This repository has been archived by the owner on Aug 14, 2024. It is now read-only.
[Snyk] Upgrade @nodesecure/js-x-ray from 7.0.0 to 7.1.1 #215
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @nodesecure/js-x-ray from 7.0.0 to 7.1.1. See this package in npm: @nodesecure/js-x-ray See this project in Snyk: https://app.snyk.io/org/nodesecure/project/8ec6fd78-2b32-4a22-b84f-3acf0336e501?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @nodesecure/js-x-ray from 7.0.0 to 7.1.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 2 versions ahead of your current version.
The recommended version was released on 21 days ago.
Release notes
Package name: @nodesecure/js-x-ray
-
7.1.1 - 2024-05-15
- refactor: implement API exports & minimal docs by @ fraxken in #264
-
7.1.0 - 2024-05-15
- chore(deps): bump the github-actions group with 2 updates by @ dependabot in #255
- chore(deps-dev): bump eslint from 8.57.0 to 9.0.0 in the development-dependencies group by @ dependabot in #257
- Create EntryFilesAnalyzer class to analyze a set of entry files by @ jean-michelet in #258
- Handle
- chore(deps): bump the github-actions group with 5 updates by @ dependabot in #262
- add shady link regex for check url with ips by @ sairuss7 in #260
- docs: add sairuss7 as a contributor for code by @ allcontributors in #263
import { EntryFilesAnalyser } from "@ nodesecure/js-x-ray";
- @ sairuss7 made their first contribution in #260
-
7.0.0 - 2024-03-31
- chore(deps): bump is-svg from 4.4.0 to 5.0.0 by @ dependabot in #181
- Docs: Fix badges in workspaces by @ fabnguess in #184
- fix the example in readme to prevent "location" field displays wrong way when running as script with Node.js. (nested displayed as [Array]) by @ zxkmm in #185
- refactor(test): move regress to /issues folder by @ fraxken in #186
- refactor: remove ASTDeps class and rename Anaysis to SourceFile by @ fraxken in #187
- refactor: use new SourceParser class by @ fraxken in #189
- chore(deps): bump string-width from 5.1.2 to 7.0.0 by @ dependabot in #182
- refactor(probe): allow array of validateNode functions by @ fraxken in #191
- docs: estree-ast-utils typo by @ PierreDemailly in #192
- fix(estree-ast-utils): add missing d.ts by @ fraxken in #193
- feat(getCallExpressionIdentifier): add resolveCallExpression option by @ fraxken in #194
- refactor: new ProbeRunner class by @ fraxken in #195
- fix(unsafe-import): warning on unsafe-import using eval/require by @ tchapacan in #190
- fix(isRequire): do not resolve CallExpr by @ fraxken in #200
- Remove mockedFunction for Node.js test runner mock method by @ jean-michelet in #201
- docs: add jean-michelet as a contributor for test by @ allcontributors in #202
- chore(deps-dev): bump c8 from 8.0.1 to 9.0.0 by @ dependabot in #199
- chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0 by @ dependabot in #197
- Bug#170 by @ jean-michelet in #206
- feat(probeRunner): assert probes method in proberunner by @ tchapacan in #204
- docs: add tchapacan as a contributor for code, and test by @ allcontributors in #207
- Report.isOneLineRequire should be true if single line LogicalExpression assignment by @ jean-michelet in #205
- refactor: split utils by @ mkarkkainen in #209
- docs: add mkarkkainen as a contributor for code by @ allcontributors in #210
- replace dead link by the webarchive one by @ jean-michelet in #213
- build path.join called in require if args are string literals by @ jean-michelet in #212
- chore(deps): bump actions/setup-node from 4.0.0 to 4.0.1 by @ dependabot in #198
- chore(deps): bump github/codeql-action from 2.22.8 to 3.22.12 by @ dependabot in #196
- Make SourceParser class heritable + create and use JsSourceParser in … by @ jean-michelet in #215
- Refactor runASTAnalysis functions to use class AstAnalyser by @ jean-michelet in #216
- docs: add jean-michelet as a contributor for code, test, and doc by @ allcontributors in #217
- Create ts-source-parser package by @ jean-michelet in #218
- docs(suspicious-file): fix typo by @ FredGuiou in #219
- docs: add FredGuiou as a contributor for doc by @ allcontributors in #222
- Update doc by @ jean-michelet in #226
- refactor: consider Function("return this") as safe by @ fraxken in #211
- refactor(analysis) : rename 'analysis' variable to 'sourceFile' by @ FredGuiou in #232
- chore(deps): bump actions/upload-artifact from 4.0.0 to 4.3.0 by @ dependabot in #230
- chore(deps): bump step-security/harden-runner from 2.6.1 to 2.7.0 by @ dependabot in #229
- chore(deps): bump github/codeql-action from 3.22.12 to 3.23.2 by @ dependabot in #228
- docs: add FredGuiou as a contributor for code, and doc by @ allcontributors in #234
- Refactor isRequire probe with new class RequireCallExpressionWalker by @ jean-michelet in #231
- Use JsSourceParser as default parser for AstAnalyser class by @ madina0801 in #227
- docs: add madina0801 as a contributor for code by @ allcontributors in #236
- refactor!: implement NodeCounter & Deobfuscator class by @ fraxken in #239
- refactor(sec-literal/test): use the Node.js native test runner by @ fabnguess in #242
- chore: update copyright by @ fabnguess in #240
- chore: using dependabot groups by @ fabnguess in #244
- refactor(estree-ast-utils/test): migrate to test_runner by @ FredGuiou in #251
- chore(deps): bump the github-actions group with 3 updates by @ dependabot in #248
- chore(deps): bump the dependencies group with 1 update by @ dependabot in #252
- feat(customProbes): inject custom probes as param for AstAnalyser by @ tchapacan in #250
- ci(nodejs): automatically merge dependabot PR by @ fraxken in #254
- @ zxkmm made their first contribution in #185
- @ tchapacan made their first contribution in #190
- @ jean-michelet made their first contribution in #201
- @ mkarkkainen made their first contribution in #209
- @ FredGuiou made their first contribution in #219
- @ madina0801 made their first contribution in #227
from @nodesecure/js-x-ray GitHub release notesWhat's Changed
Full Changelog: v7.1.0...v7.1.1
What's Changed
ImportExpressionnodes by @ jean-michelet in #261EntryFilesAnalyzer
const efa = new EntryFilesAnalyser();
const entryFiles = ["./path/to/file"];
for await (const fileResult of efa.analyse(entryFiles)) {
console.log(entryFiles);
}
New Contributors
Full Changelog: v7.0.0...v7.1.0
What's Changed
New Contributors
Full Changelog: v6.3.0...v7.0.0
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: