Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade typeorm from 0.2.45 to 0.3.16 #35

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade typeorm from 0.2.45 to 0.3.16.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 283 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2023-05-09.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-FASTXMLPARSER-3325616
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: typeorm
  • 0.3.16 - 2023-05-09

    0.3.16 (2023-05-09)

    Bug Fixes

    Features

    • mariadb uuid inet4 inet6 column data type support (#9845) (d8a2e37)

    Reverts

  • 0.3.16-dev.f5b93c1 - 2023-04-18
  • 0.3.16-dev.e0165e7 - 2023-04-17
  • 0.3.16-dev.d8a2e37 - 2023-04-25
  • 0.3.16-dev.b064049 - 2023-04-18
  • 0.3.16-dev.a188b1d - 2023-05-09
  • 0.3.16-dev.96b7ee4 - 2023-05-09
  • 0.3.16-dev.8795c86 - 2023-05-09
  • 0.3.16-dev.68aa573 - 2023-04-15
  • 0.3.16-dev.54f4f89 - 2023-05-09
  • 0.3.16-dev.3d67901 - 2023-04-18
  • 0.3.16-dev.2a2bb4b - 2023-05-09
  • 0.3.16-dev.21a9d67 - 2023-05-09
  • 0.3.16-dev.06c1e98 - 2023-05-09
  • 0.3.16-dev.9460296 - 2023-05-09
  • 0.3.15 - 2023-04-15

    Bug Fixes

    • make cache optional fields optional (#9942) (159c60a)
    • prevent unique index identical to primary key (all sql dialects) (#9940) (51eecc2)
    • SelectQueryBuilder builds incorrectly escaped alias in Oracle when used on entity with composite key (#9668) (83c6c0e)

    Features

  • 0.3.15-dev.f6a3ce7 - 2023-04-15
  • 0.3.15-dev.f1c5662 - 2023-04-15
  • 0.3.15-dev.3a72e35 - 2023-04-13
  • 0.3.15-dev.115059d - 2023-04-10
  • 0.3.14 - 2023-04-09

    Bug Fixes

    • drop xml & yml connection option support. Addresses security issues in underlying dependency (#9930) (7dac12c)

    Features

  • 0.3.14-dev.daf1b47 - 2023-04-06
  • 0.3.14-dev.0194f17 - 2023-04-06
  • 0.3.13 - 2023-04-06

    Bug Fixes

    • firstCapital=true not working in camelCase() function (f1330ad)
    • handles "query" relation loading strategy for TreeRepositories (#9680) (a11809e), closes #9673
    • improve EntityNotFound error message in QueryBuilder.findOneOrFail (#9872) (f7f6817)
    • loading tables with fk in sqlite query runner (#9875) (4997da0), closes #9266
    • prevent foreign key support during migration batch under sqlite (#9775) (197cc05), closes #9770
    • proper default value on generating migration when default value is a function calling [Postgres] (#9830) (bebba05)
    • react-native doesn't properly work in ESM projects because of circular dependency (#9765) (099fcd9)
    • resolve issues for mssql migration when simple-enum was changed (cb154d4), closes #7785 #9457 #7785 #9457
    • resolves issue with mssql column recreation (#9773) (07221a3), closes #9399
    • transform values for FindOperators #9381 (#9777) (de1228d), closes #9816
    • use forward slashes when normalizing path (#9768) (58fc088), closes #9766
    • use object create if entity skip constructor is set (#9831) (a868979)

    Features

    • add support for json datatype for sqlite (#9744) (4ac8c00)
    • add support for STI on EntitySchema (#9834) (bc306fb), closes #9833
    • allow type FindOptionsOrderValue for order by object property (#9895) (#9896) (0814970)
    • Broadcast identifier for removed related entities (#9913) (f530811)
    • leftJoinAndMapOne and innerJoinAndMapOne map result to entity (#9354) (947ffc3)
  • 0.3.13-dev.f7f6817 - 2023-04-06
  • 0.3.13-dev.f7b210b - 2023-04-05
  • 0.3.13-dev.f1330ad - 2023-04-06
  • 0.3.13-dev.de1228d - 2023-04-06
  • 0.3.13-dev.af4f15c - 2023-04-06
  • 0.3.13-dev.a868979 - 2023-04-06
  • 0.3.13-dev.a11809e - 2023-04-06
  • 0.3.13-dev.98f2205 - 2023-04-05
  • 0.3.13-dev.97280fc - 2023-04-06
  • 0.3.13-dev.58fc088 - 2023-02-09
  • 0.3.13-dev.4fa14e3 - 2023-04-05
  • 0.3.13-dev.4ac8c00 - 2023-04-06
  • 0.3.13-dev.1fcd9f3 - 2023-04-05
  • 0.3.13-dev.099fcd9 - 2023-02-08
  • 0.3.13-dev.07221a3 - 2023-04-05
  • 0.3.13-dev.0619aca - 2023-04-06
  • 0.3.12 - 2023-02-07
    Read more
  • 0.3.12-dev.ef64bfc - 2023-01-28
  • 0.3.12-dev.defb409 - 2023-01-03
  • 0.3.12-dev.ca315f0 - 2023-02-05
  • 0.3.12-dev.c77c43e - 2023-02-06
  • 0.3.12-dev.c669f50 - 2023-01-28
  • 0.3.12-dev.b97633b - 2022-12-28
  • 0.3.12-dev.b8704f8 - 2023-02-06
  • 0.3.12-dev.ae91c05 - 2022-12-27
  • 0.3.12-dev.adce698 - 2023-02-07
  • 0.3.12-dev.a95bed7 - 2022-12-18
  • 0.3.12-dev.9bd3a64 - 2023-02-07
  • 0.3.12-dev.8668c29 - 2022-12-29
  • 0.3.12-dev.7df2ccf - 2023-02-06
  • 0.3.12-dev.7726f5a - 2023-02-06
  • 0.3.12-dev.74f7f79 - 2023-01-11
  • 0.3.12-dev.6fb2121 - 2023-02-05
  • 0.3.12-dev.6c928a4 - 2022-12-19
  • 0.3.12-dev.67973b4 - 2022-12-29
  • 0.3.12-dev.63ab05f - 2023-02-05
  • 0.3.12-dev.54ca9dd - 2023-02-07
  • 0.3.12-dev.4df969e - 2023-01-28
  • 0.3.12-dev.3e1caf0 - 2023-01-03
  • 0.3.12-dev.1a9b9fb - 2023-02-06
  • 0.3.12-dev.18b659d - 2022-12-29
  • 0.3.12-dev.15a4eb9 - 2022-12-29
  • 0.3.12-dev.12fdd73 - 2023-02-07
  • 0.3.12-dev.0eb7441 - 2023-02-07
  • 0.3.12-dev.0d72317 - 2022-12-03
  • 0.3.12-dev.8731858 - 2023-02-07
  • 0.3.12-dev.8251812 - 2022-12-16
  • 0.3.11 - 2022-12-03
    Read more
  • 0.3.11-dev.fc3b4f8 - 2022-12-03
  • 0.3.11-dev.f07fb2c - 2022-12-03
  • 0.3.11-dev.efb4168 - 2022-11-04
  • 0.3.11-dev.d71e9c4 - 2022-12-03
  • 0.3.11-dev.cdabaa3 - 2022-09-20
  • 0.3.11-dev.b5ff79f - 2022-11-04
  • 0.3.11-dev.97fae63 - 2022-12-03
  • 0.3.11-dev.8a837f9 - 2022-09-20
  • 0.3.11-dev.85fa9c6 - 2022-11-05
  • 0.3.11-dev.81fc9a9 - 2022-12-03
  • 0.3.11-dev.7fbc3ad - 2022-12-03
  • 0.3.11-dev.71efa8e - 2022-12-03
  • 0.3.11-dev.6eb674b - 2022-11-05
  • 0.3.11-dev.6ba48bd - 2022-12-03
  • 0.3.11-dev.66acec8 - 2022-11-04
  • 0.3.11-dev.658604d - 2022-12-03
  • 0.3.11-dev.5253c8f - 2022-11-04
  • 0.3.11-dev.4ec04fa - 2022-11-21
  • 0.3.11-dev.4a36d0e - 2022-11-05
  • 0.3.11-dev.38e0eff - 2022-11-04
  • 0.3.11-dev.2e1c9fd - 2022-11-04
  • 0.3.11-dev.2473ff0 - 2022-12-03
  • 0.3.11-dev.1cb738a - 2022-12-03
  • 0.3.11-dev.19536ed - 2022-11-05
  • 0.3.11-dev.7386318 - 2022-12-03
  • 0.3.10 - 2022-09-19

    Bug Fixes

    • "Cannot commit, no transaction is active" error in sql.js (#9234) (749809a), closes #9100
    • add missing support for primaryKeyConstraintName property in EntitySchema (cc63961)
    • malformed query when selecting deeply nested embedded entities (#9273) (83f7b88)
    • prototype pollution issue (e3aac27)
    • typescript 4.8 type issues #9331 (#9357) (a1960e1)
    • Update RelationIdLoader to use DriverUtils.getAlias (#9380) (a917d65), closes #9379

    Features

  • 0.3.10-dev.f24b262 - 2022-09-19
  • 0.3.10-dev.e3aac27 - 2022-08-29
  • 0.3.10-dev.de15df1 - 2022-09-19
  • 0.3.10-dev.cc63961 - 2022-08-30
  • 0.3.10-dev.a1960e1 - 2022-09-15
  • 0.3.10-dev.773a4fe - 2022-09-14
  • 0.3.10-dev.749809a - 2022-09-19
  • 0.3.10-dev.52e5f7c - 2022-09-14
  • 0.3.9 - 2022-08-28

    Bug Fixes

    • fixed regression introduced in 0.3.8 - broken CLI because of #8917 (#9332), closes #9330
  • 0.3.8 - 2022-08-26
    Read more
  • 0.3.8-dev.fd7ae97 - 2022-08-24
  • 0.3.8-dev.eb8f0c6 - 2022-08-24
  • 0.3.8-dev.e49d0c8 - 2022-08-24
  • 0.3.8-dev.de8aaac - 2022-08-24
  • 0.3.8-dev.dadb658 - 2022-08-24
  • 0.3.8-dev.d285fd0 - 2022-07-06
  • 0.3.8-dev.c4f4650 - 2022-08-25
  • 0.3.8-dev.bd96e27 - 2022-08-24
  • 0.3.8-dev.bb33cd0 - 2022-07-11
  • 0.3.8-dev.b8d04dc - 2022-08-25
  • 0.3.8-dev.9f7fc14 - 2022-08-24
  • 0.3.8-dev.8dcd61e - 2022-08-24
  • 0.3.8-dev.72728f1 - 2022-08-25
  • 0.3.8-dev.7198a7a - 2022-08-24
  • 0.3.8-dev.68e8f22 - 2022-08-25
  • 0.3.8-dev.64674e6 - 2022-08-24
  • 0.3.8-dev.5ebc626 - 2022-08-24
  • 0.3.8-dev.5e5abbd - 2022-08-25
  • 0.3.8-dev.46d0021 - 2022-08-24
  • 0.3.8-dev.3a533a4 - 2022-08-24
  • 0.3.8-dev.340ab67 - 2022-08-25
  • 0.3.8-dev.2e67138 - 2022-06-30
  • 0.3.8-dev.15f90e0 - 2022-08-22
  • 0.3.8-dev.109c1fa - 2022-06-29
  • 0.3.8-dev.0b54222 - 2022-07-05
  • 0.3.8-dev.03317a3 - 2022-08-28
  • 0.3.7 - 2022-06-29
    Read more
  • 0.3.7-dev.ec23922 - 2022-06-22
  • 0.3.7-dev.ec05f1d - 2022-06-29
  • 0.3.7-dev.bcdddc3 - 2022-06-29
  • 0.3.7-dev.a748f3c - 2022-06-29
  • 0.3.7-dev.97e1dc1 - 2022-06-28
  • 0.3.7-dev.60a7960 - 2022-06-28
  • 0.3.7-dev.1b5aa62 - 2022-06-28
  • 0.3.6 - 2022-04-12
  • 0.3.6-dev.ef025bd - 2022-05-31
  • 0.3.6-dev.ea176b2 - 2022-05-20
  • 0.3.6-dev.e296126 - 2022-06-22
  • 0.3.6-dev.e24cced - 2022-06-22
  • 0.3.6-dev.d0ed02d - 2022-05-20
  • 0.3.6-dev.cf3efec - 2022-05-23
  • 0.3.6-dev.cc5a5c1 - 2022-04-11
  • 0.3.6-dev.c814b07 - 2022-04-05
  • 0.3.6-dev.bbdc20f - 2022-05-31
  • 0.3.6-dev.b84cb9b - 2022-04-13
  • 0.3.6-dev.9f8429f - 2022-04-27
  • 0.3.6-dev.9d331b1 - 2022-04-11
  • 0.3.6-dev.9adab34 - 2022-04-13
  • 0.3.6-dev.862a402 - 2022-05-31
  • 0.3.6-dev.7dfb69f - 2022-04-15
  • 0.3.6-dev.78df84c - 2022-04-29
  • 0.3.6-dev.62518ae - 2022-04-12
  • 0.3.6-dev.506133e - 2022-06-10
  • 0.3.6-dev.49cbe23 - 2022-04-18
  • 0.3.6-dev.4687be8 - 2022-04-12
  • 0.3.6-dev.2d8afbe - 2022-04-16
  • 0.3.6-dev.22570f5 - 2022-05-20
  • 0.3.6-dev.1b4cb00 - 2022-05-23
  • 0.3.6-dev.189592c - 2022-05-20
  • 0.3.6-dev.1197d1d - 2022-04-11
  • 0.3.6-dev.07f4537 - 2022-06-22
  • 0.3.6-dev.0659ec3 - 2022-05-30
  • 0.3.6-dev.0418ebc - 2022-04-13
  • 0.3.5 - 2022-04-05
  • 0.3.5-dev.ec6c119 - 2022-03-28
  • 0.3.5-dev.ec27803 - 2022-04-02
  • 0.3.5-dev.eacecce - 2022-03-26
  • 0.3.5-dev.e58c796 - 2022-03-31
  • 0.3.5-dev.c5dfc11 - 2022-03-29
  • 0.3.5-dev.baa2f44 - 2022-04-02
  • 0.3.5-dev.b1a0107 - 2022-03-30
  • 0.3.5-dev.9d1e246 - 2022-04-02
  • 0.3.5-dev.9ac8e9e - 2022-03-26
  • 0.3.5-dev.7832a1a - 2022-04-05
  • 0.3.5-dev.69c33a2 - 2022-04-04
  • 0.3.5-dev.3730fd0 - 2022-04-04
  • 0.3.5-dev.2205a1a - 2022-04-02
  • 0.3.5-dev.1693a17 - 2022-04-04
  • 0.3.5-dev.002274c - 2022-03-26
  • 0.3.5-dev.6774605 - 2022-04-02
  • 0.3.4 - 2022-03-26
  • 0.3.4-dev.d2cfd22 - 2022-03-26
  • 0.3.4-dev.ceee439 - 2022-03-26
  • 0.3.4-dev.c75bcae - 2022-03-23
  • 0.3.4-dev.68a5c23 - 2022-03-23
  • 0.3.4-dev.54c7db4 - 2022-03-25
  • 0.3.4-dev.4b37030 - 2022-03-26
  • 0.3.4-dev.17d391c - 2022-03-26
  • 0.3.4-dev.494008 - 2022-03-26
  • 0.3.3 - 2022-03-23
  • 0.3.3-dev.f010205 - 2022-03-22
  • 0.3.3-dev.a641c5d - 2022-03-23
  • 0.3.3-dev.7cc1848 - 2022-03-23
  • 0.3.3-dev.52a641c - 2022-03-23
  • 0.3.3-dev.2b83776 - 2022-03-23
  • 0.3.2 - 2022-03-22
  • 0.3.2-dev.edf27d9 - 2022-03-22
  • 0.3.2-dev.ce5973c - 2022-03-21
  • 0.3.2-dev.c8fb1bb - 2022-03-21
  • 0.3.2-dev.b53a481 - 2022-03-21
  • 0.3.2-dev.97699e8 - 2022-03-22
  • 0.3.2-dev.35106df - 2022-03-22
  • 0.3.2-dev.28309eb - 2022-03-21
  • 0.3.2-dev.05fc744 - 2022-03-22
  • 0.3.1 - 2022-03-21
  • 0.3.1-dev.d61f857 - 2022-03-18
  • 0.3.1-dev.9f1b8e3 - 2022-03-21
  • 0.3.1-dev.941b584 - 2022-03-17
  • 0.3.0 - 2022-03-17
  • 0.3.0-rc.41 - 2022-03-12
  • 0.3.0-rc.40 - 2022-03-12
  • 0.3.0-rc.39 - 2022-03-12
  • 0.3.0-rc.38 - 2022-03-12
  • 0.3.0-rc.37 - 2022-03-12
  • 0.3.0-rc.36 - 2022-02-26
  • 0.3.0-rc.35 - 2022-02-22
  • 0.3.0-rc.34 - 2022-02-22
  • 0.3.0-rc.33 - 2022-02-22
  • 0.3.0-rc.32 - 2022-02-17
  • 0.3.0-rc.31 - 2022-02-17
  • 0.3.0-rc.30 - 2022-02-17
  • 0.3.0-rc.29 - 2022-02-17
  • 0.3.0-rc.28 - 2022-02-12
  • 0.3.0-rc.27 - 2022-02-11
  • 0.3.0-rc.26 - 2022-02-11
  • 0.3.0-rc.25 - 2022-02-11
  • 0.3.0-rc.24 - 2022-02-11
  • 0.3.0-rc.23 - 2022-02-11
  • 0.3.0-rc.22 - 2022-02-09
  • 0.3.0-rc.21 - 2020-10-01
  • 0.3.0-rc.20 - 2020-09-29
  • 0.3.0-rc.19 - 2020-03-02
  • 0.3.0-rc.18 - 2020-03-02
  • 0.3.0-rc.17 - 2020-02-11
  • 0.3.0-rc.16 - 2020-02-07
  • 0.3.0-rc.15 - 2020-02-07
  • 0.3.0-rc.14 - 2020-02-07
  • 0.3.0-rc.13 - 2020-01-28
  • 0.3.0-rc.12 - 2020-01-28
  • 0.3.0-rc.11 - 2020-01-27
  • 0.3.0-rc.10 - 2020-01-27
  • 0.3.0-rc.9 - 2020-01-27
  • 0.3.0-rc.8 - 2020-01-27
  • 0.3.0-rc.7 - 2020-01-26
  • 0.3.0-rc.5 - 2020-01-26
  • 0.3.0-rc.4 - 2020-01-26
  • 0.3.0-rc.3 - 2020-01-26
  • 0.3.0-rc.2 - 2019-12-16
  • 0.3.0-rc.1 - 2019-12-16
  • 0.3.0-alpha.24 - 2019-09-12
  • 0.3.0-alpha.23 - 2019-03-15
  • 0.3.0-alpha.22 - 2018-10-19
  • 0.3.0-alpha.21 - 2018-10-08
  • 0.3.0-alpha.20 - 2018-10-05
  • 0.3.0-alpha.19 - 2018-10-01
  • 0.3.0-alpha.18 - 2018-09-25
  • 0.3.0-alpha.17 - 2018-09-25
  • 0.3.0-alpha.16 - 2018-09-12
  • 0.3.0-alpha.15 - 2018-09-10
  • 0.3.0-alpha.14 - 2018-09-06
  • 0.3.0-alpha.13 - 2018-09-06
  • 0.3.0-alpha.12 - 2018-08-31
  • 0.3.0-alpha.11 - 2018-08-31
  • 0.3.0-alpha.10 - 2018-08-14
  • 0.3.0-alpha.9 - 2018-08-14
  • 0.3.0-alpha.8 - 2018-08-14
  • 0.3.0-alpha.7 - 2018-08-02
  • 0.3.0-alpha.6 - 2018-06-30
  • 0.3.0-alpha.5 - 2018-05-24
  • 0.3.0-alpha.4 - 2018-05-24
  • 0.3.0-alpha.3 - 2018-05-24
  • 0.3.0-alpha.2 - 2018-05-24
  • 0.3.0-alpha.1 - 2018-05-24
  • 0.2.46-dev.486f8c5 - 2022-03-04
  • 0.2.46-dev.5608956 - 2022-03-15
  • 0.2.45 - 2022-03-04
from typeorm GitHub release notes
Commit messages
Package name: typeorm
  • 607d6f9 fix: added transaction retry logic in cockroachdb (#10032)
  • 8795c86 fix: support More/LessThanOrEqual in relations (#9978)
  • 06c1e98 fix: create correct children during cascade saving entities with STI (#9034)
  • 96b7ee4 fix: correct encode mongodb auth credentials (#10024)
  • 9460296 fix: convert the join table ID to the referenceColumn ID type (#9887)
  • 938f94b fix: add onDelete option validation for oracle (#9786)
  • a188b1d fix: for running cli-ts-node-esm use exit code from child process (#10030)
  • 7c5627f fix: added instanceName to options (#9968)
  • 0305805 fix: add `trustServerCertificate` option to `SqlServerConnectionOptions` (#9985)
  • 21a9d67 fix: RelationIdLoader has access to queryPlanner when wrapped in transaction (#9990)
  • 5be20e2 fix: express option bug in init command (#10022)
  • 2a2bb4b fix: allow json as alias for longtext mariadb (#10018)
  • 54f4f89 revert: "refactor: remove date-fns package (#9634)"
  • 99bef49 fix: mongodb typings breaks the browser version (#9962)
  • d8a2e37 feat: mariadb uuid inet4 inet6 column data type support (#9845)
  • f5b93c1 refactor: query methods should accept generic for return type (#9957)
  • 0e56f0f fix: select + addOrderBy broke in 0.3.14 (#9961)
  • 3d67901 fix: resolve duplicate subscriber updated columns (#9958)
  • b064049 docs: update entity-manager-api.md (#9956)
  • e0165e7 fix: add directConnection options to MongoDB connection (#9955)
  • 68aa573 docs: issue #8860 (#9951)
  • 5890561 version bump
  • f1c5662 fixed compiler error
  • 51eecc2 fix: prevent unique index identical to primary key (all sql dialects) (#9940)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant