Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @supabase/supabase-js from 2.8.0 to 2.39.7 #61

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

devcurt696
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @supabase/supabase-js from 2.8.0 to 2.39.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 47 versions ahead of your current version.
  • The recommended version was released a month ago, on 2024-02-19.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @supabase/supabase-js
  • 2.39.7 - 2024-02-19

    2.39.7 (2024-02-19)

    Bug Fixes

    • revert to using class methods (4eb677a)
  • 2.39.6 - 2024-02-14

    2.39.6 (2024-02-14)

    Bug Fixes

    • revert from/schema/rpc changes (76c93a3)
  • 2.39.5 - 2024-02-14

    2.39.5 (2024-02-14)

    Bug Fixes

    • Use explicit return type for from/schema/rpc (b9cb9e1)
  • 2.39.4 - 2024-02-13

    2.39.4 (2024-02-13)

    Bug Fixes

    • Use class methods instead of bound arrow functions for rest calls (#973) (a5a70db)
  • 2.39.3 - 2024-01-11

    2.39.3 (2024-01-11)

    Bug Fixes

    • version bump realtime-js to 2.9.1 (82ddf3a)
    • version bump realtime-js to v2.9.2 (#944) (9204dfa)
    • version bump realtime-js to v2.9.3 (f6bf008)
  • 2.39.2 - 2024-01-02

    2.39.2 (2024-01-02)

    Bug Fixes

    • bump postgrest-js (24daf10)
    • stop using unstable type params from postgrest-js (e845632)
  • 2.39.1 - 2023-12-18

    2.39.1 (2023-12-18)

    Bug Fixes

  • 2.39.0 - 2023-11-28

    2.39.0 (2023-11-28)

    Features

  • 2.38.5 - 2023-11-20

    2.38.5 (2023-11-20)

    Bug Fixes

    • bump postgrest-js to 1.8.6 (3bc5723)
  • 2.38.4 - 2023-10-26

    2.38.4 (2023-10-26)

    Bug Fixes

    • Bump up realtime-js version to 2.8.4 (77567b4)
  • 2.38.3 - 2023-10-24
  • 2.38.2 - 2023-10-19
  • 2.38.1 - 2023-10-13
  • 2.38.0 - 2023-10-04
  • 2.37.0 - 2023-09-29
  • 2.36.0 - 2023-09-20
  • 2.35.0 - 2023-09-20
  • 2.34.0 - 2023-09-19
  • 2.33.2 - 2023-09-11
  • 2.33.1 - 2023-08-22
  • 2.33.0 - 2023-08-22
  • 2.32.0 - 2023-08-07
  • 2.31.0 - 2023-07-26
  • 2.30.0 - 2023-07-26
  • 2.29.0 - 2023-07-24
  • 2.28.0 - 2023-07-24
  • 2.27.0 - 2023-07-23
  • 2.26.0 - 2023-06-20
  • 2.25.0 - 2023-06-12
  • 2.24.0 - 2023-05-30
  • 2.23.0 - 2023-05-26
  • 2.22.0 - 2023-05-15
  • 2.21.0 - 2023-04-19
  • 2.20.0 - 2023-04-12
  • 2.19.0 - 2023-04-11
  • 2.18.0 - 2023-04-11
  • 2.17.0 - 2023-04-10
  • 2.16.0 - 2023-04-10
  • 2.15.0 - 2023-04-07
  • 2.14.0 - 2023-04-03
  • 2.13.1 - 2023-03-31
  • 2.13.0 - 2023-03-30
  • 2.12.1 - 2023-03-23
  • 2.12.0 - 2023-03-20
  • 2.11.0 - 2023-03-16
  • 2.10.0 - 2023-03-02
  • 2.9.0 - 2023-03-01
  • 2.8.0 - 2023-02-15
from @supabase/supabase-js GitHub release notes
Commit messages
Package name: @supabase/supabase-js
  • 4eb677a fix: revert to using class methods
  • a77be48 test: Port postgrest-js tests to verify types guarantees
  • 76c93a3 fix: revert from/schema/rpc changes
  • b9cb9e1 fix: Use explicit return type for from/schema/rpc
  • a5a70db fix: Use class methods instead of bound arrow functions for rest calls (#973)
  • 4362b3f Merge pull request #957 from supabase/feat/serve-coverage
  • 7c55d6b add serve:coverage script
  • 7cea02e Merge pull request #956 from supabase/deno-readme-install
  • f68b028 docs: Add Deno how-to to README.md
  • 2b8c05f Merge pull request #954 from supabase/mansueli-patch-1
  • f7cd6b4 Update README.md
  • 93b5d3b Merge pull request #955 from supabase/j0/update_versions
  • 8d768bc chore: update github actions version
  • 00e53bf Update README.md
  • 7977d76 Merge pull request #953 from shawshankkumar/master
  • b83c646 chore: update node version in ci
  • ef58909 Merge pull request #952 from supabase/chore/clean-up
  • 4086b97 update title and move badges
  • d5e194d deps: Fix @ supabase dependencies to exact versions (#819)
  • d786a15 chore: Minor types/constants refactoring (#796)
  • f6bf008 fix: version bump realtime-js to v2.9.3
  • 9204dfa fix: version bump realtime-js to v2.9.2 (#944)
  • 82ddf3a fix: version bump realtime-js to 2.9.1
  • 24daf10 fix: bump postgrest-js

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants