-
Notifications
You must be signed in to change notification settings - Fork 0
chore(deps): update dependency eslint to v9 - autoclosed #161
Conversation
76cec6e
to
077bc1a
Compare
New and removed dependencies detected. Learn more about Socket for GitHub ↗︎
🚮 Removed packages: npm/mintlify@4.0.146, npm/nanoid@5.0.7 |
26765d4
to
ede8d91
Compare
ede8d91
to
dc795ae
Compare
👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎ This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored. |
dc795ae
to
4f30ff8
Compare
e0b73cf
to
fb0b052
Compare
fb0b052
to
11809da
Compare
describe("hmac", () => { | ||
describe("hash a string with secret", () => { | ||
const input = "hello"; | ||
const secret = "secret"; |
Check failure
Code scanning / CodeQL
Hard-coded credentials
describe("hashPassword/matchPassword", () => { | ||
describe("hash a password with pepper", () => { | ||
const password = "password"; | ||
const pepper = "pepper"; |
Check failure
Code scanning / CodeQL
Hard-coded credentials
}); | ||
}); | ||
describe("encrypt/decrypt", () => { | ||
const key = "supersecretkeysupersecretkeysupe"; |
Check failure
Code scanning / CodeQL
Hard-coded credentials
expect(encrypt(text, key)).not.toBe(encrypted); | ||
}); | ||
test("the encrypted text should be different with a different key", () => { | ||
expect(encrypt(text, "notthesamekeynotthesamekeynotthe")).not.toBe( |
Check failure
Code scanning / CodeQL
Hard-coded credentials
return hmac.update(input).digest('hex'); | ||
export const hmac = (input: string, secret = ""): string => { | ||
const hmac = crypto.createHmac("sha256", secret); | ||
return hmac.update(input).digest("hex"); |
Check failure
Code scanning / CodeQL
Use of password hash with insufficient computational effort
11809da
to
bcb6a57
Compare
Quality Gate passedIssues Measures |
This PR contains the following updates:
^8.47.0
->^9.0.0
Release Notes
eslint/eslint (eslint)
v9.0.0
Compare Source
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.