[Snyk] Upgrade: , , babel-jest, jose, , , , , body-parser, digest-fetch, dotenv, express, express-session, fs, got, nodemon, openid-client, passport, passport-jwt, sqlite3, swagger-ui-express, winston #54

rish2497 · 2024-09-13T06:40:22Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@babel/core
from 7.14.3 to 7.25.2 | 78 versions ahead of your current version | a month ago
on 2024-07-30
@babel/preset-env
from 7.14.4 to 7.25.4 | 65 versions ahead of your current version | 22 days ago
on 2024-08-22
babel-jest
from 27.0.2 to 27.5.1 | 20 versions ahead of your current version | 3 years ago
on 2022-02-08
jose
from 3.11.6 to 3.20.4 | 26 versions ahead of your current version | 2 years ago
on 2022-09-01
@types/body-parser
from 1.19.1 to 1.19.5 | 4 versions ahead of your current version | 10 months ago
on 2023-11-06
@types/isomorphic-fetch
from 0.0.35 to 0.0.39 | 4 versions ahead of your current version | 10 months ago
on 2023-11-07
@types/node-jose
from 1.1.6 to 1.1.13 | 7 versions ahead of your current version | 10 months ago
on 2023-11-07
@types/sqlite3
from 3.1.7 to 3.1.11 | 4 versions ahead of your current version | 10 months ago
on 2023-11-07
body-parser
from 1.19.0 to 1.20.2 | 5 versions ahead of your current version | 2 years ago
on 2023-02-22
digest-fetch
from 1.2.1 to 1.3.0 | 1 version ahead of your current version | 2 years ago
on 2022-08-15
dotenv
from 8.2.0 to 8.6.0 | 5 versions ahead of your current version | 3 years ago
on 2021-05-05
express
from 4.17.1 to 4.19.2 | 9 versions ahead of your current version | 6 months ago
on 2024-03-25
express-session
from 1.17.1 to 1.18.0 | 3 versions ahead of your current version | 8 months ago
on 2024-01-28
fs
from 0.0.1-security to 0.0.2 | 1 version ahead of your current version | 10 years ago
on 2014-09-12
got
from 11.8.2 to 11.8.6 | 3 versions ahead of your current version | 2 years ago
on 2022-12-08
nodemon
from 2.0.7 to 2.0.22 | 25 versions ahead of your current version | a year ago
on 2023-03-22
openid-client
from 4.4.0 to 4.9.1 | 15 versions ahead of your current version | 3 years ago
on 2021-10-13
passport
from 0.4.1 to 0.7.0 | 6 versions ahead of your current version | 10 months ago
on 2023-11-27
passport-jwt
from 4.0.0 to 4.0.1 | 1 version ahead of your current version | 2 years ago
on 2022-12-24
sqlite3
from 5.0.2 to 5.1.7 | 18 versions ahead of your current version | 8 months ago
on 2024-01-05
swagger-ui-express
from 4.1.6 to 4.6.3 | 8 versions ahead of your current version | a year ago
on 2023-05-05
winston
from 3.3.3 to 3.14.2 | 20 versions ahead of your current version | a month ago
on 2024-08-14

Issues fixed by the recommended upgrade:

Issue	Score	Exploit Maturity
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	591	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	591	Proof of Concept
Arbitrary File Overwrite SNYK-JS-TAR-1536528	591	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	591	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	591	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	591	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	591	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	591	No Known Exploit
Prototype Pollution SNYK-JS-ASYNC-2441827	591	Proof of Concept
Denial of Service (DoS) SNYK-JS-SQLITE3-2388645	591	Proof of Concept
Arbitrary Code Execution SNYK-JS-SQLITE3-3358947	591	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	591	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	591	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	591	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	591	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	591	No Known Exploit
Prototype Poisoning SNYK-JS-QS-3153490	591	Proof of Concept
Prototype Poisoning SNYK-JS-QS-3153490	591	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIEXPRESS-6815423	591	Proof of Concept
Open Redirect SNYK-JS-EXPRESS-6474509	591	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	591	Proof of Concept
Open Redirect SNYK-JS-GOT-2932019	591	No Known Exploit
Prototype Pollution SNYK-JS-JSON5-3182856	591	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIEXPRESS-6815424	591	Mature
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	591	Proof of Concept
Open Redirect SNYK-JS-GOT-2932019	591	No Known Exploit
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIDIST-6056393	591	Proof of Concept
Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	591	Proof of Concept
Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	591	No Known Exploit
Session Fixation SNYK-JS-PASSPORT-2840631	591	No Known Exploit
Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	591	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	591	No Known Exploit
Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	591	Proof of Concept
Server-side Request Forgery (SSRF) SNYK-JS-SWAGGERUIDIST-2314884	591	Mature
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	591	No Known Exploit

Release notes

Package name: @babel/core

7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.24.9 - 2024-07-15
v7.24.9 (2024-07-15)

🐛 Bug Fix
- babel-core, babel-standalone
  - #16639 Avoid require() call in @ babel/standalone bundle (@ nicolo-ribaudo)
- babel-types
  - #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)
💅 Polish
- babel-generator, babel-plugin-transform-optional-chaining
  - #16617 Avoid extra parens in TS as/satisfies (@ nicolo-ribaudo)
🏠 Internal
- babel-helper-module-transforms
  - #16629 Lazy top-level initializations for module transforms (@ guybedford)
Committers: 5
- Babel Bot (@ babel-bot)
- Guy Bedford (@ guybedford)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-12
7.23.0 - 2023-09-25
7.22.20 - 2023-09-16
7.22.19 - 2023-09-14
7.22.18 - 2023-09-14
7.22.17 - 2023-09-08
7.22.15 - 2023-09-04
7.22.11 - 2023-08-24
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.8 - 2023-07-06
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.8 - 2023-05-02
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.21.3 - 2023-03-14
7.21.0 - 2023-02-20
7.20.12 - 2023-01-04
7.20.7 - 2022-12-22
7.20.5 - 2022-11-28
7.20.2 - 2022-11-04
7.19.6 - 2022-10-20
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.13 - 2022-08-22
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.5 - 2022-06-13
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.17.9 - 2022-04-06
7.17.8 - 2022-03-18
7.17.7 - 2022-03-14
7.17.5 - 2022-02-17
7.17.4 - 2022-02-15
7.17.3 - 2022-02-15
7.17.2 - 2022-02-08
7.17.0 - 2022-02-02
7.16.12 - 2022-01-22
7.16.10 - 2022-01-19
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.5 - 2021-09-04
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.8 - 2021-07-20
7.14.6 - 2021-06-14
7.14.5 - 2021-06-09
7.14.3 - 2021-05-17

from @babel/core GitHub release notes

Package name: @babel/preset-env

7.25.4 - 2024-08-22
v7.25.4 (2024-08-22)

🐛 Bug Fix
- babel-traverse
  - #16756 fix: Skip computed key when renaming (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  - #16755 fix: Decorator 2018-09 may throw an exception (@ liuxingbaoyu)
- babel-types
  - #16710 Visit AST fields nodes according to their syntactical order (@ nicolo-ribaudo)
- babel-generator
  - #16709 Print semicolon after TS export namespace as A (@ nicolo-ribaudo)
💅 Polish
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties, babel-plugin-transform-destructuring, babel-plugin-transform-optional-chaining, babel-plugin-transform-private-methods, babel-plugin-transform-private-property-in-object, babel-plugin-transform-typescript, babel-runtime-corejs2, babel-runtime, babel-traverse
  - #16722 Avoid unnecessary parens around sequence expressions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-transform-class-properties
  - #16714 Avoid unnecessary parens around exported arrow functions (@ nicolo-ribaudo)
- babel-generator, babel-plugin-proposal-decorators, babel-plugin-proposal-destructuring-private, babel-plugin-transform-object-rest-spread
  - #16712 Avoid printing unnecessary parens around object destructuring (@ nicolo-ribaudo)
🔬 Output optimization
- babel-generator
  - #16740 Avoid extra spaces between comments/regexps in compact mode (@ nicolo-ribaudo)
Committers: 4
- Babel Bot (@ babel-bot)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.25.3 - 2024-07-31
v7.25.3 (2024-07-31)

🐛 Bug Fix
- babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-traverse
  - #16699 Avoid validating visitors produced by traverse.visitors.merge (@ nicolo-ribaudo)
🏠 Internal
- babel-parser
  - #16688 Add @ babel/types as a dependency of @ babel/parser (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.25.2 - 2024-07-30
v7.25.2 (2024-07-30)

🐛 Bug Fix
- babel-core, babel-traverse
  - #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)
Committers: 2
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
7.25.0 - 2024-07-26
v7.25.0 (2024-07-26)

Thanks @ davidtaylorhq and @ slatereax for your first PR!

You can find the release blog post with some highlights at https://babeljs.io/blog/2024/07/26/7.25.0.

👓 Spec Compliance
- babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  - #16537 await using normative updates (@ JLHwung)
- babel-plugin-transform-typescript
  - #16602 Ensure enum members syntactically determinable to be strings do not get reverse mappings (@ liuxingbaoyu)
🚀 New Feature
- babel-helper-create-class-features-plugin, babel-helper-function-name, babel-helper-plugin-utils, babel-helper-wrap-function, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-transform-classes, babel-plugin-transform-function-name, babel-preset-env, babel-traverse, babel-types
  - #16658 Move ensureFunctionName to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-hoist-variables, babel-helper-plugin-utils, babel-plugin-proposal-async-do-expressions, babel-plugin-transform-modules-systemjs, babel-traverse
  - #16644 Move hoistVariables to Scope.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-split-export-declaration, babel-plugin-transform-classes, babel-traverse, babel-types
  - #16645 Move splitExportDeclaration to NodePath.prototype (@ nicolo-ribaudo)
- babel-helper-create-class-features-plugin, babel-helper-environment-visitor, babel-helper-module-transforms, babel-helper-plugin-utils, babel-helper-remap-async-to-generator, babel-helper-replace-supers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-bugfix-v8-static-class-fields-redefine-readonly, babel-plugin-transform-async-generator-functions, babel-plugin-transform-classes, babel-traverse
  - #16649 Move environment-visitor helper into @ babel/traverse (@ nicolo-ribaudo)
- babel-core, babel-parser
  - #16480 Expose wether a module has TLA or not as .extra.async (@ nicolo-ribaudo)
- babel-compat-data, babel-plugin-bugfix-safari-class-field-initializer-scope, babel-preset-env
  - #16569 Introduce bugfix-safari-class-field-initializer-scope (@ davidtaylorhq)
- babel-plugin-transform-block-scoping, babel-traverse, babel-types
  - #16551 Add NodePath#getAssignmentIdentifiers (@ JLHwung)
- babel-helper-import-to-platform-api, babel-plugin-proposal-json-modules
  - #16579 Add uncheckedRequire option for JSON imports to CJS (@ nicolo-ribaudo)
- babel-helper-transform-fixture-test-runner, babel-node
  - #16642 Allow using custom config in babel-node --eval (@ slatereax)
- babel-compat-data, babel-helper-create-regexp-features-plugin, babel-plugin-proposal-duplicate-named-capturing-groups-regex, babel-plugin-transform-duplicate-named-capturing-groups-regex, babel-preset-env, babel-standalone
  - #16445 Add duplicate-named-capturing-groups-regex to preset-env (@ JLHwung)
🐛 Bug Fix
- babel-generator
  - #16678 Print parens around as expressions on the LHS (@ nicolo-ribaudo)
- babel-template, babel-types
  - #15286 fix: Props are lost when the template replaces the node (@ liuxingbaoyu)
🏠 Internal
- Other
  - #16674 bump gulp to 5 (@ JLHwung)
- babel-generator
  - #16651 Simplify the printing logic for ( before ambiguous tokens (@ nicolo-ribaudo)
- babel-helper-function-name, babel-plugin-transform-arrow-functions, babel-plugin-transform-function-name, babel-preset-env, babel-traverse
  - #16652 Simplify helper-function-name logic (@ nicolo-ribaudo)
🏃‍♀️ Performance
- babel-parser, babel-plugin-proposal-pipeline-operator
  - #16461 Some minor parser performance improvements for ts (@ liuxingbaoyu)
🔬 Output optimization
- babel-plugin-transform-classes
  - #16670 Reduce redundant assertThisInitialized (@ liuxingbaoyu)
- babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-exponentiation-operator, babel-plugin-transform-object-super, babel-plugin-transform-private-methods, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  - #16374 Improve super.x output (@ liuxingbaoyu)
- babel-plugin-transform-class-properties, babel-plugin-transform-classes
  - #16656 Simplify output for anonymous classes with no methods (@ nicolo-ribaudo)
Committers: 6
- Artem (@ slatereax)
- Babel Bot (@ babel-bot)
- David Taylor (@ davidtaylorhq)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
7.24.8 - 2024-07-11
7.24.7 - 2024-06-05
7.24.6 - 2024-05-24
7.24.5 - 2024-04-29
7.24.4 - 2024-04-03
7.24.3 - 2024-03-20
7.24.1 - 2024-03-19
7.24.0 - 2024-02-28
7.23.9 - 2024-01-25
7.23.8 - 2024-01-08
7.23.7 - 2023-12-29
7.23.6 - 2023-12-11
7.23.5 - 2023-11-29
7.23.3 - 2023-11-09
7.23.2 - 2023-10-11
7.22.20 - 2023-09-16
7.22.15 - 2023-09-04
7.22.14 - 2023-08-30
7.22.10 - 2023-08-07
7.22.9 - 2023-07-12
7.22.7 - 2023-07-06
7.22.6 - 2023-07-04
7.22.5 - 2023-06-08
7.22.4 - 2023-05-29
7.22.2 - 2023-05-26
7.22.1 - 2023-05-26
7.22.0 - 2023-05-26
7.21.5 - 2023-04-28
7.21.4 - 2023-03-31
7.21.4-esm.4 - 2023-04-04
7.21.4-esm.3 - 2023-04-04
7.21.4-esm.2 - 2023-04-04
7.21.4-esm.1 - 2023-04-04
7.21.4-esm - 2023-04-04
7.20.2 - 2022-11-04
7.19.4 - 2022-10-10
7.19.3 - 2022-09-27
7.19.1 - 2022-09-14
7.19.0 - 2022-09-05
7.18.10 - 2022-08-01
7.18.9 - 2022-07-18
7.18.6 - 2022-06-27
7.18.2 - 2022-05-25
7.18.0 - 2022-05-19
7.17.12 - 2022-05-16
7.17.10 - 2022-04-29
7.16.11 - 2022-01-20
7.16.10 - 2022-01-19
7.16.8 - 2022-01-10
7.16.7 - 2021-12-31
7.16.5 - 2021-12-13
7.16.4 - 2021-11-16
7.16.0 - 2021-10-29
7.15.8 - 2021-10-06
7.15.6 - 2021-09-09
7.15.4 - 2021-09-02
7.15.0 - 2021-08-04
7.14.9 - 2021-08-01
7.14.8 - 2021-07-20
7.14.7 - 2021-06-21
7.14.5 - 2021-06-09
7.14.4 - 2021-05-28

from @babel/preset-env GitHub release notes

Package name: babel-jest

27.5.1 - 2022-02-08
Features
- [jest-config] Support comments in JSON config file (#12316)
- [pretty-format] Expose ConvertAnsi plugin (#12308)
Fixes
- [expect] Add type definitions for asymmetric closeTo matcher (#12304)
- [jest-cli] Load binary via exported API (#12315)
- [jest-config] Replace jsonlint with parse-json (#12316)
- [jest-repl] Make module importable (#12311 & #12315)
Chore & Maintenance
- [*] Avoid anonymous default exports (#12313)
New Contributors
- @ zoltan-boros made their first contribution in #12206
Full Changelog: v27.5.0...v27.5.1
27.5.0 - 2022-02-05
Features
- [expect] Add asymmetric matcher expect.closeTo (#12243)
- [jest-mock] Added mockFn.mock.lastCall to retrieve last argument (#12285)
Fixes
- [expect] Add a fix for .toHaveProperty('') (#12251)
- [jest-each, @ jest/globals] Allow passing ReadonlyArray type of a table to describe.each and test.each (#12297)
- [@ jest/globals] Add missing options argument to jest.doMock typing (#12292)
- [jest-environment-node] Add atob and btoa (#12269)
- [jest-matcher-utils] Correct diff for expected asymmetric matchers (#12264)
- [jest-message-util] Fix .getTopFrame() (and toMatchInlineSnapshot()) with mjs files (#12277)
Chore & Maintenance
- [*] Update graceful-fs to ^4.2.9 (#11749)
Performance
- [jest-resolve] perf: skip error creation on not found stat calls (#11749)
New Contributors
- @ markjm made their first contribution in #11749
- @ benjamingr made their first contribution in #12266
- @ aduh95 made their first contribution in #12269
- @ piranna made their first contribution in #12272
- @ od-c0d3r made their first contribution in #12234
- @ davidnormo made their first contribution in #12264
- @ mshima made their first contribution in #12277
- @ Cambuchi made their first contribution in #12246
- @ vladsholokhov made their first contribution in #12185
- @ robdy made their first contribution in #12254
- @ Michael-M-Judd made their first contribution in #12212
Full Changelog: v27.4.7...v27.5.0
27.4.6 - 2022-01-04
Fixes
- [jest-environment-node] Add AbortSignal (#12157)
- [jest-environment-node] Add Missing node global performance (#12002)
- [jest-runtime] Handle missing mocked property (#12213)
- [@ jest/transform] Update dependency package pirates to 4.0.4 (#12002)
Performance
- jest-config perf: only register ts-node once when loading TS config files (#12160)
New Contributors
- @ laozhu made their first contribution in #12136
- @ sfiquet made their first contribution in #12161
- @ SimonSiefke made their first contribution in #12002
- @ Semigradsky made their first contribution in #12190
- @ cmpadden made their first contribution in #12204
- @ LitoMore made their first contribution in #12211
Full Changelog: v27.4.5...v27.4.6
27.4.5 - 2021-12-13
Fixes
- [jest-worker] Stop explicitly passing process.env (#12141)
New Contributors
- @ 4geru made their first contribution in #12144
Full Changelog: v27.4.4...v27.4.5
27.4.4 - 2021-12-10
Fixes
- [babel-jest] Add process.version chunk to the cache key (#12122)
- [jest-environment] Add mocked to jest object (#12133)
- [jest-worker] Stop explicitly passing execArgv (#12128)
Chore & Maintenance
- [website] Fix the card front that looks overlapping part of the card back
New Contributors
- @ aghArdeshir made their first contribution in #12109
- @ ony3000 made their first contribution in #12127
- @ liesislukas made their first contribution in #12135
- @ nicolo-ribaudo made their first contribution in #12128
Full Changelog:

Snyk has created this PR to upgrade: - @babel/core from 7.14.3 to 7.25.2. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/preset-env from 7.14.4 to 7.25.4. See this package in npm: https://www.npmjs.com/package/@babel/preset-env - babel-jest from 27.0.2 to 27.5.1. See this package in npm: https://www.npmjs.com/package/babel-jest - jose from 3.11.6 to 3.20.4. See this package in npm: https://www.npmjs.com/package/jose - @types/body-parser from 1.19.1 to 1.19.5. See this package in npm: https://www.npmjs.com/package/@types/body-parser - @types/isomorphic-fetch from 0.0.35 to 0.0.39. See this package in npm: https://www.npmjs.com/package/@types/isomorphic-fetch - @types/node-jose from 1.1.6 to 1.1.13. See this package in npm: https://www.npmjs.com/package/@types/node-jose - @types/sqlite3 from 3.1.7 to 3.1.11. See this package in npm: https://www.npmjs.com/package/@types/sqlite3 - body-parser from 1.19.0 to 1.20.2. See this package in npm: https://www.npmjs.com/package/body-parser - digest-fetch from 1.2.1 to 1.3.0. See this package in npm: https://www.npmjs.com/package/digest-fetch - dotenv from 8.2.0 to 8.6.0. See this package in npm: https://www.npmjs.com/package/dotenv - express from 4.17.1 to 4.19.2. See this package in npm: https://www.npmjs.com/package/express - express-session from 1.17.1 to 1.18.0. See this package in npm: https://www.npmjs.com/package/express-session - fs from 0.0.1-security to 0.0.2. See this package in npm: https://www.npmjs.com/package/fs - got from 11.8.2 to 11.8.6. See this package in npm: https://www.npmjs.com/package/got - nodemon from 2.0.7 to 2.0.22. See this package in npm: https://www.npmjs.com/package/nodemon - openid-client from 4.4.0 to 4.9.1. See this package in npm: https://www.npmjs.com/package/openid-client - passport from 0.4.1 to 0.7.0. See this package in npm: https://www.npmjs.com/package/passport - passport-jwt from 4.0.0 to 4.0.1. See this package in npm: https://www.npmjs.com/package/passport-jwt - sqlite3 from 5.0.2 to 5.1.7. See this package in npm: https://www.npmjs.com/package/sqlite3 - swagger-ui-express from 4.1.6 to 4.6.3. See this package in npm: https://www.npmjs.com/package/swagger-ui-express - winston from 3.3.3 to 3.14.2. See this package in npm: https://www.npmjs.com/package/winston See this project in Snyk: https://app.snyk.io/org/rish2497/project/8396a69b-7a99-482a-992a-3f031bdd7f40?utm_source=github&utm_medium=referral&page=upgrade-pr

[Snyk] Upgrade: , , babel-jest, jose, , , , , body-parser, digest-fetch, dotenv, express, express-session, fs, got, nodemon, openid-client, passport, passport-jwt, sqlite3, swagger-ui-express, winston #54

Are you sure you want to change the base?

[Snyk] Upgrade: , , babel-jest, jose, , , , , body-parser, digest-fetch, dotenv, express, express-session, fs, got, nodemon, openid-client, passport, passport-jwt, sqlite3, swagger-ui-express, winston #54

Conversation

rish2497 commented Sep 13, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.24.9 (2024-07-15)

🐛 Bug Fix

💅 Polish

🏠 Internal

Committers: 5

v7.25.4 (2024-08-22)

🐛 Bug Fix

💅 Polish

🔬 Output optimization

Committers: 4

v7.25.3 (2024-07-31)

🐛 Bug Fix

🏠 Internal

Committers: 2

v7.25.2 (2024-07-30)

🐛 Bug Fix

Committers: 2

v7.25.0 (2024-07-26)

👓 Spec Compliance

🚀 New Feature

🐛 Bug Fix

🏠 Internal

🏃‍♀️ Performance

🔬 Output optimization

Committers: 6

Features

Fixes

Chore & Maintenance

New Contributors

Features

Fixes

Chore & Maintenance

Performance

New Contributors

Fixes

Performance

New Contributors

Fixes

New Contributors

Fixes

Chore & Maintenance

New Contributors