New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade serverless from 1.77.1 to 1.78.0 #131

Closed

snyk-bot wants to merge 1 commit into master from snyk-upgrade-f46454ddf663753bff417e54238864a1

snyk-bot commented Aug 5, 2020

Snyk has created this PR to upgrade serverless from 1.77.1 to 1.78.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 5 versions ahead of your current version.
The recommended version was released 2 days ago, on 2020-08-03.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-571484	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	No Known Exploit
	Insertion of Sensitive Information into Log File SNYK-JS-NPMREGISTRYFETCH-575432	No Known Exploit
	Insertion of Sensitive Information into Log File SNYK-JS-NPM-575435	No Known Exploit
	Regular Expression Denial of Service (ReDoS ) SNYK-JS-MARKED-584281	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-BUNYAN-573166	No Known Exploit

Release notes

Package name: serverless

1.78.0 - 2020-08-03
Features
- Schema based validation of service config (#7335) (268f714) (Petr Reshetin & Mariusz Nowak)
- AWS Lambda: Support maximumEventAge and maximumRetryAttempts (#7987) (8573ec1) (Piotr Grzesik)
Bug Fixes
- AWS EventBridge:
  - Fix handling of events removal (#8004) (41d19b3) (Daniil Bratchenko)
  - Fix attaching lambdas to "default" stage (#7995) (b53f080) (Pavle Portic)
- Templates: Ensure missing Kotlin dependencies (#8010) (15fae3b) (Diego Marzo)
- Set versionFunctions to true only in AWS provider case (9897120) (Mariusz Nowak)
Comparison since last release
1.78.0-f4803ee3 - 2020-08-04
1.78.0-d403d9c6 - 2020-08-03
1.78.0-c17dc77f - 2020-08-04
1.78.0-0ad5cd7a - 2020-08-04
1.77.1 - 2020-07-28
Bug Fixes
- AWS Local Invocation: Ensure java wrappers are moved to runtimeWrappers (#7999) (03531d8) (Yuji Yamano)
- AWS Credentials:
  - Improve AWS SDK workaround (#8002) (32cde98) (Mariusz Nowak)
  - Improve credentials error recognition (#8002) (863bc51) (Mariusz Nowak)
Comparison since last release

from serverless GitHub release notes

Commit messages

Package name: serverless

d403d9c chore: Release v1.78.0
f6b9ccf chore: Bump dependencies
268f714 feat: Schema based validation of service config (#7335)
41d19b3 fix(AWS EventBridge): Fix handling of events removal (#8004)
9897120 fix: Set `versionFunctions` to true only in AWS provider case
ca79cb6 refactor: Simplify condition notation
64814f4 refactor: Remove obsolete 'null' assignment
b53f080 fix(AWS EventBridge): Fix attaching lambdas to "default" stage (#7995)
15fae3b fix(Templates): Ensure missing Kotlin dependencies (#8010)
0e56be3 test: Fix async tests setup
c69772a test: Fix test title
8573ec1 feat(AWS Lambda): Support `maximumEventAge` and `maximumRetryAttempts`
000f218 docs: Fix typo
dea3e3f docs: Improve tests documentation
79875d4 test: Improve coherence of fixture.extend

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          fix: upgrade serverless from 1.77.1 to 1.78.0

Snyk has created this PR to upgrade serverless from 1.77.1 to 1.78.0.

See this package in npm:
https://www.npmjs.com/package/serverless

See this project in Snyk:
https://app.snyk.io/org/randytarampi/project/e095fb25-a87f-4931-a0ba-08adee4c492b?utm_source=github&utm_medium=upgrade-pr

pull-assistant bot commented Aug 5, 2020

Best reviewed: commit by commit

Optimal code review plan

fix: upgrade serverless from 1.77.1 to 1.78.0

Powered by Pull Assistant. Last update 7637086 ... 7637086. Read the comment docs.

codeclimate bot commented Aug 5, 2020

Code Climate has analyzed commit 7637086 and detected 0 issues on this pull request.

View more on Code Climate.

randytarampi closed this in


      randytarampi/pseudolocalize@d260d09

randytarampi added a commit to randytarampi/pseudoimage that referenced this pull request


          fix(package): Bump packages for security updates (2020-08-29)

4a7b43f

Looking at a few of these Snyk issues:

- close randytarampi/slamscan#131 (comment)
- close randytarampi/lwip#47 (comment)
- close randytarampi/lwip#46 (comment)
- close randytarampi/pseudolocalize#43 (comment)
- close randytarampi/pseudolocalize#44 (comment)
- close #60 (comment)
- close randytarampi/slamscan#132 (comment)
- close randytarampi/slamscan#134 (comment)
- close randytarampi/slamscan#133 (comment)
- close #61 (comment)
- close randytarampi/slamscan#135 (comment)
- close randytarampi/pseudolocalize#45 (comment)
- close #62 (comment)
- close randytarampi/lwip#48 (comment)
- close randytarampi/me#748 (comment)

randytarampi added a commit that referenced this pull request


          fix(package): Bump packages for security updates (2020-08-29)

c1fba6d

Looking at a few of these Snyk issues:

- close #131 (comment)
- close randytarampi/lwip#47 (comment)
- close randytarampi/lwip#46 (comment)
- close randytarampi/pseudolocalize#43 (comment)
- close randytarampi/pseudolocalize#44 (comment)
- close randytarampi/pseudoimage#60 (comment)
- close #132 (comment)
- close #134 (comment)
- close #133 (comment)
- close randytarampi/pseudoimage#61 (comment)
- close #135 (comment)
- close randytarampi/pseudolocalize#45 (comment)
- close randytarampi/pseudoimage#62 (comment)
- close randytarampi/lwip#48 (comment)
- close randytarampi/me#748 (comment)

randytarampi added a commit to randytarampi/lwip that referenced this pull request


          fix(package): Bump packages for security updates (2020-08-29)

fb1fa8e

Looking at a few of these Snyk issues:

- close randytarampi/slamscan#131 (comment)
- close #47 (comment)
- close #46 (comment)
- close randytarampi/pseudolocalize#43 (comment)
- close randytarampi/pseudolocalize#44 (comment)
- close randytarampi/pseudoimage#60 (comment)
- close randytarampi/slamscan#132 (comment)
- close randytarampi/slamscan#134 (comment)
- close randytarampi/slamscan#133 (comment)
- close randytarampi/pseudoimage#61 (comment)
- close randytarampi/slamscan#135 (comment)
- close randytarampi/pseudolocalize#45 (comment)
- close randytarampi/pseudoimage#62 (comment)
- close #48 (comment)
- close randytarampi/me#748 (comment)

randytarampi added a commit to randytarampi/pwa that referenced this pull request


          fix(package): Bump packages for security updates (2020-08-29)

647c4f8

Looking at a few of these Snyk issues:

- close randytarampi/slamscan#131 (comment)
- close randytarampi/lwip#47 (comment)
- close randytarampi/lwip#46 (comment)
- close randytarampi/pseudolocalize#43 (comment)
- close randytarampi/pseudolocalize#44 (comment)
- close randytarampi/pseudoimage#60 (comment)
- close randytarampi/slamscan#132 (comment)
- close randytarampi/slamscan#134 (comment)
- close randytarampi/slamscan#133 (comment)
- close randytarampi/pseudoimage#61 (comment)
- close randytarampi/slamscan#135 (comment)
- close randytarampi/pseudolocalize#45 (comment)
- close randytarampi/pseudoimage#62 (comment)
- close randytarampi/lwip#48 (comment)
- close randytarampi/me#748 (comment)

randytarampi added a commit to randytarampi/me that referenced this pull request


          fix(package): Bump packages for security updates (2020-08-29)

ed0ea39

Looking at a few of these Snyk issues:

- close randytarampi/slamscan#131 (comment)
- close randytarampi/lwip#47 (comment)
- close randytarampi/lwip#46 (comment)
- close randytarampi/pseudolocalize#43 (comment)
- close randytarampi/pseudolocalize#44 (comment)
- close randytarampi/pseudoimage#60 (comment)
- close randytarampi/slamscan#132 (comment)
- close randytarampi/slamscan#134 (comment)
- close randytarampi/slamscan#133 (comment)
- close randytarampi/pseudoimage#61 (comment)
- close randytarampi/slamscan#135 (comment)
- close randytarampi/pseudolocalize#45 (comment)
- close randytarampi/pseudoimage#62 (comment)
- close randytarampi/lwip#48 (comment)
- close #748 (comment)

randytarampi pushed a commit to randytarampi/pseudolocalize that referenced this pull request


          release(travis): Release 2.13.4

debe9e0

[skip ci]

## [2.13.4](v2.13.3...v2.13.4) (2020-08-29)

### Bug Fixes

* **package:** Bump packages for security updates (2020-08-29) ([d260d09](d260d09)), closes [/github.com/randytarampi/slamscan/pull/131#issuecomment-669014514](https://github.com//github.com/randytarampi/slamscan/pull/131/issues/issuecomment-669014514) [/github.com/randytarampi/lwip/pull/47#issuecomment-669576137](https://github.com//github.com/randytarampi/lwip/pull/47/issues/issuecomment-669576137) [/github.com/randytarampi/lwip/pull/46#issuecomment-669587798](https://github.com//github.com/randytarampi/lwip/pull/46/issues/issuecomment-669587798) [/github.com//pull/43#issuecomment-669639431](https://github.com//github.com/randytarampi/pseudolocalize/pull/43/issues/issuecomment-669639431) [/github.com//pull/44#issuecomment-669640745](https://github.com//github.com/randytarampi/pseudolocalize/pull/44/issues/issuecomment-669640745) [/github.com/randytarampi/pseudoimage/pull/60#issuecomment-669730376](https://github.com//github.com/randytarampi/pseudoimage/pull/60/issues/issuecomment-669730376) [/github.com/randytarampi/slamscan/pull/132#issuecomment-669738806](https://github.com//github.com/randytarampi/slamscan/pull/132/issues/issuecomment-669738806) [/github.com/randytarampi/slamscan/pull/134#issuecomment-669738983](https://github.com//github.com/randytarampi/slamscan/pull/134/issues/issuecomment-669738983) [/github.com/randytarampi/slamscan/pull/133#issuecomment-669739016](https://github.com//github.com/randytarampi/slamscan/pull/133/issues/issuecomment-669739016) [/github.com/randytarampi/pseudoimage/pull/61#issuecomment-669743569](https://github.com//github.com/randytarampi/pseudoimage/pull/61/issues/issuecomment-669743569) [/github.com/randytarampi/slamscan/pull/135#issuecomment-671014646](https://github.com//github.com/randytarampi/slamscan/pull/135/issues/issuecomment-671014646) [/github.com//pull/45#issuecomment-673205158](https://github.com//github.com/randytarampi/pseudolocalize/pull/45/issues/issuecomment-673205158) [/github.com/randytarampi/pseudoimage/pull/62#issuecomment-673288919](https://github.com//github.com/randytarampi/pseudoimage/pull/62/issues/issuecomment-673288919) [/github.com/randytarampi/lwip/pull/48#issuecomment-674452146](https://github.com//github.com/randytarampi/lwip/pull/48/issues/issuecomment-674452146) [/github.com/randytarampi/me/pull/748#issuecomment-674633206](https://github.com//github.com/randytarampi/me/pull/748/issues/issuecomment-674633206)

randytarampi pushed a commit to randytarampi/pseudoimage that referenced this pull request


          release(travis): Release 3.1.6

aa2277b

[skip ci]

## [3.1.6](v3.1.5...v3.1.6) (2020-08-29)

### Bug Fixes

* **package:** Bump packages for security updates (2020-08-29) ([4a7b43f](4a7b43f)), closes [/github.com/randytarampi/slamscan/pull/131#issuecomment-669014514](https://github.com//github.com/randytarampi/slamscan/pull/131/issues/issuecomment-669014514) [/github.com/randytarampi/lwip/pull/47#issuecomment-669576137](https://github.com//github.com/randytarampi/lwip/pull/47/issues/issuecomment-669576137) [/github.com/randytarampi/lwip/pull/46#issuecomment-669587798](https://github.com//github.com/randytarampi/lwip/pull/46/issues/issuecomment-669587798) [/github.com/randytarampi/pseudolocalize/pull/43#issuecomment-669639431](https://github.com//github.com/randytarampi/pseudolocalize/pull/43/issues/issuecomment-669639431) [/github.com/randytarampi/pseudolocalize/pull/44#issuecomment-669640745](https://github.com//github.com/randytarampi/pseudolocalize/pull/44/issues/issuecomment-669640745) [/github.com//pull/60#issuecomment-669730376](https://github.com//github.com/randytarampi/pseudoimage/pull/60/issues/issuecomment-669730376) [/github.com/randytarampi/slamscan/pull/132#issuecomment-669738806](https://github.com//github.com/randytarampi/slamscan/pull/132/issues/issuecomment-669738806) [/github.com/randytarampi/slamscan/pull/134#issuecomment-669738983](https://github.com//github.com/randytarampi/slamscan/pull/134/issues/issuecomment-669738983) [/github.com/randytarampi/slamscan/pull/133#issuecomment-669739016](https://github.com//github.com/randytarampi/slamscan/pull/133/issues/issuecomment-669739016) [/github.com//pull/61#issuecomment-669743569](https://github.com//github.com/randytarampi/pseudoimage/pull/61/issues/issuecomment-669743569) [/github.com/randytarampi/slamscan/pull/135#issuecomment-671014646](https://github.com//github.com/randytarampi/slamscan/pull/135/issues/issuecomment-671014646) [/github.com/randytarampi/pseudolocalize/pull/45#issuecomment-673205158](https://github.com//github.com/randytarampi/pseudolocalize/pull/45/issues/issuecomment-673205158) [/github.com//pull/62#issuecomment-673288919](https://github.com//github.com/randytarampi/pseudoimage/pull/62/issues/issuecomment-673288919) [/github.com/randytarampi/lwip/pull/48#issuecomment-674452146](https://github.com//github.com/randytarampi/lwip/pull/48/issues/issuecomment-674452146) [/github.com/randytarampi/me/pull/748#issuecomment-674633206](https://github.com//github.com/randytarampi/me/pull/748/issues/issuecomment-674633206)

randytarampi pushed a commit that referenced this pull request


          release(travis): Release 3.0.7

f206dc0

[skip ci]

## [3.0.7](v3.0.6...v3.0.7) (2020-08-29)

### Bug Fixes

* **package:** Bump packages for security updates (2020-08-29) ([c1fba6d](c1fba6d)), closes [/github.com//pull/131#issuecomment-669014514](https://github.com//github.com/randytarampi/slamscan/pull/131/issues/issuecomment-669014514) [/github.com/randytarampi/lwip/pull/47#issuecomment-669576137](https://github.com//github.com/randytarampi/lwip/pull/47/issues/issuecomment-669576137) [/github.com/randytarampi/lwip/pull/46#issuecomment-669587798](https://github.com//github.com/randytarampi/lwip/pull/46/issues/issuecomment-669587798) [/github.com/randytarampi/pseudolocalize/pull/43#issuecomment-669639431](https://github.com//github.com/randytarampi/pseudolocalize/pull/43/issues/issuecomment-669639431) [/github.com/randytarampi/pseudolocalize/pull/44#issuecomment-669640745](https://github.com//github.com/randytarampi/pseudolocalize/pull/44/issues/issuecomment-669640745) [/github.com/randytarampi/pseudoimage/pull/60#issuecomment-669730376](https://github.com//github.com/randytarampi/pseudoimage/pull/60/issues/issuecomment-669730376) [/github.com//pull/132#issuecomment-669738806](https://github.com//github.com/randytarampi/slamscan/pull/132/issues/issuecomment-669738806) [/github.com//pull/134#issuecomment-669738983](https://github.com//github.com/randytarampi/slamscan/pull/134/issues/issuecomment-669738983) [/github.com//pull/133#issuecomment-669739016](https://github.com//github.com/randytarampi/slamscan/pull/133/issues/issuecomment-669739016) [/github.com/randytarampi/pseudoimage/pull/61#issuecomment-669743569](https://github.com//github.com/randytarampi/pseudoimage/pull/61/issues/issuecomment-669743569) [/github.com//pull/135#issuecomment-671014646](https://github.com//github.com/randytarampi/slamscan/pull/135/issues/issuecomment-671014646) [/github.com/randytarampi/pseudolocalize/pull/45#issuecomment-673205158](https://github.com//github.com/randytarampi/pseudolocalize/pull/45/issues/issuecomment-673205158) [/github.com/randytarampi/pseudoimage/pull/62#issuecomment-673288919](https://github.com//github.com/randytarampi/pseudoimage/pull/62/issues/issuecomment-673288919) [/github.com/randytarampi/lwip/pull/48#issuecomment-674452146](https://github.com//github.com/randytarampi/lwip/pull/48/issues/issuecomment-674452146) [/github.com/randytarampi/me/pull/748#issuecomment-674633206](https://github.com//github.com/randytarampi/me/pull/748/issues/issuecomment-674633206)

Owner

randytarampi commented Aug 29, 2020

🎉 This issue has been resolved in version 3.0.7 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

randytarampi added the released label

randytarampi pushed a commit to randytarampi/lwip that referenced this pull request


          release(travis): Release 3.0.1

1d20825

[skip ci]

## [3.0.1](v3.0.0...v3.0.1) (2020-08-29)

### Bug Fixes

* **package:** Bump packages for security updates (2020-08-29) ([fb1fa8e](fb1fa8e)), closes [/github.com/randytarampi/slamscan/pull/131#issuecomment-669014514](https://github.com//github.com/randytarampi/slamscan/pull/131/issues/issuecomment-669014514) [/github.com//pull/47#issuecomment-669576137](https://github.com//github.com/randytarampi/lwip/pull/47/issues/issuecomment-669576137) [/github.com//pull/46#issuecomment-669587798](https://github.com//github.com/randytarampi/lwip/pull/46/issues/issuecomment-669587798) [/github.com/randytarampi/pseudolocalize/pull/43#issuecomment-669639431](https://github.com//github.com/randytarampi/pseudolocalize/pull/43/issues/issuecomment-669639431) [/github.com/randytarampi/pseudolocalize/pull/44#issuecomment-669640745](https://github.com//github.com/randytarampi/pseudolocalize/pull/44/issues/issuecomment-669640745) [/github.com/randytarampi/pseudoimage/pull/60#issuecomment-669730376](https://github.com//github.com/randytarampi/pseudoimage/pull/60/issues/issuecomment-669730376) [/github.com/randytarampi/slamscan/pull/132#issuecomment-669738806](https://github.com//github.com/randytarampi/slamscan/pull/132/issues/issuecomment-669738806) [/github.com/randytarampi/slamscan/pull/134#issuecomment-669738983](https://github.com//github.com/randytarampi/slamscan/pull/134/issues/issuecomment-669738983) [/github.com/randytarampi/slamscan/pull/133#issuecomment-669739016](https://github.com//github.com/randytarampi/slamscan/pull/133/issues/issuecomment-669739016) [/github.com/randytarampi/pseudoimage/pull/61#issuecomment-669743569](https://github.com//github.com/randytarampi/pseudoimage/pull/61/issues/issuecomment-669743569) [/github.com/randytarampi/slamscan/pull/135#issuecomment-671014646](https://github.com//github.com/randytarampi/slamscan/pull/135/issues/issuecomment-671014646) [/github.com/randytarampi/pseudolocalize/pull/45#issuecomment-673205158](https://github.com//github.com/randytarampi/pseudolocalize/pull/45/issues/issuecomment-673205158) [/github.com/randytarampi/pseudoimage/pull/62#issuecomment-673288919](https://github.com//github.com/randytarampi/pseudoimage/pull/62/issues/issuecomment-673288919) [/github.com//pull/48#issuecomment-674452146](https://github.com//github.com/randytarampi/lwip/pull/48/issues/issuecomment-674452146) [/github.com/randytarampi/me/pull/748#issuecomment-674633206](https://github.com//github.com/randytarampi/me/pull/748/issues/issuecomment-674633206)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment