Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade swagger-client from 3.9.6 to 3.10.9 #23

Merged
merged 2 commits into from
Nov 11, 2020

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
high severity Prototype Pollution
SNYK-JS-FASTJSONPATCH-595663
No Proof of Concept
Commit messages
Package name: swagger-client The new version differs by 89 commits.
  • 87209f6 release: v3.10.9
  • 71f9ab0 ci(GA): runs code coverage with thresholds checks
  • 9e89732 fix(build): include sourcemap along with build artifact in npm distro
  • e9e75b7 chore(package): use production webpack config for deps:* scripts
  • 30272b3 ci(GA): add security audit checks on deps
  • 76a0374 test(bundle): run tests on build artifacts (#1578)
  • 74299da ci(GA): run release job only on master branch
  • 3b5cc18 style(prettier): integrate prettier into linting rules
  • 00f6ef7 chore(lint): run linters before commit
  • b474d45 style(eslint): align codebase with standard airbnb codestyle
  • f3adb13 chore(package): rename scripts to more idiomatic names
  • 9fc4681 ci(GA): eliminate unsuporrted node versions
  • a8c77b6 ci(commitlint): add check for linting commit message (#1573)
  • bf022d4 chore(deps): add dependabot config
  • c866808 ci: add checking bundlesize in GA
  • dfda486 chore(package): extract bundlesize config to separate file
  • 774f6f2 chore(package): extract jest config to separate file
  • 4cd7970 chore(package): remove stale dev deps
  • 292df33 style(eslint): update js files according to new linting rules
  • 3708e7a chore(package): update dev dependencies to latest versions
  • 4080fb4 ci(GA): use github actions as CI (#1567)
  • 546fcc7 chore(package): update dependencies to latest versions
  • 5378856 refactor: replace custom build of object-assign-deep
  • 4fdb70d refactor(fast-json-patch): change all imports to star notation

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic

@codecov
Copy link

codecov bot commented Jul 27, 2020

Codecov Report

Merging #23 (1c1d246) into master (7739762) will not change coverage.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff            @@
##            master       #23   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            4         4           
  Lines          133       133           
  Branches        25        25           
=========================================
  Hits           133       133           

Continue to review full report at Codecov.

Legend - Click here to learn more
螖 = absolute <relative> (impact), 酶 = not affected, ? = missing data
Powered by Codecov. Last update 7739762...1c1d246. Read the comment docs.

@shazron shazron merged commit 72b0dc2 into master Nov 11, 2020
@shazron shazron deleted the snyk-fix-fb0103af06de869bedaa3f50e0153dcd branch November 11, 2020 05:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants