Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade ecmarkup from 18.3.1 to 20.0.0 #6

Merged
merged 1 commit into from
Nov 4, 2024

Conversation

Graysonbarton
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade ecmarkup from 18.3.1 to 20.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 4 versions ahead of your current version.

  • The recommended version was released on a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Asymmetric Resource Consumption (Amplification)
SNYK-JS-BODYPARSER-7926860
111 No Known Exploit
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
111 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
111 No Known Exploit
high severity Prototype Poisoning
SNYK-JS-QS-3153490
111 Proof of Concept
high severity Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922
111 No Known Exploit
medium severity Unchecked Input for Loop Condition
SNYK-JS-KATEX-6483836
111 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
111 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHTOREGEXP-7925106
111 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
111 No Known Exploit
medium severity Open Redirect
SNYK-JS-EXPRESS-6474509
111 No Known Exploit
medium severity Cross-site Scripting
SNYK-JS-EXPRESS-7926867
111 No Known Exploit
medium severity Improper Encoding or Escaping of Output
SNYK-JS-KATEX-6483831
111 No Known Exploit
medium severity Incomplete List of Disallowed Inputs
SNYK-JS-KATEX-6483834
111 No Known Exploit
medium severity Unchecked Input for Loop Condition
SNYK-JS-KATEX-6483835
111 No Known Exploit
low severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973
111 Proof of Concept
low severity Cross-site Scripting
SNYK-JS-SEND-7926862
111 No Known Exploit
low severity Cross-site Scripting
SNYK-JS-SERVESTATIC-7926865
111 No Known Exploit
Release notes
Package name: ecmarkup
  • 20.0.0 - 2024-09-23

    Breaking changes

    In #611, the engines field has been updated to indicate support only for node 18+.

    In #615, special handling for AOs named "Completion" and "GeneratorYield" has been dropped in favor of a new attribute, "skip return checks", which can be applied to any AO. When upstreaming into ecma262 this will need to be done for those as well as for NormalCompletion.

    All PRs

    • Fix emu-format --check with multiple files in #607
    • handle ins/del in completion-record typechecks in #610
    • Bump engines and some dependencies in #611
    • Refactor typechecker in #612
    • special handling for Completion/NormalCompletion in the typechecker in #613
    • Check return types in #615
  • 19.1.0 - 2024-09-04

    What's Changed

  • 19.0.0 - 2024-06-27

    What's Changed

    • update lint rule to accept %-notation in operation headers in #595

    This is a breaking change: @@ symbol notation is now a lint failure, which will break the build if you are using --strict. See tc39/ecma262#1314 for context.

  • 18.4.0 - 2024-06-27
    • make the ToC black in #590
    • Move @ internal markers to individual members in #592
    • Make the formatter smarter about mutli-line steps in #596
    • fix instability in formatting AO headers with no arguments in #597
    • avoid console warning when hitting number keys beyond pins in #599
    • add support for opengraph tags in #598
  • 18.3.1 - 2024-03-25

    What's Changed

    • bump grammarkdown and account for unescaping of < in #589

    Full Changelog: v18.3.0...v18.3.1

from ecmarkup GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade ecmarkup from 18.3.1 to 20.0.0.

See this package in npm:
ecmarkup

See this project in Snyk:
https://app.snyk.io/org/graysonbarton/project/f1fbae4f-be7f-4a93-9123-56a14c0fdb2e?utm_source=github&utm_medium=referral&page=upgrade-pr
Copy link

sourcery-ai bot commented Oct 31, 2024

🧙 Sourcery has finished reviewing your pull request!


Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time. You can also use
    this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have skipped reviewing this pull request. Here's why:

  • It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
  • We don't review packaging changes - Let us know if you'd like us to change this.

@Graysonbarton Graysonbarton merged commit 0053fe8 into main Nov 4, 2024
2 of 3 checks passed
@Graysonbarton Graysonbarton deleted the snyk-upgrade-94b37602e7c7e8c4f45caf145c949a81 branch November 4, 2024 03:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants