[Snyk] Upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0 #7

snyk-bot · 2022-08-20T06:52:28Z

Snyk has created this PR to upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 80 versions ahead of your current version.
The recommended version was released 22 days ago, on 2022-07-29.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Improper Input Validation SNYK-JS-URLPARSE-2407770	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Improper Privilege Management SNYK-JS-SHELLJS-2332187	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-LODASHSET-1320032	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-INI-1048974	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-HANDLEBARS-1056767	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090602	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090601	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090600	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-VALIDATOR-1090599	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Authorization Bypass SNYK-JS-URLPARSE-2407759	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Access Restriction Bypass SNYK-JS-URLPARSE-2401205	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Open Redirect SNYK-JS-URLPARSE-1533425	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Improper Input Validation SNYK-JS-URLPARSE-1078283	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIMOFFNEWLINES-1296850	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Command Injection SNYK-JS-NODENOTIFIER-1035794	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-IOREDIS-1567196	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-HANDLEBARS-1279029	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Information Exposure SNYK-JS-EVENTSOURCE-2823375	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-CONVENTIONALCOMMITSPARSER-1766960	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @octokit/plugin-rest-endpoint-methods

6.2.0 - 2022-07-29
6.2.0 (2022-07-29)

Features
- add support for GET /enterprises/{enterprise}/code-scanning/alerts endpoint via octokit.rest.codeScanning.listAlertsForEnterprise() function (and description updates for other endpoints) (#523) (ce99936)
6.1.2 - 2022-07-19
6.1.2 (2022-07-19)

Bug Fixes
- don't pin to an exact version of @ octokit/types, use ^ (#521) (08111ff)
6.1.1 - 2022-07-18
6.1.1 (2022-07-18)

Bug Fixes
- ci: pin to a specific version of @ octokit/types when running the update task (3ac9251)
- deps: pin to a specific version of @ octokit/types (cdd8fb5)
6.1.0 - 2022-07-15
6.1.0 (2022-07-15)
- Add support for new GET /repos/{owner}/{repo}/codespaces/new API with octokit.rest.codespaces.preFlightWithRepoForAuthenticatedUser function
- Auto-update in-code documentation using latest operation descriptions
- Auto-update docs using latest operation and parameter descriptions
- Auto-generate scripts/update-endpoints/generated/endpoints.json
6.0.2 - 2022-07-14
6.0.2 (2022-07-14)

Bug Fixes
- improve parameter descriptions for GET /repos/{owner}/{repo}/pulls/{pull_number}/requested_reviewers (#517) (adc25ec)
6.0.1 - 2022-07-12
6.0.1 (2022-07-12)

Bug Fixes
- update documentation for POST /orgs/{org}/migrations (#512) (f33ab78)
6.0.0 - 2022-07-08
6.0.0 (2022-07-08)

Continuous Integration
- stop testing against NodeJS v10, v12 (#507) (a141d5f)
BREAKING CHANGES
- Drop support for NodeJS v10, v12
5.16.2 - 2022-07-05
5.16.2 (2022-07-05)

Bug Fixes
- clarify docs to make it clear that POST /repos/{owner}/{repo}/actions/runs/{run_id}/pending_deployments is only available to required reviewers (#506) (015cabe)
5.16.1 - 2022-07-02
5.16.1 (2022-07-02)

Bug Fixes
- gracefully rename org_id path parameter for GET /orgs/{org_id}/codespaces to org (f11c732)
- mark PUT /enterprises/{enterprise}/actions/oidc/customization/issuer as GitHub Enterprise (b3451de)
- update operation docs to reflect current API (c6d49a5)
5.16.0 - 2022-06-28
5.16.0 (2022-06-28)

Features
- feat: PUT /enterprises/{enterprise}/actions/oidc/customization/issuer
- feat: GET /orgs/{org_id}/codespaces
- feat: POST /orgs/{org}/members/{username}/codespaces/{codespace_name}/stop
- feat: GET /orgs/{org}/actions/oidc/customization/sub
- feat: PUT /orgs/{org}/actions/oidc/customization/sub
- feat: DELETE /orgs/{org}/members/{username}/codespaces/{codespace_name}
- feat: GET /repos/{owner}/{repo}/actions/caches
- feat: DELETE /repos/{owner}/{repo}/actions/caches
- feat: DELETE /repos/{owner}/{repo}/actions/caches/{cache_id}
- feat: GET /repos/{owner}/{repo}/actions/oidc/customization/sub
- feat: PUT /repos/{owner}/{repo}/actions/oidc/customization/sub
- feat POST /repos/{owner}/{repo}/dependency-graph/snapshots
5.15.0 - 2022-06-20
5.14.1 - 2022-06-20
5.14.0 - 2022-06-15
5.13.0 - 2021-10-11
5.12.1 - 2021-10-08
5.12.0 - 2021-10-07
5.11.4 - 2021-09-30
5.11.3 - 2021-09-27
5.11.2 - 2021-09-24
5.11.1 - 2021-09-22
5.11.0 - 2021-09-22
5.10.4 - 2021-09-14
5.10.3 - 2021-09-13
5.10.2 - 2021-09-12
5.10.1 - 2021-09-08
5.10.0 - 2021-09-03
5.9.0 - 2021-08-31
5.8.0 - 2021-08-10
5.7.0 - 2021-08-03
5.6.0 - 2021-08-02
5.5.2 - 2021-07-29
5.5.1 - 2021-07-23
5.5.0 - 2021-07-21
5.4.2 - 2021-07-20
5.4.1 - 2021-07-04
5.4.0 - 2021-07-03
5.3.7 - 2021-06-30
5.3.6 - 2021-06-30
5.3.5 - 2021-06-29
5.3.4 - 2021-06-26
5.3.3 - 2021-06-24
5.3.2 - 2021-06-23
5.3.1 - 2021-05-28
5.3.0 - 2021-05-22
5.2.0 - 2021-05-21
5.1.1 - 2021-04-28
5.1.0 - 2021-04-27
5.0.1 - 2021-04-21
5.0.0 - 2021-03-26
4.15.1 - 2021-04-21
4.15.0 - 2021-03-25
4.14.0 - 2021-03-24
4.13.5 - 2021-03-08
4.13.4 - 2021-03-05
4.13.3 - 2021-03-04
4.13.2 - 2021-03-02
4.13.1 - 2021-02-28
4.13.0 - 2021-02-26
4.12.2 - 2021-02-23
4.12.1 - 2021-02-23
4.12.0 - 2021-02-18
4.11.0 - 2021-02-17
4.10.3 - 2021-02-12
4.10.2 - 2021-02-10
4.10.1 - 2021-02-02
4.10.0 - 2021-02-02
4.9.3 - 2021-02-02
4.9.2 - 2021-02-01
4.9.1 - 2021-01-31
4.9.0 - 2021-01-27
4.8.2 - 2021-01-26
4.8.1 - 2021-01-25
4.8.0 - 2021-01-22
4.7.0 - 2021-01-21
4.6.0 - 2021-01-21
4.5.2 - 2021-01-18
4.5.1 - 2021-01-18
4.5.0 - 2021-01-15
4.4.3 - 2021-01-05
4.4.2 - 2021-01-05
4.4.1 - 2020-12-03

from @octokit/plugin-rest-endpoint-methods GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0. See this package in npm: https://www.npmjs.com/package/@octokit/plugin-rest-endpoint-methods See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/34225ac7-4ae1-4b4f-8732-f23ad881993e?utm_source=github&utm_medium=referral&page=upgrade-pr

…5b513b358fdad

MarcelRaschke and others added 2 commits December 22, 2020 20:59

Create SECURITY.md

1b7a903

pull bot pushed a commit that referenced this pull request Oct 2, 2023

Merge pull request #7 from 47-studio-org/snyk-fix-21bc158474fe68c61ab…

dc64fc2

…5b513b358fdad

pull bot force-pushed the master branch from 1b7a903 to dc64fc2 Compare October 2, 2023 07:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0 #7

[Snyk] Upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0 #7

snyk-bot commented Aug 20, 2022

6.2.0 (2022-07-29)

Features

6.1.2 (2022-07-19)

Bug Fixes

6.1.1 (2022-07-18)

Bug Fixes

6.1.0 (2022-07-15)

6.0.2 (2022-07-14)

Bug Fixes

6.0.1 (2022-07-12)

Bug Fixes

6.0.0 (2022-07-08)

Continuous Integration

BREAKING CHANGES

5.16.2 (2022-07-05)

Bug Fixes

5.16.1 (2022-07-02)

Bug Fixes

5.16.0 (2022-06-28)

Features

[Snyk] Upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0 #7

Are you sure you want to change the base?

[Snyk] Upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0 #7

Conversation

snyk-bot commented Aug 20, 2022

Snyk has created this PR to upgrade @octokit/plugin-rest-endpoint-methods from 4.4.1 to 6.2.0.

6.2.0 (2022-07-29)

Features

6.1.2 (2022-07-19)

Bug Fixes

6.1.1 (2022-07-18)

Bug Fixes

6.1.0 (2022-07-15)

6.0.2 (2022-07-14)

Bug Fixes

6.0.1 (2022-07-12)

Bug Fixes

6.0.0 (2022-07-08)

Continuous Integration

BREAKING CHANGES

5.16.2 (2022-07-05)

Bug Fixes

5.16.1 (2022-07-02)

Bug Fixes

5.16.0 (2022-06-28)

Features