[Snyk] Upgrade @cyclonedx/cyclonedx-npm from 1.13.0 to 1.16.1 #337
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @cyclonedx/cyclonedx-npm from 1.13.0 to 1.16.1. See this package in npm: https://www.npmjs.com/package/@cyclonedx/cyclonedx-npm See this project in Snyk: https://app.snyk.io/org/nodeshift-agg/project/53f94480-e7ae-41d2-985c-270fae345664?utm_source=github&utm_medium=referral&page=upgrade-pr
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #337 +/- ##
=======================================
Coverage 89.54% 89.54%
=======================================
Files 10 10
Lines 306 306
=======================================
Hits 274 274
Misses 32 32 ☔ View full report in Codecov by Sentry. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @cyclonedx/cyclonedx-npm from 1.13.0 to 1.16.1.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: @cyclonedx/cyclonedx-npm
-
1.16.1 - 2024-01-11
- Fixed
- Writing large results to buffered streams no longer drops data, but retries until success (via #1145)
- Docs
- Showcase programmatic CLI usage (#1142 via #1145)
- chore(deps-dev): bump the eslint group with 2 updates by @ dependabot in #1139
- fix: large results on small streams by @ jkowalleck in #1145
-
1.16.0 - 2023-12-11
- If BOM result validation was explicitly requested and skipped, then a warning is shown (#1137 via #1138)
- Log messages that explain program failures were set to "error" level (via #1138)
- Escalate various log messages by @ jkowalleck in #1138
-
1.15.0 - 2023-12-10
- Log output is less verbose, can be re-enabled via CLI switch
- Hardened JSON imports (via #1132, #1135)
- CLI switch
- More logs on info-level (via #1131)
- More logs on debug-level (via #1131)
- Use TypeScript
- chore(deps-dev): bump the eslint group with 1 update by @ dependabot in #1128
- ci: test more node versions by @ jkowalleck in #1130
- feat: hardened JSON imports by @ jkowalleck in #1132
- feat: more logs & configurable log level by @ jkowalleck in #1131
- chore(deps-dev): bump the typescript group with 1 update by @ dependabot in #1133
- hardened JSON imports by @ jkowalleck in #1135
- refactor & bump
-
1.14.3 - 2023-12-01
- Added direct dependency
- Fixed typos (via #1123)
- Applied latest code standards (via #1124)
- Use TypeScript
- fix: excplicitely require direct dependency
- docs: fix typos by @ jkowalleck in #1123
- chore(deps-dev): bump the eslint group with 2 updates by @ dependabot in #1124
- chore(deps-dev): bump the typescript group with 1 update by @ dependabot in #1125
-
1.14.2 - 2023-11-06
- SBOM results might have the
- Components' distribution integrity hash of "sha256" is properly detected and populated in the SBOM result ([#699] via #1121)
- Components' distribution integrity hash of "sha384" is properly detected and populated in the SBOM result ([#699] via #1121)
- Raised dependency
- chore(deps-dev): bump the eslint group with 2 updates by @ dependabot in #1110
- chore(deps-dev): bump the eslint group with 2 updates by @ dependabot in #1112
- docs: publish test coverage by @ jkowalleck in #1113
- chore(deps-dev): bump the eslint group with 1 update by @ dependabot in #1114
- chore(deps): bump actions/setup-node from 3 to 4 by @ dependabot in #1115
- chore(deps-dev): bump the eslint group with 1 update by @ dependabot in #1119
- fix: move distribution hashes where they belong by @ jkowalleck in #1120
- fix: detect integrity hashes sha256 sha384 by @ jkowalleck in #1121
-
1.14.1 - 2023-09-18
-
1.14.0 - 2023-09-03
- SBOM result might have additional items in
-
1.13.3 - 2023-09-01
-
1.13.2 - 2023-08-28
-
1.13.1 - 2023-08-18
-
1.13.0 - 2023-07-07
from @cyclonedx/cyclonedx-npm GitHub release notesWhat's Changed
Full Changelog: v1.16.0...v1.16.1
Change
What's Changed
Full Changelog: v1.15.0...v1.16.0
Changed
--verbose(#158 via #1131)Warnings and errors are still displayed as before!
This is considered a non-breaking change, since only informational logs and debug information is affected.
Added
-v, --verboseto increase output verbosity (#158 via #1131)May be used multiple times, like
-vvv.Build
v5.3.3now, wasv5.3.2(via #1133)What's Changed
eslint-config-standard-with-typescript@41.0.0by @ jkowalleck in #1136Full Changelog: v1.14.3...v1.15.0
Fixed
packageurl-jsas such (via #1122)Docs
Style
Build
v5.3.2now, wasv5.2.2(via #1125)What's Changed
packageurl-jsby @ jkowalleck in #1122Full Changelog: v1.14.2...v1.14.3
Fixed
externalReferences[].hashespopulated (#1118 via #1120)The hashes might have wrongly appeared as
components[].hashesbefore.Misc
@ cyclonedx/cyclonedx-library@^6.1.0, was@^3||^4||^5||^6(via #1120)What's Changed
Full Changelog: v1.14.1...v1.14.2
Read more
Added
metadata.toolspopulated (#1100 via #1101)Full Changelog: v1.13.3...v1.14.0
Read more
Read more
Read more
Commit messages
Package name: @cyclonedx/cyclonedx-npm
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs