Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @supabase/supabase-js from 2.8.0 to 2.42.5 #68

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

devcurt696
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @supabase/supabase-js from 2.8.0 to 2.42.5.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 57 versions ahead of your current version.
  • The recommended version was released a month ago, on 2024-04-18.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ES5EXT-6095076
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @supabase/supabase-js
  • 2.42.5 - 2024-04-18

    2.42.5 (2024-04-18)

    Bug Fixes

  • 2.42.4 - 2024-04-15

    2.42.4 (2024-04-15)

    Bug Fixes

  • 2.42.3 - 2024-04-12

    2.42.3 (2024-04-12)

    Bug Fixes

  • 2.42.2 - 2024-04-12

    2.42.2 (2024-04-12)

    Bug Fixes

    • version bump realtime-js to 2.9.4 (9d033f8)
  • 2.42.1 - 2024-04-11

    2.42.1 (2024-04-11)

    Bug Fixes

    • postgrest-js: typings for rpc with GET (581c60f)
  • 2.42.0 - 2024-04-03

    2.42.0 (2024-04-03)

    Features

    • bump postgrest-js to v1.15.0 (b4cc20d)
  • 2.41.1 - 2024-03-28

    2.41.1 (2024-03-28)

    Bug Fixes

  • 2.41.0 - 2024-03-28

    2.41.0 (2024-03-28)

    Features

    • bump functions-js (get regional types more integrated) (#996) (1d13090)
  • 2.40.0 - 2024-03-25

    2.40.0 (2024-03-25)

    Features

    • typecheck table names in from clause (e327521)
  • 2.39.8 - 2024-03-12

    2.39.8 (2024-03-12)

    Bug Fixes

  • 2.39.7 - 2024-02-19
  • 2.39.6 - 2024-02-14
  • 2.39.5 - 2024-02-14
  • 2.39.4 - 2024-02-13
  • 2.39.3 - 2024-01-11
  • 2.39.2 - 2024-01-02
  • 2.39.1 - 2023-12-18
  • 2.39.0 - 2023-11-28
  • 2.38.5 - 2023-11-20
  • 2.38.4 - 2023-10-26
  • 2.38.3 - 2023-10-24
  • 2.38.2 - 2023-10-19
  • 2.38.1 - 2023-10-13
  • 2.38.0 - 2023-10-04
  • 2.37.0 - 2023-09-29
  • 2.36.0 - 2023-09-20
  • 2.35.0 - 2023-09-20
  • 2.34.0 - 2023-09-19
  • 2.33.2 - 2023-09-11
  • 2.33.1 - 2023-08-22
  • 2.33.0 - 2023-08-22
  • 2.32.0 - 2023-08-07
  • 2.31.0 - 2023-07-26
  • 2.30.0 - 2023-07-26
  • 2.29.0 - 2023-07-24
  • 2.28.0 - 2023-07-24
  • 2.27.0 - 2023-07-23
  • 2.26.0 - 2023-06-20
  • 2.25.0 - 2023-06-12
  • 2.24.0 - 2023-05-30
  • 2.23.0 - 2023-05-26
  • 2.22.0 - 2023-05-15
  • 2.21.0 - 2023-04-19
  • 2.20.0 - 2023-04-12
  • 2.19.0 - 2023-04-11
  • 2.18.0 - 2023-04-11
  • 2.17.0 - 2023-04-10
  • 2.16.0 - 2023-04-10
  • 2.15.0 - 2023-04-07
  • 2.14.0 - 2023-04-03
  • 2.13.1 - 2023-03-31
  • 2.13.0 - 2023-03-30
  • 2.12.1 - 2023-03-23
  • 2.12.0 - 2023-03-20
  • 2.11.0 - 2023-03-16
  • 2.10.0 - 2023-03-02
  • 2.9.0 - 2023-03-01
  • 2.8.0 - 2023-02-15
from @supabase/supabase-js GitHub release notes
Commit messages
Package name: @supabase/supabase-js
  • 4f2e271 fix: bump auth-js to v2.63.1 (#1020)
  • f22a410 Merge pull request #1017 from supabase/bump-functions-js-230
  • ec840c6 fix: bump functions-js
  • 8740926 fix(postgrest-js): bump to 1.15.2 (#1013)
  • 9d033f8 fix: version bump realtime-js to 2.9.4
  • 581c60f fix(postgrest-js): typings for rpc with GET
  • b4cc20d feat: bump postgrest-js to v1.15.0
  • 6cfed0c fix: bump auth to v2.63.0 (#998)
  • 1d13090 feat: bump functions-js (get regional types more integrated) (#996)
  • fc95abb refactor: only remove the third overload
  • e327521 feat: typecheck table names in from clause
  • 393423a fix: ts-error-fetchprotocol (#986)
  • 4eb677a fix: revert to using class methods
  • a77be48 test: Port postgrest-js tests to verify types guarantees
  • 76c93a3 fix: revert from/schema/rpc changes
  • b9cb9e1 fix: Use explicit return type for from/schema/rpc
  • a5a70db fix: Use class methods instead of bound arrow functions for rest calls (#973)
  • 4362b3f Merge pull request #957 from supabase/feat/serve-coverage
  • 7c55d6b add serve:coverage script
  • 7cea02e Merge pull request #956 from supabase/deno-readme-install
  • f68b028 docs: Add Deno how-to to README.md
  • 2b8c05f Merge pull request #954 from supabase/mansueli-patch-1
  • f7cd6b4 Update README.md
  • 93b5d3b Merge pull request #955 from supabase/j0/update_versions

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants