[Snyk] Upgrade: lodash, bluebird #7
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- lodash from 4.17.5 to 4.17.21.
See this package in npm: https://www.npmjs.com/package/lodash
- bluebird from 3.5.1 to 3.7.2.
See this package in npm: https://www.npmjs.com/package/bluebird
See this project in Snyk:
https://app.snyk.io/org/bgreengo/project/9458fa9f-528e-4b5a-8328-592953c1313a?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
lodash
from 4.17.5 to 4.17.21 | 13 versions ahead of your current version | 4 years ago
on 2021-02-20
bluebird
from 3.5.1 to 3.7.2 | 8 versions ahead of your current version | 5 years ago
on 2019-11-28
Issues fixed by the recommended upgrade:
SNYK-JS-LODASH-1040724
SNYK-JS-LODASH-450202
SNYK-JS-LODASH-567746
SNYK-JS-LODASH-608086
SNYK-JS-LODASH-6139239
SNYK-JS-LODASH-73638
SNYK-JS-LODASH-1018905
SNYK-JS-LODASH-73639
Release notes
Package name: lodash
-
4.17.21 - 2021-02-20
-
4.17.20 - 2020-08-13
-
4.17.19 - 2020-07-08
-
4.17.18 - 2020-07-08
-
4.17.17 - 2020-07-08
-
4.17.16 - 2020-07-08
-
4.17.15 - 2019-07-19
-
4.17.14 - 2019-07-10
-
4.17.13 - 2019-07-09
-
4.17.12 - 2019-07-09
-
4.17.11 - 2018-09-12
-
4.17.10 - 2018-04-24
-
4.17.9 - 2018-04-24
-
4.17.5 - 2018-02-04
from lodash GitHub release notesBump to v4.17.21
Bump to v4.17.20.
Bump to v4.17.19
Rebuild lodash and docs
4.17.15
Package name: bluebird
-
3.7.2 - 2019-11-28
- Fixes firefox settimeout not initialized error (#1623)
-
3.7.1 - 2019-10-15
- feature
- Fix (#1614)
- Fix (#1613)
- Fix (#1616)
-
3.7.0 - 2019-10-01
- Add
-
3.6.0 - 2019-10-01
- Add support for AsyncResource (#1403)
- Fix
- Fix
- Fix
- Fix
- Fix cancel skipping upward propagation (#1459)
- Fix loadTimes deprecation (#1505)
- Fix
- Make PromiseRejectionEvent confrom to spec (#1509)
- Fix false unhandled rejection events (#1468)
-
3.5.5 - 2019-05-24
- Added Symbol.toStringTag support to Promise (#1421)
- Fix error in IE9 (#1591, #1592)
- Fix error with undefined stack trace (#1537)
- Fix #catch throwing an error later rather than immediately when passed non-function handler (#1517)
-
3.5.4 - 2019-04-03
- Proper version check supporting VSCode(#1576)
-
3.5.3 - 2018-11-06
- Update acorn dependency
-
3.5.2 - 2018-09-03
- Fix
- Fix promise chain retaining memory until the entire chain is resolved (#1544, #1529)
-
3.5.1 - 2017-10-04
- Fix false positive unhandled rejection when using async await (#1404)
- Fix false positive when reporting error as non-error (#990)
from bluebird GitHub release notesBugfixes:
Features:
Bugfixes:
Features:
Promise.allSettled` method (#1606)Features:
Bugfixes:
.reducegenerating unhandled rejection events (#1501)Promise.reduce` generating unhandled rejction events (#1502).mapand.filtergenerating unhandled rejection events (#1487)Promise.map` unhandled rejection events (#1489)Promise.each` maximum stack exceeded error (#1326)Features:
Bugfixes:
Bugfixes:
Bugfixes:
PromiseRejectionEventto contain.reasonand.promiseproperties. (#1509, #1464)id: changelog
title: Changelog
Bugfixes:
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: