[Snyk] Upgrade: , semver, , arch, glob, jsonc-parser, minimatch, reflect-metadata, rxjs, tmp, vscode-debugprotocol, which, winreg, xml2js #1
+1,493
−1,047
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![snyk-io[bot]](https://avatars.githubusercontent.com/in/372950?s=60&v=4){kind=small}
Snyk has created this PR to upgrade:
- @iarna/toml from 2.2.5 to 3.0.0.
See this package in npm: https://www.npmjs.com/package/@iarna/toml
- semver from 7.6.0 to 7.6.3.
See this package in npm: https://www.npmjs.com/package/semver
- @vscode/extension-telemetry from 0.8.4 to 0.9.7.
See this package in npm: https://www.npmjs.com/package/@vscode/extension-telemetry
- arch from 2.2.0 to 3.0.0.
See this package in npm: https://www.npmjs.com/package/arch
- glob from 7.2.0 to 11.0.0.
See this package in npm: https://www.npmjs.com/package/glob
- jsonc-parser from 3.2.0 to 3.3.1.
See this package in npm: https://www.npmjs.com/package/jsonc-parser
- minimatch from 5.1.0 to 10.0.1.
See this package in npm: https://www.npmjs.com/package/minimatch
- reflect-metadata from 0.1.13 to 0.2.2.
See this package in npm: https://www.npmjs.com/package/reflect-metadata
- rxjs from 6.6.7 to 7.8.1.
See this package in npm: https://www.npmjs.com/package/rxjs
- tmp from 0.0.33 to 0.2.3.
See this package in npm: https://www.npmjs.com/package/tmp
- vscode-debugprotocol from 1.35.0 to 1.51.0.
See this package in npm: https://www.npmjs.com/package/vscode-debugprotocol
- which from 2.0.2 to 4.0.0.
See this package in npm: https://www.npmjs.com/package/which
- winreg from 1.2.4 to 1.2.5.
See this package in npm: https://www.npmjs.com/package/winreg
- xml2js from 0.5.0 to 0.6.2.
See this package in npm: https://www.npmjs.com/package/xml2js
See this project in Snyk:
https://app.snyk.io/org/organich/project/1c5a5491-12b5-4bfb-85f1-aa45e26cab02?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@iarna/toml
⚠️ This is a major version upgrade, and may be a breaking change | 4 years ago
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
from 2.2.5 to 3.0.0 | 1 version ahead of your current version
on 2020-04-23
semver
from 7.6.0 to 7.6.3 | 3 versions ahead of your current version | 2 months ago
on 2024-07-16
@vscode/extension-telemetry
from 0.8.4 to 0.9.7 | 9 versions ahead of your current version | a month ago
on 2024-08-02
arch
from 2.2.0 to 3.0.0 | 1 version ahead of your current version
on 2024-02-12
glob
from 7.2.0 to 11.0.0 | 54 versions ahead of your current version
on 2024-07-08
jsonc-parser
from 3.2.0 to 3.3.1 | 3 versions ahead of your current version | 3 months ago
on 2024-06-24
minimatch
from 5.1.0 to 10.0.1 | 52 versions ahead of your current version
on 2024-07-08
reflect-metadata
from 0.1.13 to 0.2.2 | 5 versions ahead of your current version | 6 months ago
on 2024-03-29
rxjs
from 6.6.7 to 7.8.1 | 41 versions ahead of your current version
on 2023-04-26
tmp
from 0.0.33 to 0.2.3 | 5 versions ahead of your current version | 7 months ago
on 2024-02-29
vscode-debugprotocol
from 1.35.0 to 1.51.0 | 36 versions ahead of your current version | 3 years ago
on 2021-12-02
which
from 2.0.2 to 4.0.0 | 3 versions ahead of your current version
on 2023-08-29
winreg
from 1.2.4 to 1.2.5 | 1 version ahead of your current version | a year ago
on 2023-10-20
xml2js
from 0.5.0 to 0.6.2 | 3 versions ahead of your current version | a year ago
on 2023-07-26
Issues fixed by the recommended upgrade:
SNYK-JS-INFLIGHT-6095116
Release notes
Package name: @iarna/toml
-
3.0.0 - 2020-04-23
-
2.2.5 - 2020-04-22
from @iarna/toml GitHub release notes3.0.0
2.2.5
Package name: semver
-
7.6.3 - 2024-07-16
-
7.6.2 - 2024-05-09
-
7.6.1 - 2024-05-07
-
7.6.0 - 2024-02-05
from semver GitHub release notes7.6.3 (2024-07-16)
Bug Fixes
73a3d79#726 optimize Range parsing and formatting (#726) (@ jviide)Documentation
2975ece#719 fix extra backtick typo (#719) (@ stdavis)7.6.2 (2024-05-09)
Bug Fixes
6466ba9#713 lru: use map.delete() directly (#713) (@ negezor, @ lukekarrys)7.6.1 (2024-05-04)
Bug Fixes
c570a34#704 linting: no-unused-vars (@ wraithgar)ad8ff11#704 use internal cache implementation (@ mbtools)ac9b357#682 typo in compareBuild debug message (#682) (@ mbtools)Dependencies
988a8de#709 uninstalllru-cache(#709)3fabe4d#704 remove lru-cacheChores
dd09b60#705 bump @ npmcli/template-oss to 4.22.0 (@ lukekarrys)ec49cdc#701 chore: chore: postinstall for dependabot template-oss PR (@ lukekarrys)b236c3d#696 add benchmarks (#696) (@ H4ad)692451b#688 various improvements to README (#688) (@ mbtools)5feeb7f#705 postinstall for dependabot template-oss PR (@ lukekarrys)074156f#701 bump @ npmcli/template-oss from 4.21.3 to 4.21.4 (@ dependabot[bot])7.6.0 (2024-01-31)
Features
a7ab13a#671 preserve pre-release and build parts of a version on coerce (#671) (@ madtisa, madtisa, @ wraithgar)Chores
816c7b2#667 postinstall for dependabot template-oss PR (@ lukekarrys)0bd24d9#667 bump @ npmcli/template-oss from 4.21.1 to 4.21.3 (@ dependabot[bot])e521932#652 postinstall for dependabot template-oss PR (@ lukekarrys)8873991#652 chore: chore: postinstall for dependabot template-oss PR (@ lukekarrys)f317dc8#652 bump @ npmcli/template-oss from 4.19.0 to 4.21.0 (@ dependabot[bot])7303db1#658 add clean() test for build metadata (#658) (@ jethrodaniel)6240d75#656 add missing quotes in README.md (#656) (@ zyxkad)14d263f#625 postinstall for dependabot template-oss PR (@ lukekarrys)7c34e1a#625 bump @ npmcli/template-oss from 4.18.1 to 4.19.0 (@ dependabot[bot])123e0b0#622 postinstall for dependabot template-oss PR (@ lukekarrys)737d5e1#622 bump @ npmcli/template-oss from 4.18.0 to 4.18.1 (@ dependabot[bot])cce6180#598 postinstall for dependabot template-oss PR (@ lukekarrys)b914a3d#598 bump @ npmcli/template-oss from 4.17.0 to 4.18.0 (@ dependabot[bot])Package name: @vscode/extension-telemetry
-
0.9.7 - 2024-08-02
- #213: Bump version + packages
- #211: Update readme + support connection string
- #210: Send user id in extension paylod
- #207: Bump braces from 3.0.2 to 3.0.3
- #206: Update packages
- #204: Rollback packages
-
0.9.6 - 2024-03-22
-
0.9.5 - 2024-03-20
-
0.9.4 - 2024-03-20
- Allows measurements to also be undefined for easy omitting, similar to how properties work
-
0.9.3 - 2024-02-29
- Improves on the user agent metric shown when
- Fixes a bug with telemetry fetching using app insights on older version of node. Thanks to @ devm33
-
0.9.2 - 2023-12-19
-
0.9.1 - 2023-12-12
-
0.9.0 - 2023-11-01
-
0.8.5 - 2023-09-20
- Improves shutdown performance by lessening the amount of time which is allocated to disposing the telemetry reporters. Additionally, removes a few redundant flushes. Fixes microsoft/vscode#192742
-
0.8.4 - 2023-08-24
- Fixes a bug where if the user's connection were to drop during a session, telemetry would no longer send for the rest of that session
- Fixes a bug with
from @vscode/extension-telemetry GitHub release notesChanges:
This list of changes was auto generated.
Update packages (#206)
Rollback packages (#204)
navigator.userAgentDatais unavailable. Thanks to @ seznaThis release contains a small fix to the 1DS package used by Microsoft extensions in the web to ensure compliance with the California's Global Privacy Control. If you're not a Microsoft extension, then it is safe to disregard this release as it contains no new features or improvements for the third party flow.
Thanks to a community contribution by @ ilia-db the
unhandlederrorevent handler has been properly fixed to include common properties.Application insights web basics comes with the ability to pass in a fetch pollyfill that allows it to be used for both Node and Web. This is similar to what we already do for first party extensions using the 1DS package.
While there is no breaking changes here, the replacement of a key dependency with what should be an equivalent alternative may have unknown edge cases that were not accounted for, therefore the version has been bumped to reflect this.
Bundlephobia reports a 67Kb decline in bundle size with this change.
sendRawTelemetryEventsendingkey: keypairs instead ofkey: valuepairsPackage name: arch
-
3.0.0 - 2024-02-12
-
2.2.0 - 2020-10-27
from arch GitHub release notes3.0.0
2.2.0
Package name: glob
-
11.0.0 - 2024-07-08
-
10.4.5 - 2024-07-09
-
10.4.4 - 2024-07-08
-
10.4.3 - 2024-07-06
-
10.4.2 - 2024-06-19
-
10.4.1 - 2024-05-24
-
10.4.0 - 2024-05-24
-
10.3.16 - 2024-05-21
-
10.3.15 - 2024-05-12
-
10.3.14 - 2024-05-09
-
10.3.13 - 2024-05-09
-
10.3.12 - 2024-03-28
-
10.3.11 - 2024-03-28
-
10.3.10 - 2023-09-27
-
10.3.9 - 2023-09-26
-
10.3.8 - 2023-09-26
-
10.3.7 - 2023-09-24
-
10.3.6 - 2023-09-23
-
10.3.5 - 2023-09-20
-
10.3.4 - 2023-08-30
-
10.3.3 - 2023-07-08
-
10.3.2 - 2023-07-08
-
10.3.1 - 2023-06-27
-
10.3.0 - 2023-06-21
-
10.2.7 - 2023-06-06
-
10.2.6 - 2023-05-20
-
10.2.5 - 2023-05-17
-
10.2.4 - 2023-05-15
-
10.2.3 - 2023-05-09
-
10.2.2 - 2023-04-23
-
10.2.1 - 2023-04-17
-
10.2.0 - 2023-04-17
-
10.1.0 - 2023-04-14
-
10.0.0 - 2023-04-09
-
9.3.5 - 2023-04-09
-
9.3.4 - 2023-04-02
-
9.3.3 - 2023-04-02
-
9.3.2 - 2023-03-22
-
9.3.1 - 2023-03-21
-
9.3.0 - 2023-03-14
-
9.2.1 - 2023-03-03
-
9.2.0 - 2023-03-02
-
9.1.2 - 2023-03-01
-
9.1.1 - 2023-03-01
-
9.1.0 - 2023-03-01
-
9.0.2 - 2023-02-28
-
9.0.1 - 2023-02-27
-
9.0.0 - 2023-02-27
-
8.1.0 - 2023-01-14
-
8.0.3 - 2022-05-13
-
8.0.2 - 2022-05-12
-
8.0.1 - 2022-04-11
-
7.2.3 - 2022-05-15
-
7.2.2 - 2022-05-13
-
7.2.0 - 2021-09-22
from glob GitHub release notes11.0.0
10.4.4
10.4.3
10.4.2
10.4.1
10.4.0
10.3.16
10.3.15
10.3.14
10.3.13
Package name: jsonc-parser
-
3.3.1 - 2024-06-24
- #92: remove exports, prepare 3.3.1
-
3.3.0 - 2024-06-24
- #11: Can we have a "insertFinalNewline" option in "FormattingOptions"?
- #4: Source map referenced but not included in published package
- #33: Formatting valid json content is causing an invalid json
- #40: parseTree() returns
- #90: prepare 3.3.0
- #88: Allow the visitor to cease callbacks
- #89: Bump braces from 3.0.2 to 3.0.3
- #84: prepare 3.2.1
- #81: perf(format): cache breaklines and spaces as much as possible
- #79: update dependencies
- #75: ci: add batch
- #72: delete pr-chat action
- #71: add publish pipeline & cleanup ci
- #70: set
- #69: sort edits in applyEdits
- #66: An additional parameter keepLines has been added into the formatting options which allows to keep the original line formatting
- #64: Adding Microsoft SECURITY.MD
- #62: Add JSON path supplier parameter to visitor functions
- #44: findNodeAtLocation does not handle incomplete property pair
- #61: Update API section in README
- #53: Clarify whether / how
- #46: Non-standard whitespace handling
- #47: Improve README
- #54: readme: improve ParseOptions documentation
- #43: Add file extenstion to typings property value
- #34: Optimize parseLiteral for number-heavy JSON files (ala GeoJSON)
- #39: Bump lodash from 4.17.15 to 4.17.19
- #35: Allow for array modifications, add inPlace formatting option.
- #32: Parse errors make parsed tree useless
- #31: Upgrading from 2.1.1 to 2.2.0 has diagnostic for file with only comments
- #25: Fix typo in README
- #24: parse function should include properties with empty string as their keys
- #21: Update README.md
- #18: JavaScipt -> JavaScript
- #17: add line and column information to scanner and visitor
- #15: Fix a few typos in doc comments
- #12: Do not mutate the given path
- #9: Refactor computeIndentLevel method
- #8: Fix typo of token
- #6: Allow trailing commas in array
- #5: add JSON formatter and editor from VS Code
- #1: Error objects should also contain location information
-
3.2.1 - 2024-01-22
-
3.2.0 - 2022-08-30
from jsonc-parser GitHub release notesChanges:
This list of changes was auto generated.
Changes:
Feature Requests:
Bugs:
undefinedon empty string inputOthers:
See More
preserveConstEnums: true, switch to es2020Edit[]can be concatenatedThis list of changes was auto generated.
prepare 3.2.1 (#84)
set
preserveConstEnums: true, switch to es2020 (#70)Package name: minimatch
-
10.0.1 - 2024-07-08
-
10.0.0 - 2024-07-08
-
9.0.5 - 2024-06-25
-
9.0.4 - 2024-03-28
-
9.0.3 - 2023-07-06
-
9.0.2 - 2023-06-23
-
9.0.1 - 2023-05-20
-
9.0.0 - 2023-04-09
-
8.0.4 - 2023-04-09
-
8.0.3 - 2023-04-03
-
8.0.2 - 2023-04-02
-
8.0.1 - 2023-04-02
-
8.0.0 - 2023-04-02
-
7.4.6 - 2023-04-09
-
7.4.5 - 2023-04-03
-
7.4.4 - 2023-04-01
-
7.4.3 - 2023-03-22
-
7.4.2 - 2023-03-01
-
7.4.1 - 2023-03-01
-
7.4.0 - 2023-03-01
-
7.3.0 - 2023-02-27
-
7.2.0 - 2023-02-26
-
7.1.4 - 2023-02-26
-
7.1.3 - 2023-02-25
-
7.1.2 - 2023-02-24
-
7.1.1 - 2023-02-24
-
7.1.0 - 2023-02-22
-
7.0.1 - 2023-02-22
-
7.0.0 - 2023-02-20
-
6.2.0 - 2023-02-13
-
6.1.10 - 2023-02-13
-
6.1.9 - 2023-02-13
-
6.1.8 - 2023-02-11
-
6.1.7 - 2023-02-11
-
6.1.6 - 2023-01-22
-
6.1.5 - 2023-01-17
-
6.1.4 - 2023-01-17
-
6.1.3 - 2023-01-17
-
6.1.2 - 2023-01-17
-
6.1.1 - 2023-01-17
-
6.1.0 - 2023-01-17
-
6.0.4 - 2023-01-16
-
6.0.3 - 2023-01-15
-
6.0.2 - 2023-01-15
-
6.0.1 - 2023-01-15
-
6.0.0 - 2023-01-14
-
5.1.6 - 2023-01-17
-
5.1.5 - 2023-01-17
-
5.1.4 - 2023-01-14
-
5.1.3 - 2023-01-14
-
5.1.2 - 2022-12-20
-
5.1.1 - 2022-11-29
-
5.1.0 - 2022-05-16
from minimatch GitHub release notes10.0.1
10.0.0
9.0.5
9.0.4
9.0.3
9.0.2
9.0.1
9.0.0
8.0.4
7.4.6
Package name: reflect-metadata
What's Changed
Full Changelog: v0.2.0...v0.2.1
What's Changed
/litemode by @ rbuckton in