Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 2, 2022

WhiteSource Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@babel/core (source) ^7.16.12 -> ^7.17.8 age adoption passing confidence
@microsoft/api-documenter (source) ^7.15.1 -> ^7.17.0 age adoption passing confidence
@microsoft/api-extractor (source) ^7.19.4 -> ^7.20.0 age adoption passing confidence
@types/jest ^27.4.0 -> ^27.4.1 age adoption passing confidence
@types/node ^16.11.22 -> ^16.11.26 age adoption passing confidence
@types/puppeteer ^5.4.4 -> ^5.4.5 age adoption passing confidence
axios (source) ^0.25.0 -> ^0.26.1 age adoption passing confidence
babel-jest ^27.4.6 -> ^27.5.1 age adoption passing confidence
body-parser ^1.19.1 -> ^1.19.2 age adoption passing confidence
cookie ^0.4.1 -> ^0.4.2 age adoption passing confidence
eslint (source) ^8.8.0 -> ^8.12.0 age adoption passing confidence
eslint-config-prettier ^8.3.0 -> ^8.5.0 age adoption passing confidence
express (source) ^4.17.2 -> ^4.17.3 age adoption passing confidence
express-jwt ^6.1.0 -> ^6.1.1 age adoption passing confidence
jest (source) ^27.4.7 -> ^27.5.1 age adoption passing confidence
jiti ^1.12.15 -> ^1.13.0 age adoption passing confidence
playwright (source) ^1.18.1 -> ^1.20.1 age adoption passing confidence
prettier (source) ^2.5.1 -> ^2.6.1 age adoption passing confidence
ts-jest (source) ^27.1.3 -> ^27.1.4 age adoption passing confidence
typescript (source) ^4.5.5 -> ^4.6.3 age adoption passing confidence

Release Notes

axios/axios

v0.26.1

Compare Source

0.26.1 (March 9, 2022)

Fixes and Functionality:

  • Refactored project file structure to avoid circular imports (#​4220)

v0.26.0

Compare Source

Fixes and Functionality:

  • Fixed The timeoutErrorMessage property in config not work with Node.js (#​3581)
  • Added errors to be displayed when the query parsing process itself fails (#​3961)
  • Fix/remove url required (#​4426)
  • Update follow-redirects dependency due to Vurnerbility (#​4462)
  • Bump karma from 6.3.11 to 6.3.14 (#​4461)
  • Bump follow-redirects from 1.14.7 to 1.14.8 (#​4473)
eslint/eslint

v8.12.0

Compare Source

Features

  • 685a67a feat: fix logic for top-level this in no-invalid-this and no-eval (#​15712) (Milos Djermanovic)

Chores

  • 18f5e05 chore: padding-line-between-statements remove useless additionalItems (#​15706) (Martin Sadovy)
Microsoft/playwright

v1.20.1

Compare Source

Highlights

This patch includes the following bug fixes:

https://github.com/microsoft/playwright/issues/12711 - [REGRESSION] Page.screenshot hangs on some siteshttps://github.com/microsoft/playwright/issues/128077 - [BUG] Cookies get assigned before fulfilling a responshttps://github.com/microsoft/playwright/issues/1281414 - [Question] how to use expect.any in playwrighttps://github.com/microsoft/playwright/issues/12821821 - [BUG] Chromium: Cannot click, element intercepts pointer evehttps://github.com/microsoft/playwright/issues/128362836 - [REGRESSION]: Tests not detected as ES module in vhttps://github.com/microsoft/playwright/issues/1286212862 - [Feature] Allow to use toMatchSnapshot for file formats other than txt (e.g.https://github.com/microsoft/playwright/issues/12887/12887 - [BUG] Locator.count() with _vue selector withttps://github.com/microsoft/playwright/issues/12940es/12940 - [BUG] npm audit - High Severity vulnerability in json5 package forcing to install Playwrighhttps://github.com/microsoft/playwright/issues/12974ues/12974 - [BUG] Regression - chromium browser closes during test or debugging session on macos

Browser Versions

  • Chromium 101.0.4921.0
  • Mozilla Firefox 97.0.1
  • WebKit 15.4

This version was also tested against the following stable channels:

  • Google Chrome 99
  • Microsoft Edge 99
prettier/prettier

v2.6.1

Compare Source

diff

Ignore loglevel when printing information (#​12477 by @​fisker)
kulshekhar/ts-jest

v27.1.4

Compare Source

Bug Fixes
Microsoft/TypeScript

v4.6.3

Compare Source

This release includes fixes for

For the complete list of fixed issues, check out the

Downloads are available on:


Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, click this checkbox.

This PR has been generated by WhiteSource Renovate. View repository job log here.

@renovate renovate bot changed the title chore(deps): update devdependency @babel/core to ^7.17.0 chore(deps): update all non-major dependencies Feb 3, 2022
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 56e14a5 to e87bcf0 Compare February 9, 2022 16:52
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 12 times, most recently from 5869b02 to 8f4df34 Compare February 17, 2022 03:24
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from d38fcc5 to c48cd37 Compare February 24, 2022 01:56
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 422ab01 to 806b542 Compare March 2, 2022 22:30
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 02b9cf7 to 1e52fe6 Compare March 12, 2022 01:26
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 6233403 to e084ad0 Compare March 19, 2022 11:35
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 3c264e6 to 5cf523c Compare March 25, 2022 22:41
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5cf523c to ea14fea Compare March 31, 2022 03:17
@bmulholland bmulholland merged commit c9880dc into dev Apr 1, 2022
@renovate renovate bot deleted the renovate/all-minor-patch branch April 1, 2022 08:39
@renovate renovate bot restored the renovate/all-minor-patch branch April 1, 2022 21:44
@GuillermoK1
Copy link

SUBJECT: axios 0.8.1 - 0.27.2
Severity: moderate
Axios Cross-Site Request Forgery Vulnerability

Greetings, I will copy and paste below my terminal's message after installing this package directly from the npm page:

C:['my-path']> npm i @nuxtjs/auth-next

added 41 packages, and audited 1000 packages in 8s

182 packages are looking for funding
run npm fund for details

3 moderate severity vulnerabilities

To address issues that do not require attention, run:
npm audit fix

Some issues need review, and may require choosing
a different dependency.

Run npm audit for details.

npm audit

npm audit report

axios 0.8.1 - 0.27.2
Severity: moderate
Axios Cross-Site Request Forgery Vulnerability - GHSA-wf5p-g6vw-rhxx
fix available via npm audit fix --force
Will install undefined@undefined, which is a breaking change
node_modules/@nuxtjs/auth-next/node_modules/axios
node_modules/@nuxtjs/axios/node_modules/axios
@nuxtjs/auth-next *
Depends on vulnerable versions of @nuxtjs/axios
Depends on vulnerable versions of axios
node_modules/@nuxtjs/auth-next
@nuxtjs/axios *
Depends on vulnerable versions of axios
node_modules/@nuxtjs/axios

3 moderate severity vulnerabilities

@GuillermoK1
Copy link

Sorry. Didn't see this first: #893 (comment)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants