postcss-selector-parser, scandal, scrollbar-style, sinon, text-buffer, tree-sitter, typescript-simple, winreg #1442

wants to merge 1 commit into from

Conversation

restinpeaceinout
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

minimatch
from 3.0.4 to 3.1.2 | 7 versions ahead of your current version | 3 years ago
on 2022-02-15
glob
from 7.1.2 to 7.2.3 | 8 versions ahead of your current version | 2 years ago
on 2022-05-15
@atom/nsfw
from 1.0.18 to 1.0.28 | 12 versions ahead of your current version | 3 years ago
on 2021-07-05
event-kit
from 2.5.2 to 2.5.3 | 1 version ahead of your current version | 6 years ago
on 2018-11-14
@atom/watcher
from 1.0.8 to 1.3.5 | 14 versions ahead of your current version | 4 years ago
on 2020-11-25
underscore-plus
from 1.6.8 to 1.7.0 | 1 version ahead of your current version | 5 years ago
on 2019-03-29
fs-plus
from 3.0.2 to 3.1.1 | 3 versions ahead of your current version | 6 years ago
on 2018-12-19
temp
from 0.8.3 to 0.9.4 | 5 versions ahead of your current version | 4 years ago
on 2020-11-10
async
from 0.2.6 to 0.9.2 | 15 versions ahead of your current version | 9 years ago
on 2015-05-19
pathwatcher
from 8.0.1 to 8.1.2 | 4 versions ahead of your current version | 3 years ago
on 2021-07-06
atom-keymap
from 8.2.11 to 8.2.15 | 5 versions ahead of your current version | 3 years ago
on 2021-07-07
etch
from 0.12.8 to 0.14.1 | 3 versions ahead of your current version | 4 years ago
on 2020-09-23
atom-select-list
from 0.7.2 to 0.8.1 | 2 versions ahead of your current version | 3 years ago
on 2021-05-21
marked
from 0.3.19 to 0.8.2 | 12 versions ahead of your current version | 4 years ago
on 2020-03-22
resolve
from 1.8.1 to 1.22.8 | 34 versions ahead of your current version | a year ago
on 2023-10-10
first-mate
from 7.1.3 to 7.4.3 | 6 versions ahead of your current version | 3 years ago
on 2021-07-06
chart.js
from 2.7.2 to 2.9.4 | 8 versions ahead of your current version | 4 years ago
on 2020-10-18
color
from 0.7.3 to 0.11.4 | 9 versions ahead of your current version | 8 years ago
on 2016-11-01
devtron
from 1.3.0 to 1.4.0 | 1 version ahead of your current version | 8 years ago
on 2016-10-07
find-parent-dir
from 0.3.0 to 0.3.1 | 1 version ahead of your current version | 3 years ago
on 2021-05-14
focus-trap
from 2.4.5 to 2.4.6 | 1 version ahead of your current version | 6 years ago
on 2018-06-10
fs-admin
from 0.1.7 to 0.20.0 | 19 versions ahead of your current version | 3 years ago
on 2022-02-10
fstream
from 0.1.24 to 0.1.31 | 7 versions ahead of your current version | 10 years ago
on 2014-08-04
git-utils
from 5.2.1 to 5.7.3 | 12 versions ahead of your current version | 3 years ago
on 2021-07-08
tree-sitter-css
from 0.13.7 to 0.21.1 | 6 versions ahead of your current version | a month ago
on 2024-08-17
less-cache
from 1.1.0 to 1.1.1 | 1 version ahead of your current version | 4 years ago
on 2020-12-11
mocha
from 2.5.1 to 2.5.3 | 2 versions ahead of your current version | 8 years ago
on 2016-05-25
mocha-junit-reporter
from 1.17.0 to 1.23.3 | 9 versions ahead of your current version | 5 years ago
on 2020-01-16
mocha-multi-reporters
from 1.1.7 to 1.5.1 | 2 versions ahead of your current version | 4 years ago
on 2020-11-04
normalize-package-data
from 2.4.0 to 2.5.0 | 3 versions ahead of your current version | 6 years ago
on 2019-02-05
nslog
from 3.0.0 to 3.2.0 | 2 versions ahead of your current version | 5 years ago
on 2019-06-06
postcss
from 5.2.4 to 5.2.18 | 14 versions ahead of your current version | 7 years ago
on 2017-10-04
postcss-selector-parser
from 2.2.1 to 2.2.3 | 2 versions ahead of your current version | 8 years ago
on 2017-02-23
scandal
from 3.1.0 to 3.2.0 | 2 versions ahead of your current version | 5 years ago
on 2019-06-17
scrollbar-style
from 3.2.0 to 3.2.3 | 3 versions ahead of your current version | 4 years ago
on 2020-12-10
sinon
from 1.17.4 to 1.17.7 | 3 versions ahead of your current version | 8 years ago
on 2016-12-31
text-buffer
from 13.14.10 to 13.18.6 | 25 versions ahead of your current version | 3 years ago
on 2021-04-28
tree-sitter
from 0.13.16 to 0.21.1 | 44 versions ahead of your current version | 6 months ago
on 2024-03-28
typescript-simple
from 1.0.0 to 1.0.3 | 5 versions ahead of your current version | 9 years ago
on 2015-04-16
winreg
from 1.2.4 to 1.2.5 | 1 version ahead of your current version | a year ago
on 2023-10-20

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-HAWK-2808852		 584 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067		 584 Proof of Concept
medium severity Prototype Pollution
npm:hoek:20180212		 584 Proof of Concept
critical severity Authentication Bypass
SNYK-JS-HAWK-6969142		 584 Proof of Concept
high severity Prototype Pollution
SNYK-JS-CHARTJS-1018716		 584 Proof of Concept
high severity Regular Expression Denial of Service (ReDoS)
npm:diff:20180305		 584 Proof of Concept
high severity Prototype Pollution
npm:extend:20180424		 584 No Known Exploit
medium severity Time of Check Time of Use (TOCTOU)
npm:chownr:20180731		 584 No Known Exploit
Release notes
Package name: minimatch from minimatch GitHub release notes
Package name: glob from glob GitHub release notes
Package name: @atom/nsfw
  • 1.0.28 - 2021-07-05
  • 1.0.27 - 2020-11-25
  • 1.0.26 - 2019-11-29
  • 1.0.25 - 2019-06-14
  • 1.0.24 - 2019-06-13
  • 1.0.23 - 2019-05-23
  • 1.0.23-1 - 2019-05-21
  • 1.0.23-0 - 2019-05-21
  • 1.0.22 - 2019-05-06
  • 1.0.21 - 2019-02-06
  • 1.0.20 - 2018-09-06
  • 1.0.19 - 2018-08-10
  • 1.0.18 - 2017-10-27
from @atom/nsfw GitHub release notes
Package name: event-kit from event-kit GitHub release notes
Package name: @atom/watcher from @atom/watcher GitHub release notes
Package name: underscore-plus from underscore-plus GitHub release notes
Package name: fs-plus from fs-plus GitHub release notes
Package name: temp
  • 0.9.4 - 2020-11-10
    No content.
  • 0.9.2 - 2020-10-26

    v0.9.2

  • 0.9.1 - 2019-10-30
    No content.
  • 0.9.0 - 2018-12-15

    Bumps version 0.9.0 and resolves minor bugs with package.

  • 0.8.4 - 2019-10-30
  • 0.8.3 - 2015-06-08

    Adds os.tmpdir() polyfill changes from sindresorhus

from temp GitHub release notes
Package name: async
  • 0.9.2 - 2015-05-19
  • 0.9.0 - 2014-05-16
  • 0.8.0 - 2014-04-29
  • 0.7.0 - 2014-04-07
  • 0.6.2 - 2014-03-31
  • 0.6.1 - 2014-03-30
  • 0.6.0 - 2014-03-30
  • 0.5.0 - 2014-03-30
  • 0.4.1 - 2014-03-30
  • 0.4.0 - 2014-03-28
  • 0.3.0 - 2014-03-28
  • 0.2.10 - 2014-01-23
  • 0.2.9 - 2013-05-28
  • 0.2.8 - 2013-05-01
  • 0.2.7 - 2013-04-09
  • 0.2.6 - 2013-03-03
from async GitHub release notes
Package name: pathwatcher from pathwatcher GitHub release notes
Package name: atom-keymap from atom-keymap GitHub release notes
Package name: etch from etch GitHub release notes
Package name: atom-select-list
  • 0.8.1 - 2021-05-21
  • 0.8.0 - 2021-01-12
  • 0.7.2 - 2018-08-20

    0.7.2

from atom-select-list GitHub release notes
Package name: marked
  • 0.8.2 - 2020-03-22

    Fixes

    • Add html to TextRenderer for html in headings #1622
    • Remove html tags in heading ids #1622

    Docs

    • Update comment about GitHub breaks #1620
  • 0.8.1 - 2020-03-18

    Fixes

    • Fix marked --help #1588
    • Fix GFM Example 116 code fences #1600
    • Send inline html to renderer #1602 (fixes #1601)
    • Improve docs example for invoking highlight.js #1603
    • Fix block-level elements breaking tables #1598 (fixes #1467)
    • break nptables on block-level structures #1617
  • 0.8.0 - 2019-12-12

    Breaking changes

    Fixes

    • Fix relative urls in baseUrl option #1526
    • Loose task list #1535
    • Fix image parentheses #1557
    • remove module field & update devDependencies #1581

    Docs

    • Update examples with es6+ #1521
    • Fix link to USING_PRO.md page #1552
    • Fix typo in USING_ADVANCED.md #1558
    • Node worker threads are stable #1555

    Dev Dependencies

    • Update deps #1516
    • Update eslint #1542
    • Update htmldiffer async matcher #1543
  • 0.7.0 - 2019-07-06

    Security

    • Sanitize paragraph and text tokens #1504
    • Fix ReDOS for links with backticks (issue #1493) #1515

    Breaking Changes

    • Deprecate sanitize and sanitizer options #1504
    • Move fences to CommonMark #1511
    • Move tables to GFM #1511
    • Remove tables option #1511
    • Single backtick in link text needs to be escaped #1515

    Fixes

    Tests

    • Run tests with correct options #1511
  • 0.6.3 - 2019-06-30

    Fixes

    Docs

    • add docs for workers #1432
    • Add security policy #1492
    • Update supported spec versions #1491
    • Update test folder descriptions #1506

    DevOps

    • Use latest commit for demo master #1457
    • Update tests to commonmark 0.29 #1465
    • Update tests to GFM 0.29 #1470
    • Fix commonmark spec 57 and 40 (headings) #1475
  • 0.6.2 - 2019-04-05

    Security

    Fixes

    • Links parens #1435
    • New line after table with escaped pipe #1439
    • List item tables #1446

    Enhancements

    • Pass token boolean to the listitem function #1440
    • Allow html without \n after #1438

    CLI

    • Update man page to include --test and fix argv parameters #1442
    • Add a --version flag to print marked version #1448

    Testing

    • Normalize marked tests #1444
    • Update tests to node 4 syntax #1449
  • 0.6.1 - 2019-02-19

    Fixes

    • Fix parenthesis url redos #1414

    Docs

    • Update demo site to use a worker #1418
    • Update devDependencies to last stable #1409
    • Update documentation about extending Renderer #1417
    • Remove --save option as it isn't required anymore #1422
    • Add snyk badge #1420
  • 0.6.0 - 2019-01-01

    Breaking Changes

    • Drop support for Node v0.10 and old browsers such as Internet Explorer
      • You should not have any problems if using Node 4+ or a modern browser
    • Add parameter slugger to Renderer.prototype.heading method #1401
      • You should not have any problems if you do not override this method

    New Features

    • Add new export marked.Slugger #1401

    Fixes

    • Fix emphasis followed by a punctuation #1383
    • Fix bold around autolink email address #1385
    • Make autolinks case insensitive #1384
    • Make code fences compliant with Commonmark spec #1387
    • Make blockquote paragraph continuation compliant with Commonmark spec #1394
    • Make ordered list marker length compliant with Commonmark spec #1391
    • Make empty list items compliant with Commonmark spec #1395
    • Make tag escaping compliant with Commonmark spec #1397
    • Make strong/bold compliant with Commonmark spec #1400
    • Fix handling of adjacent lists #684
    • Add better error handling when token type cannot be found #1005
    • Fix duplicate heading id and non-latin characters #1401

    CLI

    • Pretty print ENOENT errors on cli #1396
    • Update repo url in man #1403

    Docs

    Tests

    • Remove old test covered by gfm/cm #1389
  • 0.5.2 - 2018-11-20

    Bug Fixes

    • Fix emphasis closing by single _ (part of left-flanking run) #1351
    • Make URL handling consistent between links and images #1359

    Other

    • Add missing semicolons, add lint rule #1340
    • Make Steven (@ styfle) a npm publisher #1346
    • Fix typo in docs: responsibility #1364
    • Add the ability to specify options on the demo page as JSON #1357
      • Show red border when JSON options are invalid #1360
    • Move license file back to root dir #1356
    • Fix builds: remove node v0.10 from travis matrix #1366
      • This does not a break compatibility in this release but it will a future release
    • Add files key to package.json to prevent publishing unused files #1367
  • 0.5.1 - 2018-09-26

    Security

    • Fix inline code regex and prevent REDOS #1337
    • Use @ markedjs/html-differ to prevent REDOS #1331

    Bug Fixes

    • Fix typographic substitution in (pre|code|kbd|script) blocks when smartypants=true #1335
    • Fix auto-linking email address #1338

    Other

    • Refactor the escape() function to improve performance 10-20% #975
    • Update copyright in source code #1326
    • Update benchmark tests #1019
    • Add dependency badges to readme #1333
  • 0.5.0 - 2018-08-16
  • 0.4.0 - 2018...

@snyk-bot
fix: upgrade multiple dependencies with Snyk
a138cad 
Snyk has created this PR to upgrade:
  - minimatch from 3.0.4 to 3.1.2.
    See this package in npm: https://www.npmjs.com/package/minimatch
  - glob from 7.1.2 to 7.2.3.
    See this package in npm: https://www.npmjs.com/package/glob
  - @atom/nsfw from 1.0.18 to 1.0.28.
    See this package in npm: https://www.npmjs.com/package/@atom/nsfw
  - event-kit from 2.5.2 to 2.5.3.
    See this package in npm: https://www.npmjs.com/package/event-kit
  - @atom/watcher from 1.0.8 to 1.3.5.
    See this package in npm: https://www.npmjs.com/package/@atom/watcher
  - underscore-plus from 1.6.8 to 1.7.0.
    See this package in npm: https://www.npmjs.com/package/underscore-plus
  - fs-plus from 3.0.2 to 3.1.1.
    See this package in npm: https://www.npmjs.com/package/fs-plus
  - temp from 0.8.3 to 0.9.4.
    See this package in npm: https://www.npmjs.com/package/temp
  - async from 0.2.6 to 0.9.2.
    See this package in npm: https://www.npmjs.com/package/async
  - pathwatcher from 8.0.1 to 8.1.2.
    See this package in npm: https://www.npmjs.com/package/pathwatcher
  - atom-keymap from 8.2.11 to 8.2.15.
    See this package in npm: https://www.npmjs.com/package/atom-keymap
  - etch from 0.12.8 to 0.14.1.
    See this package in npm: https://www.npmjs.com/package/etch
  - atom-select-list from 0.7.2 to 0.8.1.
    See this package in npm: https://www.npmjs.com/package/atom-select-list
  - marked from 0.3.19 to 0.8.2.
    See this package in npm: https://www.npmjs.com/package/marked
  - resolve from 1.8.1 to 1.22.8.
    See this package in npm: https://www.npmjs.com/package/resolve
  - first-mate from 7.1.3 to 7.4.3.
    See this package in npm: https://www.npmjs.com/package/first-mate
  - chart.js from 2.7.2 to 2.9.4.
    See this package in npm: https://www.npmjs.com/package/chart.js
  - color from 0.7.3 to 0.11.4.
    See this package in npm: https://www.npmjs.com/package/color
  - devtron from 1.3.0 to 1.4.0.
    See this package in npm: https://www.npmjs.com/package/devtron
  - find-parent-dir from 0.3.0 to 0.3.1.
    See this package in npm: https://www.npmjs.com/package/find-parent-dir
  - focus-trap from 2.4.5 to 2.4.6.
    See this package in npm: https://www.npmjs.com/package/focus-trap
  - fs-admin from 0.1.7 to 0.20.0.
    See this package in npm: https://www.npmjs.com/package/fs-admin
  - fstream from 0.1.24 to 0.1.31.
    See this package in npm: https://www.npmjs.com/package/fstream
  - git-utils from 5.2.1 to 5.7.3.
    See this package in npm: https://www.npmjs.com/package/git-utils
  - tree-sitter-css from 0.13.7 to 0.21.1.
    See this package in npm: https://www.npmjs.com/package/tree-sitter-css
  - less-cache from 1.1.0 to 1.1.1.
    See this package in npm: https://www.npmjs.com/package/less-cache
  - mocha from 2.5.1 to 2.5.3.
    See this package in npm: https://www.npmjs.com/package/mocha
  - mocha-junit-reporter from 1.17.0 to 1.23.3.
    See this package in npm: https://www.npmjs.com/package/mocha-junit-reporter
  - mocha-multi-reporters from 1.1.7 to 1.5.1.
    See this package in npm: https://www.npmjs.com/package/mocha-multi-reporters
  - normalize-package-data from 2.4.0 to 2.5.0.
    See this package in npm: https://www.npmjs.com/package/normalize-package-data
  - nslog from 3.0.0 to 3.2.0.
    See this package in npm: https://www.npmjs.com/package/nslog
  - postcss from 5.2.4 to 5.2.18.
    See this package in npm: https://www.npmjs.com/package/postcss
  - postcss-selector-parser from 2.2.1 to 2.2.3.
    See this package in npm: https://www.npmjs.com/package/postcss-selector-parser
  - scandal from 3.1.0 to 3.2.0.
    See this package in npm: https://www.npmjs.com/package/scandal
  - scrollbar-style from 3.2.0 to 3.2.3.
    See this package in npm: https://www.npmjs.com/package/scrollbar-style
  - sinon from 1.17.4 to 1.17.7.
    See this package in npm: https://www.npmjs.com/package/sinon
  - text-buffer from 13.14.10 to 13.18.6.
    See this package in npm: https://www.npmjs.com/package/text-buffer
  - tree-sitter from 0.13.16 to 0.21.1.
    See this package in npm: https://www.npmjs.com/package/tree-sitter
  - typescript-simple from 1.0.0 to 1.0.3.
    See this package in npm: https://www.npmjs.com/package/typescript-simple
  - winreg from 1.2.4 to 1.2.5.
    See this package in npm: https://www.npmjs.com/package/winreg

See this project in Snyk:
https://app.snyk.io/org/phillipgraniero-rxi/project/d78fe8ff-51db-406f-93b7-d8457a314e97?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
2 participants
@restinpeaceinout @snyk-bot