Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency superagent to v3 - abandoned #210

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Apr 9, 2022

This PR contains the following updates:

Package Type Update Change
superagent dependencies major 1.8.4 -> 3.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.8 CVE-2021-43138 #209
High 7.5 CVE-2017-1000048 #79

Release Notes

visionmedia/superagent

v3.0.0

Compare Source

  • Dropped support for Node 0.x. Please upgrade to at least Node 4.
  • Dropped support for componentjs (Damien Caselli)
  • Removed deprecated .part()/superagent.Part APIs.
  • Removed unreliable .body property on internal response object used by unbuffered parsers.
    Note: the normal response.body is unaffected.
  • Multiple .send() calls mixing Buffer/Blob and JSON data are not possible and will now throw instead of messing up the data.
  • Improved .send() data object type check (Fernando Mendes)
  • Added common prototype for Node and browser versions (Andreas Helmberger)
  • Added http+unix: schema to support Unix sockets (Yuki KAN)
  • Added full attach options parameter in the Node version (Lapo Luchini)
  • Added pfx TLS option with new pfx() method. (Reid Burke)
  • Internally changed .on to .once to prevent possible memory leaks (Matt Blair)
  • Made all errors reported as an event (Kornel Lesiński)

v2.3.0

Compare Source

  • Enabled .field() to handle objects (Affan Shahid)
  • Added authentication with client certificates (terusus)
  • Added .catch() for more Promise-like interface (Maxim Samoilov, Kornel Lesiński)
  • Silenced errors from incomplete gzip streams for compatibility with web browsers (Kornel Lesiński)
  • Fixed event.direction in uploads (Kornel Lesiński)
  • Fixed returned value of overwritten response object's on() method (Juan Dopazo)

v2.2.0

Compare Source

  • Added timedout property to node Request instance (Alexander Pope)
  • Unified null querystring values in node and browser environments. (George Chung)

v2.1.0

Compare Source

  • Refactored async parsers. Now the end callback waits for async parsers to finish (Kornel Lesiński)
  • Errors thrown in .end() callback don't cause the callback to be called twice (Kornel Lesiński)
  • Added headers to toJSON() (Tao)

v2.0.0

Compare Source

Breaking changes

Breaking changes are in rarely used functionality, so we hope upgrade will be smooth for most users.

  • Browser: The .parse() method has been renamed to .serialize() for consistency with NodeJS version.
  • Browser: Query string keys without a value used to be parsed as 'undefined', now their value is '' (empty string) (shura, Kornel Lesiński).
  • NodeJS: The redirect event is called after new query string and headers have been set and is allowed to override the request URL (Kornel Lesiński)
  • .then() returns a real Promise. Note that use of superagent with promises now requires a global Promise object.
    If you target Internet Explorer or Node 0.10, you'll need require('es6-promise').polyfill() or similar.
  • Upgraded all dependencies (Peter Lyons)
  • Renamed properties documented as @api private to have _prefixed names (Kornel Lesiński)

Probably not breaking changes:

  • Extracted common functions to request-base (Peter Lyons)
  • Fixed race condition in pipe tests (Peter Lyons)
  • Handle FormData error events (scriptype)
  • Fixed wrong jsdoc of Request#attach (George Chung)
  • Updated and improved tests (Peter Lyons)
  • request.head() supports .redirects(5) call (Kornel Lesiński)
  • response event is also emitted when using .pipe()

v1.8.5

Compare Source


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 9, 2022
@mend-for-github-com
Copy link
Author

mend-for-github-com bot commented Jun 22, 2022

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@mend-for-github-com mend-for-github-com bot changed the title Update dependency superagent to v3 Update dependency superagent to v3 - abandoned Jan 29, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants