[Snyk] Upgrade @strapi/strapi from 4.2.3 to 4.3.6

[snyk-bot]

Snyk has created this PR to upgrade @strapi/strapi from 4.2.3 to 4.3.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 10 versions ahead of your current version.
• The recommended version was released 25 days ago, on 2022-08-24.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SANITIZEHTML-2957526	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	No Known Exploit
	Session Fixation SNYK-JS-PASSPORT-2840631	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @strapi/strapi

• 4.3.6 - 2022-08-24
  

  🔥 Bug fix

  • [core:strapi] Verify plugin presence before using it (#14198) @ alexandrebodin

  ---

  📚 Update and Migration Guides

  • General update guide can be found here
  • Migration guides can be found here 📚
• 4.3.5 - 2022-08-24
  

  🔥 Bug fix

  • [cli] Require Node >=14, <=16 to install Strapi (#13962) @ innerdvations
  • [core:database] Ignore if populating a scalar attribute (#14032) @ petersg83
  • [core:strapi] Fix/trigger webhook on bulk delete (#14041) @ Marc-Roig
  • [core:upload] properly reject promise in cloudinary provider (#13992) @ Marc-Roig
  • [core:upload] Fix: upload media image with non standard urls (#13996) @ Marc-Roig
  • [plugin:documentation] fix #13453 Documentation Plugin doesn't generate Proper Type for the … (#13458) @ meganoob1337
  • [plugin:documentation] Documentation: Fix eslint errors (#14179) @ gu-stav
  • [plugin:i18n] show language code (#13994) @ yangfei4913438
  • [tooling] chore: Fix and simplify LocaleSelect tests (#14177) @ gu-stav
  • [tooling] CM: Fix test errors for EditSettingsView (#14182) @ gu-stav
  • [typescript] Fix service typings (#14061) @ Bassel17
  • [typescript] Fix typescript plugin generation (#14078) @ Bassel17

  💅 Enhancement

  • [core:admin] Update pt-BR translation (#14100) @ rogix
  • [core:admin] [Fix] Dynamic table translations (#14111) @ ronronscelestes
  • [core:admin] Update es.json (#14115) @ Hertak
  • [core:admin] Add missing swedish core admin translations (#14116) @ alvesvaren
  • [core:content-type-builder] Make time interval of datetime / time fields configurable (#13597) @ Jose4gg
  • [tooling] Add tracking property for os.arch() to Amplitude / Sentry (project creation) (#13872) @ gu-stav

  ⚙️ Chore

  • [core:admin] Add coverage script in the admin (#14109) @ simotae14
  • [core:strapi] chore: Unify template spacing (#13901) @ ihmpavel
  • [dependencies] Bump date-fns from 2.28.0 to 2.29.1 (#14074) @ dependabot
  • [docs] Add Nightly Release build status badge (#14147) @ derrickmehaffy
  • [plugin:i18n] Completed the (fr) French locale for the i18n plugin (#14095) @ seyti67
  • [tooling] chore: dependency updates (#14050) @ alexandrebodin
  • [tooling] Chore: Ignore process.exit eslint warnings (#14119) @ gu-stav
  • [tooling] chore: Fix some test errors (#14175) @ gu-stav
  • [tooling] Move eslint to ecma version 2020 (#14191) @ alexandrebodin

  📖 Documentation

  • [plugin:users-permissions] Update content-api.yaml (#14068) @ dipiash

  ---

  📚 Update and Migration Guides

  • General update guide can be found here
  • Migration guides can be found here 📚
• 4.3.4 - 2022-08-11
  

  🔥 Bug fix

  • [plugin:users-permissions] Fix users-permissions third party providers connection (#14072) @ alexandrebodin

  ---

  📚 Migration guides can be found here 📚

• 4.3.3 - 2022-08-10
  Read more
• 4.3.2 - 2022-08-01
  Read more
• 4.3.2-alpha.0 - 2022-08-01
• 4.3.1 - 2022-08-01
  

  v4.3.1

• 4.3.0 - 2022-07-27
  Read more
• 4.3.0-beta.2 - 2022-07-07
• 4.3.0-beta.1 - 2022-06-15
• 4.2.3 - 2022-07-13

from @strapi/strapi GitHub release notes

Commit messages

Package name: @strapi/strapi

• 4c6e67c v4.3.6
• 33d0b0c Merge pull request #14198 from strapi/hotfix/graphql-should-exist
• fd8e4c6 Add check in security middleware
• 9ad6931 Loading a plugin should always verify its presence
• a52b053 v4.3.5
• c0cc71d Merge pull request #14191 from strapi/chore/eslint-ecma2020
• 6ceb77e Merge pull request #13597 from Jose4gg/master
• 554671c Move to ecma2020
• 39b8ece Check if the current time matches the selected interval
• f30fd3e Fix lint errors
• 8e5364b Remove unnecessary getStep for datetime/time condition
• 612112e Add step input for datetime/time fields
• faac5b3 Merge pull request #14116 from alvesvaren/master
• c4e6d21 Merge pull request #13994 from yangfei4913438/yangfei/lang-code
• e309130 Merge pull request #14115 from Hertak/master
• 43d3724 Merge pull request #14100 from rogix/feat/update-pr-br-translation
• 4356456 Merge pull request #14182 from strapi/fix/cm-edit-settings-view-tests
• 78af3eb Merge pull request #13872 from strapi/feature/amplitude-arch
• cd16049 Merge pull request #14177 from strapi/fix/locale-select-test
• 43a81dd CM: Fix test errors for EditSettingsView
• 8231bb9 Merge pull request #14061 from strapi/fix/service-typings
• 48188bd Merge branch 'main' into fix/service-typings
• 4eb360c Merge pull request #14172 from strapi/dependabot/npm_and_yarn/react-intl-5.25.1
• c39dfda chore: Fix and simplify LocaleSelect tests

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs