[Snyk-dev] Upgrade bull from 4.8.5 to 4.12.2

[strassl-snyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade bull from 4.8.5 to 4.12.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released a month ago, on 2024-01-17.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Denial of Service (DoS) SNYK-JS-MSGPACKR-6140431	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: bull

• 4.12.2 - 2024-01-17
  

  4.12.2 (2024-01-17)

  Bug Fixes

  • dependencies: upgrade msgpackr (cc83ae2)
• 4.12.1 - 2024-01-15
  

  4.12.1 (2024-01-15)

  Bug Fixes

  • deps: bump msgpackr from 1.5.2 to 1.10.1 (#2697) (b27c90d)
• 4.12.0 - 2023-12-18
  

  4.12.0 (2023-12-18)

  Features

  • add missing extendLock definition (14432ff)
• 4.11.5 - 2023-11-11
  

  4.11.5 (2023-11-11)

  Bug Fixes

  • pass redis string as opts into queue (e94f568)
• 4.11.4 - 2023-10-14
  

  4.11.4 (2023-10-14)

  Bug Fixes

  • catch pause errors when closing (ccb6cc7)
• 4.11.3 - 2023-08-11
  

  4.11.3 (2023-08-11)

  Bug Fixes

  • types: make repeat option key optional (934ec98)
• 4.11.2 - 2023-08-08
  

  4.11.2 (2023-08-08)

  Bug Fixes

  • worker: better client name support (5910f44)
• 4.11.1 - 2023-08-08
  

  4.11.1 (2023-08-08)

  Bug Fixes

  • queue: deep clone opts (#2634) fixes #2633 (35f1da3)
• 4.11.0 - 2023-08-08
  

  4.11.0 (2023-08-08)

  Bug Fixes

  • add mising getMetrics type (#2640) (a217a7d)
  • remove deprecated debuglog (4ce36fe)
  • types: add missing keys to repeat opts (e4e6457)
  • types: rename strategyOptions to options to reflect js file (bae6427)
  • typings: return type of getJobCountByTypes (#2622) (47722ed)
  • worker: high-memory-usage-when-providing-float-to-concurrency (#2620) (dcca1e8)
  • change option name to match ts declaration (909a07e)
  • ts declaration metrics option and getMetrics function (11331b7)

  Features

  • upgrade ioredis to 5.3.2 (e1883f0)
• 4.10.4 - 2023-02-09
  

  4.10.4 (2023-02-09)

  Bug Fixes

  • retry: handle pause queue status (9f945d6)
• 4.10.3 - 2023-02-03
• 4.10.2 - 2022-11-24
• 4.10.1 - 2022-10-13
• 4.10.0 - 2022-09-29
• 4.9.0 - 2022-09-05
• 4.8.5 - 2022-07-27

from bull GitHub release notes

Commit messages

Package name: bull

• 60fa88f chore(release): 4.12.2 [skip ci]
• cc83ae2 fix(dependencies): upgrade msgpackr
• 1aa2ce5 chore(release): 4.12.1 [skip ci]
• b27c90d fix(deps): bump msgpackr from 1.5.2 to 1.10.1 (#2697)
• fe3579b chore(release): 4.12.0 [skip ci]
• c73deb7 docs: add missing references for job locks
• 14432ff feat: add missing extendLock definition
• 5f34bce docs: correct misuse of Error constructor (#2685)
• 3ffe132 docs: add Dragonfly as sponsor
• 72c7f00 chore(release): 4.11.5 [skip ci]
• e94f568 fix: pass redis string as opts into queue
• c3e5d25 chore(deps): bump get-func-name from 2.0.0 to 2.0.2
• 0a5829d chore(deps): bump @ babel/traverse from 7.13.15 to 7.23.2
• 583140e chore(release): 4.11.4 [skip ci]
• ccb6cc7 fix: catch pause errors when closing
• 4d197e8 docs(readme): update feature comparison table
• 5a61062 chore(release): 4.11.3 [skip ci]
• 934ec98 fix(types): make repeat option key optional
• 93a59f2 chore(release): 4.11.2 [skip ci]
• 5910f44 fix(worker): better client name support
• 6529858 chore(release): 4.11.1 [skip ci]
• 35f1da3 fix(queue): deep clone opts (#2634) fixes #2633
• f71b455 chore(release): 4.11.0 [skip ci]
• f6cbcab chore: update ubuntu build version

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs