[Snyk] Upgrade snyk-nuget-plugin from 1.16.0 to 1.39.1

[EitanGayor]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade snyk-nuget-plugin from 1.16.0 to 1.39.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 46 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2023-09-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-XML2JS-5414874	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept
	Prototype Pollution SNYK-JS-XML2JS-5414874	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: snyk-nuget-plugin

• 1.39.1 - 2023-09-28
  

  1.39.1 (2023-09-28)

  Bug Fixes

  • [OSM-699] Replace isSupported runtime assembly logic with shared logic from dotnet-deps-parser (#181) (885486a)
  • fixed locked version bug (#182) (83d6275)
• 1.39.0 - 2023-09-26
  

  1.39.0 (2023-09-26)

  Features

  • renaming target-framework to dotnet-target-framework (#179) (9c48169)
• 1.38.0 - 2023-09-26
  

  1.38.0 (2023-09-26)

  Features

  • [OSM-347] Next csharp bundle attempt (#178) (687e7f5)
• 1.37.0 - 2023-09-21
  

  chore: pipeline test on main and release fail (#177)

• 1.36.0 - 2023-09-20
  

  1.36.0 (2023-09-20)

  Features

  • [OSM-347] Return multiple results part 1: Conforming to the CLI plugin interface (#172) (232e86d)
• 1.35.0 - 2023-09-20
  

  1.35.0 (2023-09-20)

  Features

  • [OSM-347] Return multiple results part 2: Removing stuff we never used (#173) (25ab60d)
• 1.34.0 - 2023-09-06
  

  1.34.0 (2023-09-06)

  Features

  • [OSM-347] Enable override with --target-framework if specified for v2 logic (#170) (cb11cd6)
• 1.33.0 - 2023-09-04
  

  1.33.0 (2023-09-04)

  Features

  • [OSM-347] Preparing logic for handling of multiple target frameworks (#169) (52b1acd)
• 1.32.0 - 2023-09-03
  

  1.32.0 (2023-09-03)

  Features

  • [OSM-592] Add support multiple target frameworks for v2 logic (#167) (d1b1ecf)
• 1.31.0 - 2023-08-04
  

  1.31.0 (2023-08-04)

  Features

  • adding a warning message when running this with runtime resolution (#166) (8241981)
• 1.30.0 - 2023-08-04
• 1.29.0 - 2023-08-03
• 1.28.0 - 2023-08-01
• 1.27.0 - 2023-08-01
• 1.26.0 - 2023-07-19
• 1.25.5 - 2023-07-16
• 1.25.4 - 2023-07-16
• 1.25.3 - 2023-07-04
• 1.25.2 - 2023-05-09
• 1.25.1 - 2023-05-09
• 1.25.0 - 2023-04-11
• 1.24.1 - 2023-04-04
• 1.24.0 - 2023-03-30
• 1.23.5 - 2022-05-02
• 1.23.4 - 2021-12-20
• 1.23.3 - 2021-12-15
• 1.23.2 - 2021-12-10
• 1.23.1 - 2021-11-22
• 1.23.0 - 2021-11-19
• 1.22.1 - 2021-08-13
• 1.22.0 - 2021-07-26
• 1.21.3 - 2021-05-07
• 1.21.2 - 2021-05-06
• 1.21.1 - 2021-04-19
• 1.21.0 - 2021-02-10
• 1.20.0 - 2021-01-28
• 1.19.4 - 2020-11-05
• 1.19.3 - 2020-09-09
• 1.19.2 - 2020-09-08
• 1.19.1 - 2020-06-16
• 1.19.0 - 2020-05-24
• 1.18.1 - 2020-05-11
• 1.18.0 - 2020-05-11
• 1.17.0 - 2020-04-29
• 1.16.2 - 2020-01-02
• 1.16.1 - 2019-12-18
• 1.16.0 - 2019-12-18

from snyk-nuget-plugin GitHub release notes

Commit messages

Package name: snyk-nuget-plugin

• 885486a fix: [OSM-699] Replace `isSupported` runtime assembly logic with shared logic from `dotnet-deps-parser` ([Snyk] Security upgrade ember-cli from 0.2.7 to 1.13.5 #181)
• 83d6275 fix: fixed locked version bug ([Snyk] Security upgrade validator from 3.40.0 to 13.6.0 #182)
• 9c48169 feat: renaming target-framework to dotnet-target-framework ([Snyk] Fix for 5 vulnerabilities #179)
• 687e7f5 feat: [OSM-347] Next `csharp` bundle attempt ([Snyk] Security upgrade grunt from 0.4.5 to 1.3.0 #178)
• 338f88a chore: pipeline test on main and release fail ([Snyk] Security upgrade ember-cli from 0.2.7 to 3.16.0 #177)
• e46a078 chore: asset classification ([Snyk] Security upgrade madge from 3.12.0 to 4.0.0 #176)
• 3677797 chore: pipeline test on main and release fail ([Snyk] Security upgrade django from 1.6.1 to 2.2.18 #171)
• 9293c98 feat: [OSM-347] Return multiple results part 3: Doubtless `TargetFramework`s. ([Snyk] Security upgrade snyk from 1.101.1 to 1.230.7 #175)
• 232e86d feat: [OSM-347] Return multiple results part 1: Conforming to the CLI plugin interface ([Snyk] Security upgrade proxy-agent from 3.1.1 to 4.0.0 #172)
• 25ab60d feat: [OSM-347] Return multiple results part 2: Removing stuff we never used ([Snyk] Fix for 2 vulnerabilities #173)
• cb11cd6 feat: [OSM-347] Enable override with `--target-framework` if specified for `v2` logic ([Snyk] Security upgrade ember-cli-mocha from 0.7.0 to 0.8.0 #170)
• 52b1acd feat: [OSM-347] Preparing logic for handling of multiple target frameworks ([Snyk] Security upgrade grunt-contrib-uglify from 0.9.1 to 0.11.1 #169)
• d442323 chore: don't release on detected vulns in image ([Snyk] Security upgrade snyk from 1.101.1 to 1.465.0 #168)
• d1b1ecf feat: [OSM-592] Add support multiple target frameworks for v2 logic ([Snyk] Security upgrade mongoose from 4.2.4 to 5.12.2 #167)
• 21e1b1d chore: adding types
• 8241981 feat: adding a warning message when running this with runtime resolution ([Snyk] Security upgrade npm from 2.15.12 to 7.0.0 #166)
• 258f6b3 feat: replacing exec with a subprocess with support for Snyk CLI V2 custom proxy env vars ([Snyk] Security upgrade snyk from 1.101.1 to 1.465.0 #165)
• a4277a9 chore: configure semantic-release to use the main branch as our release branch
• 3a317fc fix: master -> main ([Snyk] Fix for 1 vulnerabilities #164)
• c780af5 fix: master -> main
• 90ebff7 Housekeeping Pt6: Survival of the fixturest ([Snyk] Security upgrade madge from 3.12.0 to 4.0.1 #162)
• 1e81b29 Revert "Housekeeping Pt6: Survival of the fixturest ([Snyk] Security upgrade knex from 0.7.3 to 0.95.0 #160)" ([Snyk] Security upgrade ava from 0.25.0 to 2.0.0 #161)
• e0c6879 Housekeeping Pt6: Survival of the fixturest ([Snyk] Security upgrade knex from 0.7.3 to 0.95.0 #160)
• cea4390 feat: [OSM-571] Runtime resolution fixes ([Snyk] Security upgrade ember-cli from 0.2.7 to 3.5.0 #157)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs