[Snyk] Upgrade: async, bcrypt, eslint, express-session, moment, mongoose, passport, winston #349
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- async from 3.2.2 to 3.2.6.
See this package in npm: https://www.npmjs.com/package/async
- bcrypt from 5.0.1 to 5.1.1.
See this package in npm: https://www.npmjs.com/package/bcrypt
- eslint from 9.0.0 to 9.9.1.
See this package in npm: https://www.npmjs.com/package/eslint
- express-session from 1.17.1 to 1.18.0.
See this package in npm: https://www.npmjs.com/package/express-session
- moment from 2.29.1 to 2.30.1.
See this package in npm: https://www.npmjs.com/package/moment
- mongoose from 5.13.20 to 5.13.22.
See this package in npm: https://www.npmjs.com/package/mongoose
- passport from 0.3.2 to 0.7.0.
See this package in npm: https://www.npmjs.com/package/passport
- winston from 3.3.3 to 3.14.2.
See this package in npm: https://www.npmjs.com/package/winston
See this project in Snyk:
https://app.snyk.io/org/vinitkumar/project/a8047beb-d71d-44cb-8248-57c85798043c?utm_source=github&utm_medium=referral&page=upgrade-pr
vinitkumar
deleted the
snyk-upgrade-8189f2b5ea13bfca2ac4b8a9b374ff91
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
async
from 3.2.2 to 3.2.6 | 4 versions ahead of your current version | a month ago
on 2024-08-19
bcrypt
from 5.0.1 to 5.1.1 | 2 versions ahead of your current version | a year ago
on 2023-08-16
eslint
from 9.0.0 to 9.9.1 | 11 versions ahead of your current version | a month ago
on 2024-08-23
express-session
from 1.17.1 to 1.18.0 | 3 versions ahead of your current version | 8 months ago
on 2024-01-28
moment
from 2.29.1 to 2.30.1 | 5 versions ahead of your current version | 9 months ago
on 2023-12-27
mongoose
from 5.13.20 to 5.13.22 | 2 versions ahead of your current version | 9 months ago
on 2024-01-02
passport
from 0.3.2 to 0.7.0 | 8 versions ahead of your current version | 10 months ago
on 2023-11-27
winston
from 3.3.3 to 3.14.2 | 20 versions ahead of your current version | a month ago
on 2024-08-14
Issues fixed by the recommended upgrade:
SNYK-JS-MOMENT-2440688
SNYK-JS-MOMENT-2944238
SNYK-JS-PASSPORT-2840631
Release notes
Package name: async
-
3.2.6 - 2024-08-19
-
3.2.5 - 2023-11-03
-
3.2.4 - 2022-06-07
-
3.2.3 - 2022-01-10
-
3.2.2 - 2021-10-28
from async GitHub release notesVersion 3.2.6
Version 3.2.5
Version 3.2.4
Version 3.2.3
Version 3.2.2
Package name: bcrypt
-
5.1.1 - 2023-08-16
- Refactored example with async await by @ lpizzinidev in #894
- Fixed z/OS build issue by @ laijonathan in #968
- Update dependencies by @ recrsn in #993
- @ lpizzinidev made their first contribution in #894
- @ laijonathan made their first contribution in #968
-
5.1.0 - 2022-10-06
- Update node-pre-gyp to 1.0.2 by @ feuxfollets1013 in #865
- Update README for inclusion of musl by @ arbourd in #883
- Version bump, security updates to sub dep npmlog by @ adaniels-parabol in #905
- document ESM usage (#892) by @ mariusa in #899
- fix: update travis CI Docker image repository by @ cokia in #930
- Update node versions in appveyor test matrix by @ p-kuen in #936
- chore(appveyor): not use latest npm by @ cokia in #932
- chore: update Appveyor readme badge by @ cokia in #933
- Use Github actions for CI by @ recrsn in #858
- Update dependencies by @ recrsn in #953
- Migrate tests to use Jest by @ recrsn in #958
- Pin NAPI to v3 by @ recrsn in #959
- @ feuxfollets1013 made their first contribution in #865
- @ arbourd made their first contribution in #883
- @ adaniels-parabol made their first contribution in #905
- @ mariusa made their first contribution in #899
- @ cokia made their first contribution in #930
- @ p-kuen made their first contribution in #936
-
5.0.1 - 2021-02-26
from bcrypt GitHub release notesWhat's Changed
New Contributors
Full Changelog: v5.1.0...v5.1.1
What's Changed
New Contributors
Full Changelog: v5.0.1...v5.1.0
Update
node-pre-gypto 1.0.0Package name: eslint
Bug Fixes
9bde90cfix: add logic to handlefixTypesinlintText()(#18736) (Amaresh S M)Documentation
4840930docs: Update README with version support and clean up content (#18804) (Nicholas C. Zakas)f61f40ddocs: Update globals examples (#18805) (Nicholas C. Zakas)241fceadocs: Use and define languages (#18795) (Nicholas C. Zakas)5dbdd63docs: eslint-plugin-markdown -> @ eslint/markdown (#18797) (Nicholas C. Zakas)c6c8ddddocs: update links to eslint-visitor-keys repo (#18796) (Francesco Trotta)f981d05docs: Update README (GitHub Actions Bot)b516974docs: update links toeslint/jsrepo (#18781) (Francesco Trotta)fb7a3f5docs: update note for package managers (#18779) (Jay)Chores
b0c34d0chore: upgrade to @ eslint/js@9.9.1 (#18809) (Francesco Trotta)cd5a0dachore: package.json update for @ eslint/js release (Jenkins)e112642refactor: Extract parsing logic from Linter (#18790) (Nicholas C. Zakas)0f68a85chore: use eslint-plugin-yml on yaml files only (#18801) (Milos Djermanovic)f8d1b3cchore: update dependencies for browser tests (#18794) (Christian Bromann)aed2624chore: update dependency @ eslint/config-array to ^0.18.0 (#18788) (renovate[bot])5c29128chore: update dependency @ eslint/core to ^0.4.0 (#18789) (renovate[bot])5d66fb2chore: migrate linting workflow to use trunk check meta-linter (#18643) (Chris Clearwater)bf96855chore: add ids to github issue templates (#18775) (Strek)Features
41d0206feat: Add support for TS config files (#18134) (Arya Emami)3a4eaf9feat: add suggestion torequire-awaitto removeasynckeyword (#18716) (Dave)Documentation
9fe068cdocs: how to author plugins with configs that extend other configs (#18753) (Alec Gibson)48117b2docs: add version support page in the side navbar (#18738) (Amaresh S M)fec2951docs: add version support page to the dropdown (#18730) (Amaresh S M)38a0661docs: Fix typo (#18735) (Zaina Al Habash)3c32a9edocs: Update yarn command for creating ESLint config (#18739) (Temitope Ogunleye)f9ac978docs: Update README (GitHub Actions Bot)Chores
461b2c3chore: upgrade to@ eslint/js@9.9.0(#18765) (Francesco Trotta)59dba1bchore: package.json update for @ eslint/js release (Jenkins)fea8563chore: update dependency @ eslint/core to ^0.3.0 (#18724) (renovate[bot])aac191echore: update dependency @ eslint/json to ^0.3.0 (#18760) (renovate[bot])b97fa05chore: update wdio dependencies for more stable tests (#18759) (Christian Bromann)Features
13d0bd3feat: Add and use SourceCode#getLoc/getRange (#18703) (Nicholas C. Zakas)Bug Fixes
ab0ff27fix: Throw error when invalid flags passed (#18705) (Nicholas C. Zakas)70dc803fix:basePathdirectory can never be ignored (#18711) (Milos Djermanovic)Documentation
282df1adocs: Add system theme option (#18617) (Amaresh S M)53b1ff0docs: Debug config docs (#18698) (Nicholas C. Zakas)a7016a5docs: fix search input stylings (#18682) (Amaresh S M)Build Related
4514424build: Enable JSON linting (#18681) (Nicholas C. Zakas)Chores
deee448chore: upgrade to@ eslint/js@9.8.0(#18720) (Francesco Trotta)4aaf2b3chore: package.json update for @ eslint/js release (Jenkins)8e1a627chore: update dependency @ eslint/core to ^0.2.0 (#18700) (renovate[bot])Features
7bd9839feat: add support for es2025 duplicate named capturing groups (#18630) (Yosuke Ota)1381394feat: addregexoption inno-restricted-imports(#18622) (Nitin Kumar)Bug Fixes
14e9f81fix: destructuring in catch clause inno-unused-vars(#18636) (Francesco Trotta)Documentation
9f416dbdocs: Add Powered by Algolia label to the search. (#18633) (Amaresh S M)c8d26cbdocs: Open JS Foundation -> OpenJS Foundation (#18649) (Milos Djermanovic)6e79ac7docs:loadESLintdoes not support optioncwd(#18641) (Francesco Trotta)Chores
793b718chore: upgrade @ eslint/js@9.7.0 (#18680) (Francesco Trotta)7ed6f9achore: package.json update for @ eslint/js release (Jenkins)7bcda76refactor: Add type references (#18652) (Nicholas C. Zakas)51bf57cchore: add tech sponsors through actions (#18624) (Strek)6320732refactor: don't useparentproperty inNodeEventGenerator(#18653) (Milos Djermanovic)9e6d640refactor: move "Parsing error" prefix adding to Linter (#18650) (Milos Djermanovic)Features
e2b16e2feat: Implement feature flags (#18516) (Nicholas C. Zakas)8824aa1feat: addecmaVersion: 2025, parsing duplicate named capturing groups (#18596) (Milos Djermanovic)Bug Fixes
1613e2efix: Allow escaping characters in config patterns on Windows (#18628) (Milos Djermanovic)21d3766fix:no-unused-varsinclude caught errors pattern in report message (#18609) (Kirk Waiblinger)d7a7736fix: improveno-unused-varsmessage on unused caught errors (#18608) (Kirk Waiblinger)f9e95d2fix: correct locations of invalid/* eslint */comments (#18593) (Milos Djermanovic)Documentation
13dbecddocs: Limit search to just docs (#18627) (Nicholas C. Zakas)375227fdocs: Update getting-started.md - add pnpm to init eslint config (#18599) (Kostiantyn Ochenash)44915bbdocs: Update README (GitHub Actions Bot)d50db7bdocs: Update vscode-eslint info (#18595) (Nicholas C. Zakas)Chores
b15ee30chore: upgrade @ eslint/js@9.6.0 (#18632) (Milos Djermanovic)d655503chore: package.json update for @ eslint/js release (Jenkins)7c78ad9refactor: Use language.visitorKeys and check for non-JS SourceCode (#18625) (Nicholas C. Zakas)69ff64erefactor: Return value of applyInlineConfig() (#18623) (Nicholas C. Zakas)d2d06f7refactor: use/separator when adjustingignorePatternson Windows (#18613) (Milos Djermanovic)6421973refactor: fix disable directives for languages with 0-based lines (#18605) (Milos Djermanovic)0a13539refactor: Allow optional methods for languages (#18604) (Nicholas C. Zakas)c7ddee0chore: make internal-rules not being a package (#18601) (Milos Djermanovic)3379164chore: remove.eslintrc.js(#18011) (唯然)d0c3a32chore: update knip (with webdriver-io plugin) (#18594) (Lars Kappert)Features
b2d256cfeat:no-sparse-arraysreport on "comma" instead of the whole array (#18579) (fisker Cheung)Bug Fixes
6880286fix: treat*as a universal pattern (#18586) (Milos Djermanovic)7fbe211fix: message template for all files ignored (#18564) (Milos Djermanovic)469cb36fix: Don't lint the same file multiple times (#18552) (Milos Djermanovic)5cff638fix: improve message for ignored files without a matching config (#18404) (Francesco Trotta)Documentation
455f7fddocs: add section about including.gitignorefiles (#18590) (Milos Djermanovic)721eafedocs: update info about universalfilespatterns (#18587) (Francesco Trotta)8127127docs: Update README (GitHub Actions Bot)55c2a66docs: Update README (GitHub Actions Bot)eb76282docs: Update README (GitHub Actions Bot)ff6e96edocs:baseConfigandoverrideConfigcan be arrays (#18571) (Milos Djermanovic)d2d83e0docs: Add mention of eslint-transforms to v9 migration guide (#18566) (Nicholas C. Zakas)9ce6832docs: add callout box for unintuitive behavior (#18567) (Ben McCann)b8db99cdocs: Add VS Code info to config migration guide (#18555) (Nicholas C. Zakas)518a35cdocs: Mention config migrator (#18561) (Nicholas C. Zakas)eb440fcdocs: specifying files with arbitrary or no extension (