Skip to content

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
No Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: qrcode The new version differs by 21 commits.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

@parse-github-assistant
Copy link

I will reformat the title to use the proper commit message syntax.

@parse-github-assistant parse-github-assistant bot changed the title [Snyk] Security upgrade qrcode from 1.4.4 to 1.5.0 refactor: security upgrade qrcode from 1.4.4 to 1.5.0 Nov 23, 2021
@mtrezza mtrezza changed the title refactor: security upgrade qrcode from 1.4.4 to 1.5.0 fix: security upgrade qrcode from 1.4.4 to 1.5.0 Nov 24, 2021
@parse-github-assistant
Copy link

Thanks for opening this pull request!

  • ❌ Please edit your post and use the provided template when creating a new pull request. This helps everyone to understand your post better and asks for essential information to quicker review the pull request.

@mtrezza mtrezza merged commit 244e1bb into alpha Dec 6, 2021
@mtrezza mtrezza deleted the snyk-fix-0461734fe5f6bbb53a7c65f0d4a82e5c branch December 6, 2021 12:31
parseplatformorg pushed a commit that referenced this pull request Dec 6, 2021
# [4.0.0-alpha.2](4.0.0-alpha.1...4.0.0-alpha.2) (2021-12-06)

### Bug Fixes

* security upgrade qrcode from 1.4.4 to 1.5.0 ([#1930](#1930)) ([244e1bb](244e1bb))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 4.0.0-alpha.2

@parseplatformorg parseplatformorg added the state:released-alpha Released as alpha version label Dec 6, 2021
parseplatformorg pushed a commit that referenced this pull request Jan 1, 2022
# [4.0.0-beta.1](3.3.0-beta.3...4.0.0-beta.1) (2022-01-01)

### Bug Fixes

* bump graphiql from 1.4.6 to 1.4.7 ([#1920](#1920)) ([26c0dfa](26c0dfa))
* context menu in data browser not opening for cell of type number ([#1913](#1913)) ([fb0e3a9](fb0e3a9))
* opening filter menu in data browser leads to blank page ([#1958](#1958)) ([750e8b1](750e8b1))
* saving relation column fails if class has required fields ([#1937](#1937)) ([c67db08](c67db08))
* security upgrade qrcode from 1.4.4 to 1.5.0 ([#1930](#1930)) ([244e1bb](244e1bb))

### Features

* upgrade graphiql from 1.4.7 to 1.5.1 ([#1943](#1943)) ([ebb1f66](ebb1f66))
* upgrade graphql from 15.7.0 to 16.0.0 ([#1926](#1926)) ([7c94e51](7c94e51))
* upgrade parse from 3.3.1 to 3.4.0 ([#1942](#1942)) ([13a250e](13a250e))

### BREAKING CHANGES

* The minimum required Node.js version is 12.22.0. ([7c94e51](7c94e51))
* The required Node version was increased to >=12.20.0. ([ebb1f66](ebb1f66))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 4.0.0-beta.1

@parseplatformorg parseplatformorg added the state:released-beta Released as beta version label Jan 1, 2022
parseplatformorg pushed a commit that referenced this pull request Feb 6, 2022
# [4.0.0](3.3.0...4.0.0) (2022-02-06)

### Bug Fixes

* bump graphiql from 1.4.6 to 1.4.7 ([#1920](#1920)) ([26c0dfa](26c0dfa))
* context menu in data browser not opening for cell of type number ([#1913](#1913)) ([fb0e3a9](fb0e3a9))
* opening filter menu in data browser leads to blank page ([#1958](#1958)) ([750e8b1](750e8b1))
* saving relation column fails if class has required fields ([#1937](#1937)) ([c67db08](c67db08))
* security upgrade qrcode from 1.4.4 to 1.5.0 ([#1930](#1930)) ([244e1bb](244e1bb))
* various UI bugs (e.g. filter data browser, switch app, upload file) ([#2014](#2014)) ([785978e](785978e))

### Features

* upgrade graphiql from 1.4.7 to 1.5.1 ([#1943](#1943)) ([ebb1f66](ebb1f66))
* upgrade graphql from 15.7.0 to 16.0.0 ([#1926](#1926)) ([7c94e51](7c94e51))
* upgrade parse from 3.3.1 to 3.4.0 ([#1942](#1942)) ([13a250e](13a250e))

### BREAKING CHANGES

* The minimum required Node.js version is 12.22.0. ([7c94e51](7c94e51))
* The required Node version was increased to >=12.20.0. ([ebb1f66](ebb1f66))
@parseplatformorg
Copy link
Contributor

🎉 This change has been released in version 4.0.0

@parseplatformorg parseplatformorg added the state:released Released as stable version label Feb 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
state:released Released as stable version state:released-alpha Released as alpha version state:released-beta Released as beta version
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants