Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 #2048

Merged
merged 2 commits into from
May 23, 2024

Conversation

anders-kiaer
Copy link
Collaborator

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • typescript/package.json
    • typescript/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 125/1000
Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.08, Score Version: V5
Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
No No Known Exploit
high severity 125/1000
Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.08, Score Version: V5
Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @nx/jest The new version differs by 250 commits.
  • e62f0b1 chore(repo): update nx to 16.9.0-rc.1 (#19302)
  • 2b84f10 bugfix(react-native): fix run-ios failed on 2nd run (#19287)
  • 295ec47 fix(core): do not attempt to publish private npm packages (#19299)
  • b0e48a6 chore(repo): update nx to 16.9.0-rc.0 (#19296)
  • d1fe398 docs(core): packages to api (#19281)
  • 94d8356 fix(vite): provide correct root directory when building a root project (#19298)
  • ca85d26 fix(core): unregister in-process ts transpilers when projectGraph is created (#19187)
  • 9f0e9c8 chore(core): nx plugin submission nx-gcp-cache (#18172)
  • e9eb10f chore(core): nx plugin submission @ jnxplus/nx-maven (#19081)
  • f2edb29 chore(core): remove deprecated plugins from approved-plugins.json file (#19082)
  • c18c0b2 feat(misc): prepend cwd to directory in project generators when using as-provided format (#19227)
  • 78f7f9f fix(nextjs): Add missing env to base Nx Env (#19201)
  • 903c4fe fix(js): update generated .swcrc file to align with @ swc/core@1.3.85 (#19214)
  • 75890f5 chore(repo): remove dep from nx-dev-e2e -> devkit (#19288)
  • d8261b4 fix(repo): add native packages to the release group (#19289)
  • 91b1451 fix(core): ensure target-only argument is rewritten correctly to be forwarded (#17971)
  • 5545ffb feat(core): allow multiple targets in show projects commmand (#18506)
  • 57dc105 chore(core): prepare Angular specific error only before throwing it (#18904)
  • 82fb209 fix(nx-plugin): pass full context into parseTargetString (#19154)
  • 1aef24b chore(angular): move parseTargetString to pass executor context (#19133)
  • d4a6d32 feat(core): run createDependencies plugins concurrently (#19176)
  • 90c811a Revert "chore(repo): increate npm fetch retires count and timeout (Update README.mdΒ #1… (#19283)
  • ed0456e chore(repo): increate npm fetch retires count and timeout (#19191)
  • 6327fab chore(repo): dogfood nx release commands (#19237)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

πŸ›  Adjust project settings

πŸ“š Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

πŸ¦‰ Uncontrolled resource consumption

@w1nklr w1nklr changed the title [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 fix: [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 May 23, 2024
@w1nklr w1nklr merged commit 288a626 into master May 23, 2024
13 of 14 checks passed
@w1nklr w1nklr deleted the snyk-fix-34cf3a4faae2b5721acfb503c3e90284 branch May 23, 2024 08:03
hkfb pushed a commit that referenced this pull request May 23, 2024
## [0.6.3](https://github.com/equinor/webviz-subsurface-components/compare/wsc-common@0.6.2...wsc-common@0.6.3) (2024-05-23)

### Bug Fixes

* [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 ([#2048](#2048)) ([288a626](288a626)), closes [#19302](https://github.com/equinor/webviz-subsurface-components/issues/19302) [#19287](https://github.com/equinor/webviz-subsurface-components/issues/19287) [#19299](https://github.com/equinor/webviz-subsurface-components/issues/19299) [#19296](https://github.com/equinor/webviz-subsurface-components/issues/19296) [#19281](https://github.com/equinor/webviz-subsurface-components/issues/19281) [#19298](https://github.com/equinor/webviz-subsurface-components/issues/19298) [#19187](https://github.com/equinor/webviz-subsurface-components/issues/19187) [#18172](https://github.com/equinor/webviz-subsurface-components/issues/18172) [#19081](https://github.com/equinor/webviz-subsurface-components/issues/19081) [#19082](https://github.com/equinor/webviz-subsurface-components/issues/19082) [#19227](https://github.com/equinor/webviz-subsurface-components/issues/19227) [#19201](https://github.com/equinor/webviz-subsurface-components/issues/19201) [#19214](https://github.com/equinor/webviz-subsurface-components/issues/19214) [#19288](https://github.com/equinor/webviz-subsurface-components/issues/19288) [#19289](https://github.com/equinor/webviz-subsurface-components/issues/19289) [#17971](https://github.com/equinor/webviz-subsurface-components/issues/17971) [#18506](https://github.com/equinor/webviz-subsurface-components/issues/18506) [#18904](https://github.com/equinor/webviz-subsurface-components/issues/18904) [#19154](https://github.com/equinor/webviz-subsurface-components/issues/19154) [#19133](https://github.com/equinor/webviz-subsurface-components/issues/19133) [#19176](https://github.com/equinor/webviz-subsurface-components/issues/19176) [#1](#1) [#19283](https://github.com/equinor/webviz-subsurface-components/issues/19283) [#19191](https://github.com/equinor/webviz-subsurface-components/issues/19191) [#19237](https://github.com/equinor/webviz-subsurface-components/issues/19237)
@hkfb
Copy link
Collaborator

hkfb commented May 23, 2024

πŸŽ‰ This issue has been resolved in version wsc-common@0.6.3 πŸŽ‰

The release is available on GitHub release

@hkfb hkfb added the released label May 23, 2024
hkfb pushed a commit that referenced this pull request May 23, 2024
## [1.2.15](https://github.com/equinor/webviz-subsurface-components/compare/well-completions-plot@1.2.14...well-completions-plot@1.2.15) (2024-05-23)

### Bug Fixes

* [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 ([#2048](#2048)) ([288a626](288a626)), closes [#19302](https://github.com/equinor/webviz-subsurface-components/issues/19302) [#19287](https://github.com/equinor/webviz-subsurface-components/issues/19287) [#19299](https://github.com/equinor/webviz-subsurface-components/issues/19299) [#19296](https://github.com/equinor/webviz-subsurface-components/issues/19296) [#19281](https://github.com/equinor/webviz-subsurface-components/issues/19281) [#19298](https://github.com/equinor/webviz-subsurface-components/issues/19298) [#19187](https://github.com/equinor/webviz-subsurface-components/issues/19187) [#18172](https://github.com/equinor/webviz-subsurface-components/issues/18172) [#19081](https://github.com/equinor/webviz-subsurface-components/issues/19081) [#19082](https://github.com/equinor/webviz-subsurface-components/issues/19082) [#19227](https://github.com/equinor/webviz-subsurface-components/issues/19227) [#19201](https://github.com/equinor/webviz-subsurface-components/issues/19201) [#19214](https://github.com/equinor/webviz-subsurface-components/issues/19214) [#19288](https://github.com/equinor/webviz-subsurface-components/issues/19288) [#19289](https://github.com/equinor/webviz-subsurface-components/issues/19289) [#17971](https://github.com/equinor/webviz-subsurface-components/issues/17971) [#18506](https://github.com/equinor/webviz-subsurface-components/issues/18506) [#18904](https://github.com/equinor/webviz-subsurface-components/issues/18904) [#19154](https://github.com/equinor/webviz-subsurface-components/issues/19154) [#19133](https://github.com/equinor/webviz-subsurface-components/issues/19133) [#19176](https://github.com/equinor/webviz-subsurface-components/issues/19176) [#1](#1) [#19283](https://github.com/equinor/webviz-subsurface-components/issues/19283) [#19191](https://github.com/equinor/webviz-subsurface-components/issues/19191) [#19237](https://github.com/equinor/webviz-subsurface-components/issues/19237)
@hkfb
Copy link
Collaborator

hkfb commented May 23, 2024

πŸŽ‰ This issue has been resolved in version well-completions-plot@1.2.15 πŸŽ‰

The release is available on GitHub release

hkfb pushed a commit that referenced this pull request May 23, 2024
## [0.27.1](https://github.com/equinor/webviz-subsurface-components/compare/subsurface-viewer@0.27.0...subsurface-viewer@0.27.1) (2024-05-23)

### Bug Fixes

* [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 ([#2048](#2048)) ([288a626](288a626)), closes [#19302](https://github.com/equinor/webviz-subsurface-components/issues/19302) [#19287](https://github.com/equinor/webviz-subsurface-components/issues/19287) [#19299](https://github.com/equinor/webviz-subsurface-components/issues/19299) [#19296](https://github.com/equinor/webviz-subsurface-components/issues/19296) [#19281](https://github.com/equinor/webviz-subsurface-components/issues/19281) [#19298](https://github.com/equinor/webviz-subsurface-components/issues/19298) [#19187](https://github.com/equinor/webviz-subsurface-components/issues/19187) [#18172](https://github.com/equinor/webviz-subsurface-components/issues/18172) [#19081](https://github.com/equinor/webviz-subsurface-components/issues/19081) [#19082](https://github.com/equinor/webviz-subsurface-components/issues/19082) [#19227](https://github.com/equinor/webviz-subsurface-components/issues/19227) [#19201](https://github.com/equinor/webviz-subsurface-components/issues/19201) [#19214](https://github.com/equinor/webviz-subsurface-components/issues/19214) [#19288](https://github.com/equinor/webviz-subsurface-components/issues/19288) [#19289](https://github.com/equinor/webviz-subsurface-components/issues/19289) [#17971](https://github.com/equinor/webviz-subsurface-components/issues/17971) [#18506](https://github.com/equinor/webviz-subsurface-components/issues/18506) [#18904](https://github.com/equinor/webviz-subsurface-components/issues/18904) [#19154](https://github.com/equinor/webviz-subsurface-components/issues/19154) [#19133](https://github.com/equinor/webviz-subsurface-components/issues/19133) [#19176](https://github.com/equinor/webviz-subsurface-components/issues/19176) [#1](#1) [#19283](https://github.com/equinor/webviz-subsurface-components/issues/19283) [#19191](https://github.com/equinor/webviz-subsurface-components/issues/19191) [#19237](https://github.com/equinor/webviz-subsurface-components/issues/19237)
@hkfb
Copy link
Collaborator

hkfb commented May 23, 2024

πŸŽ‰ This issue has been resolved in version subsurface-viewer@0.27.1 πŸŽ‰

The release is available on GitHub release

hkfb pushed a commit that referenced this pull request May 23, 2024
## [1.1.15](https://github.com/equinor/webviz-subsurface-components/compare/group-tree-plot@1.1.14...group-tree-plot@1.1.15) (2024-05-23)

### Bug Fixes

* [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 ([#2048](#2048)) ([288a626](288a626)), closes [#19302](https://github.com/equinor/webviz-subsurface-components/issues/19302) [#19287](https://github.com/equinor/webviz-subsurface-components/issues/19287) [#19299](https://github.com/equinor/webviz-subsurface-components/issues/19299) [#19296](https://github.com/equinor/webviz-subsurface-components/issues/19296) [#19281](https://github.com/equinor/webviz-subsurface-components/issues/19281) [#19298](https://github.com/equinor/webviz-subsurface-components/issues/19298) [#19187](https://github.com/equinor/webviz-subsurface-components/issues/19187) [#18172](https://github.com/equinor/webviz-subsurface-components/issues/18172) [#19081](https://github.com/equinor/webviz-subsurface-components/issues/19081) [#19082](https://github.com/equinor/webviz-subsurface-components/issues/19082) [#19227](https://github.com/equinor/webviz-subsurface-components/issues/19227) [#19201](https://github.com/equinor/webviz-subsurface-components/issues/19201) [#19214](https://github.com/equinor/webviz-subsurface-components/issues/19214) [#19288](https://github.com/equinor/webviz-subsurface-components/issues/19288) [#19289](https://github.com/equinor/webviz-subsurface-components/issues/19289) [#17971](https://github.com/equinor/webviz-subsurface-components/issues/17971) [#18506](https://github.com/equinor/webviz-subsurface-components/issues/18506) [#18904](https://github.com/equinor/webviz-subsurface-components/issues/18904) [#19154](https://github.com/equinor/webviz-subsurface-components/issues/19154) [#19133](https://github.com/equinor/webviz-subsurface-components/issues/19133) [#19176](https://github.com/equinor/webviz-subsurface-components/issues/19176) [#1](#1) [#19283](https://github.com/equinor/webviz-subsurface-components/issues/19283) [#19191](https://github.com/equinor/webviz-subsurface-components/issues/19191) [#19237](https://github.com/equinor/webviz-subsurface-components/issues/19237)
@hkfb
Copy link
Collaborator

hkfb commented May 23, 2024

πŸŽ‰ This issue has been resolved in version group-tree-plot@1.1.15 πŸŽ‰

The release is available on GitHub release

hkfb pushed a commit that referenced this pull request May 23, 2024
## [1.7.4](https://github.com/equinor/webviz-subsurface-components/compare/well-log-viewer@1.7.3...well-log-viewer@1.7.4) (2024-05-23)

### Bug Fixes

* [Snyk] Security upgrade @nx/jest from 16.5.0 to 16.9.0 ([#2048](#2048)) ([288a626](288a626)), closes [#19302](https://github.com/equinor/webviz-subsurface-components/issues/19302) [#19287](https://github.com/equinor/webviz-subsurface-components/issues/19287) [#19299](https://github.com/equinor/webviz-subsurface-components/issues/19299) [#19296](https://github.com/equinor/webviz-subsurface-components/issues/19296) [#19281](https://github.com/equinor/webviz-subsurface-components/issues/19281) [#19298](https://github.com/equinor/webviz-subsurface-components/issues/19298) [#19187](https://github.com/equinor/webviz-subsurface-components/issues/19187) [#18172](https://github.com/equinor/webviz-subsurface-components/issues/18172) [#19081](https://github.com/equinor/webviz-subsurface-components/issues/19081) [#19082](https://github.com/equinor/webviz-subsurface-components/issues/19082) [#19227](https://github.com/equinor/webviz-subsurface-components/issues/19227) [#19201](https://github.com/equinor/webviz-subsurface-components/issues/19201) [#19214](https://github.com/equinor/webviz-subsurface-components/issues/19214) [#19288](https://github.com/equinor/webviz-subsurface-components/issues/19288) [#19289](https://github.com/equinor/webviz-subsurface-components/issues/19289) [#17971](https://github.com/equinor/webviz-subsurface-components/issues/17971) [#18506](https://github.com/equinor/webviz-subsurface-components/issues/18506) [#18904](https://github.com/equinor/webviz-subsurface-components/issues/18904) [#19154](https://github.com/equinor/webviz-subsurface-components/issues/19154) [#19133](https://github.com/equinor/webviz-subsurface-components/issues/19133) [#19176](https://github.com/equinor/webviz-subsurface-components/issues/19176) [#1](#1) [#19283](https://github.com/equinor/webviz-subsurface-components/issues/19283) [#19191](https://github.com/equinor/webviz-subsurface-components/issues/19191) [#19237](https://github.com/equinor/webviz-subsurface-components/issues/19237)
@hkfb
Copy link
Collaborator

hkfb commented May 23, 2024

πŸŽ‰ This issue has been resolved in version well-log-viewer@1.7.4 πŸŽ‰

The release is available on GitHub release

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants