[Snyk] Upgrade: , , amqplib, aws-sdk, azure-sb, config, js-yaml, kafkajs, winston, winston-daily-rotate-file #3076
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @azure/service-bus from 1.1.9 to 1.1.10.
See this package in npm: https://www.npmjs.com/package/@azure/service-bus
- @google-cloud/pubsub from 2.5.0 to 2.19.4.
See this package in npm: https://www.npmjs.com/package/@google-cloud/pubsub
- amqplib from 0.6.0 to 0.10.4.
See this package in npm: https://www.npmjs.com/package/amqplib
- aws-sdk from 2.741.0 to 2.1682.0.
See this package in npm: https://www.npmjs.com/package/aws-sdk
- azure-sb from 0.11.1 to 0.11.2.
See this package in npm: https://www.npmjs.com/package/azure-sb
- config from 3.3.1 to 3.3.12.
See this package in npm: https://www.npmjs.com/package/config
- js-yaml from 3.14.0 to 3.14.1.
See this package in npm: https://www.npmjs.com/package/js-yaml
- kafkajs from 1.12.0 to 1.16.0.
See this package in npm: https://www.npmjs.com/package/kafkajs
- winston from 3.3.3 to 3.14.2.
See this package in npm: https://www.npmjs.com/package/winston
- winston-daily-rotate-file from 4.5.0 to 4.7.1.
See this package in npm: https://www.npmjs.com/package/winston-daily-rotate-file
See this project in Snyk:
https://app.snyk.io/org/hamzaslama/project/8f14eb9a-8a3a-4478-8a85-ee8e558cb5a2?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@azure/service-bus
from 1.1.9 to 1.1.10 | 1 version ahead of your current version | 4 years ago
on 2020-09-14
@google-cloud/pubsub
from 2.5.0 to 2.19.4 | 30 versions ahead of your current version | 2 years ago
on 2022-05-05
amqplib
from 0.6.0 to 0.10.4 | 10 versions ahead of your current version | 5 months ago
on 2024-04-11
aws-sdk
from 2.741.0 to 2.1682.0 | 941 versions ahead of your current version | 21 days ago
on 2024-08-23
azure-sb
from 0.11.1 to 0.11.2 | 1 version ahead of your current version | 3 years ago
on 2021-05-27
config
from 3.3.1 to 3.3.12 | 10 versions ahead of your current version | 3 months ago
on 2024-06-25
js-yaml
from 3.14.0 to 3.14.1 | 1 version ahead of your current version | 4 years ago
on 2020-12-07
kafkajs
from 1.12.0 to 1.16.0 | 154 versions ahead of your current version | 3 years ago
on 2022-02-09
winston
from 3.3.3 to 3.14.2 | 20 versions ahead of your current version | a month ago
on 2024-08-14
winston-daily-rotate-file
from 4.5.0 to 4.7.1 | 8 versions ahead of your current version | 2 years ago
on 2022-05-30
Issues fixed by the recommended upgrade:
SNYK-JS-Y18N-1021887
SNYK-JS-MOMENT-2440688
SNYK-JS-MOMENT-2944238
SNYK-JS-NODEFORGE-2430339
SNYK-JS-NODEFORGE-598677
SNYK-JS-URLPARSE-2407770
SNYK-JS-QS-3153490
SNYK-JS-SEMVER-3247795
SNYK-JS-SEMVER-3247795
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-ASYNC-2441827
SNYK-JS-AWSSDK-1059424
SNYK-JS-GRPCGRPCJS-1038818
SNYK-JS-JSONBIGINT-608659
SNYK-JS-JSONSCHEMA-1920922
SNYK-JS-UNDERSCORE-1080984
SNYK-JS-UNDERSCORE-1080984
SNYK-JS-NODEFORGE-2330875
SNYK-JS-NODEFORGE-2331908
SNYK-JS-NODEFETCH-2342118
SNYK-JS-NODEFETCH-674311
SNYK-JS-NODEFORGE-2430337
SNYK-JS-NODEFORGE-2430341
SNYK-JS-URLPARSE-1078283
SNYK-JS-URLPARSE-1533425
SNYK-JS-URLPARSE-2401205
SNYK-JS-URLPARSE-2407759
SNYK-JS-URLPARSE-2412697
SNYK-JS-VALIDATOR-1090599
SNYK-JS-VALIDATOR-1090601
SNYK-JS-VALIDATOR-1090602
SNYK-JS-COLORSTRING-1082939
SNYK-JS-JSON5-3182856
npm:debug:20170905
npm:debug:20170905
SNYK-JS-MINIMIST-2429795
Release notes
Package name: @google-cloud/pubsub
-
2.19.4 - 2022-05-05
- deps: update dependency google-gax to v2.30.3 (#1549) (5810331)
-
2.19.3 - 2022-04-26
- deps: update dependency google-gax to v2.30.2 (#1502) (37d075e)
-
2.19.1 - 2022-04-26
- deps: update dependency google-gax to v2.29.7 (#1493) (c8921a7)
- deps: update dependency google-gax to v2.30.0 (#1496) (073a1b8)
- update grpc.max_metadata_size to 4MiB for exactly-once, and shift ack/modack errors to 'debug' stream channel (#1505) (abd10cc)
-
2.19.0 - 2022-02-16
- add exactly once delivery flag (#1487) (330061c)
- deps: update dependency google-gax to v2.29.5 (#1474) (f855db3)
- deps: update dependency google-gax to v2.29.6 (#1489) (62aba28)
- removing misspelled field, add correctly spelled field 🦉 Updates from OwlBot (#1490) (afb9cfe)
-
2.18.5 - 2022-01-25
- deps: update dependency @ opentelemetry/semantic-conventions to v1 (#1407) (740d78c)
- deps: update dependency google-gax to v2.29.0 (#1452) (f419137)
- deps: update dependency google-gax to v2.29.4 (#1469) (8abbfa7)
- update to work with latest node types (changed the return type of Stream.destroy()) (#1464) (fddc2e7)
-
2.18.4 - 2021-12-09
- deps: update dependency google-gax to v2.28.1 (#1432) (98840fc)
-
2.18.3 - 2021-11-18
- set only Publish to 5000ms (#1416) (1e11001)
- temporary hold-back on google-gax to avoid timeout issues caused by googleapis/gax-nodejs#1100 (#1431) (18c6b18)
-
2.18.2 - 2021-11-08
- cloud-rad: move comments for TSDoc (#1423) (a40a23e)
-
2.18.1 - 2021-09-27
- deprecate maxExtension in favour of maxExtensionMinutes (#1402) (46b83ba)
-
2.18.0 - 2021-09-23
-
2.17.0 - 2021-08-25
-
2.16.6 - 2021-08-19
-
2.16.5 - 2021-08-18
-
2.16.4 - 2021-08-17
-
2.16.3 - 2021-08-11
-
2.16.2 - 2021-08-11
-
2.16.1 - 2021-07-21
-
2.16.0 - 2021-07-12
-
2.15.1 - 2021-06-23
-
2.14.0 - 2021-06-16
-
2.13.0 - 2021-06-10
-
2.12.0 - 2021-05-11
-
2.11.1-pre.1 - 2021-05-10
-
2.11.1-pre - 2021-04-23
-
2.11.0 - 2021-04-15
-
2.10.0 - 2021-02-22
-
2.9.0 - 2021-02-12
-
2.8.0 - 2021-01-11
-
2.7.0 - 2020-12-03
-
2.6.0 - 2020-10-21
-
2.5.0 - 2020-08-17
from @google-cloud/pubsub GitHub release notes2.19.4 (2022-05-05)
Bug Fixes
2.19.3 (2022-04-26)
Bug Fixes
2.19.1 (2022-04-06)
Bug Fixes
2.19.0 (2022-02-16)
Features
Bug Fixes
2.18.5 (2022-01-21)
Bug Fixes
Bug Fixes
Bug Fixes
Bug Fixes
Bug Fixes
Package name: amqplib
-
0.10.4 - 2024-04-11
-
0.10.3 - 2022-09-01
-
0.10.2 - 2022-08-07
-
0.10.1 - 2022-07-26
-
0.10.0 - 2022-06-02
-
0.9.1 - 2022-05-22
-
0.9.0 - 2022-05-09
-
0.8.0 - 2021-05-19
⚠️ This release drops support for NodeJS < v10 ⚠️ . This version of
- using the built-in
- updating or switching libraries that previously couldn't be updated, because they had dropped support for older NodeJS
- removing code that is now covered in the standard library, e.g., checking whether a number is an integer
-
0.7.1 - 2021-03-08
-
0.7.0 - 2021-02-22
-
0.6.0 - 2020-07-15
from amqplib GitHub release notes0.10.4
0.10.3
0.10.2
0.10.1
0.10.0
0.9.0
amqplibstill works with NodeJS v0.6 through v16, but future versions will not be tested for compatibility with NodeJS < v10.This is to unlock other improvements that can now be made, like
PromiseobjectThis release also includes an improvement to TLS connections for people using an AMQP server behind a load balancer. amqplib will now copy the hostname of the connection URL or object to the server name indication field.
Merge pull request #609 from squaremo/release-0.7.1
Bump version and changelog for v0.7.1
This minor version release extends support to Node.js v15.
Tag for version 0.6.0
Package name: aws-sdk
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
See changelog for more information.
This change is