Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , , , , , , , , fast-xml-parser, open #275

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

NOUIY
Copy link
Owner

@NOUIY NOUIY commented Sep 15, 2024

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@azure/core-rest-pipeline
from 1.11.0 to 1.16.3 | 135 versions ahead of your current version | a month ago
on 2024-08-02
@azure/core-client
from 1.7.3 to 1.9.2 | 36 versions ahead of your current version | 5 months ago
on 2024-04-11
@azure/arm-resources
from 5.0.1 to 5.2.0 | 31 versions ahead of your current version | 2 years ago
on 2023-03-13
@microsoft/vscode-azureresources-api
from 2.1.0 to 2.3.2 | 5 versions ahead of your current version | a month ago
on 2024-08-19
@microsoft/vscode-azext-utils
from 2.3.1 to 2.5.6 | 8 versions ahead of your current version | a month ago
on 2024-08-19
@microsoft/vscode-azext-azureutils
from 3.0.0 to 3.1.0 | 2 versions ahead of your current version | a month ago
on 2024-08-19
@microsoft/vscode-azext-azureappservice
from 3.1.0 to 3.3.1 | 6 versions ahead of your current version | 2 months ago
on 2024-07-26
@microsoft/vscode-azext-azureappsettings
from 0.2.0 to 0.2.1 | 1 version ahead of your current version | 6 months ago
on 2024-03-13
fast-xml-parser
from 4.2.5 to 4.4.1 | 11 versions ahead of your current version | 2 months ago
on 2024-07-28
open
from 8.4.0 to 8.4.2 | 2 versions ahead of your current version | 2 years ago
on 2023-02-20

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-FASTXMLPARSER-7573289
631 No Known Exploit
Release notes
Package name: @azure/arm-resources
  • 5.2.0 - 2023-03-13
  • 5.2.0-alpha.20230314.1 - 2023-03-14
  • 5.1.1-alpha.20230303.1 - 2023-03-03
  • 5.1.1-alpha.20230228.1 - 2023-02-28
  • 5.1.1-alpha.20230224.1 - 2023-02-24
  • 5.1.1-alpha.20230221.1 - 2023-02-21
  • 5.1.1-alpha.20230213.1 - 2023-02-13
  • 5.1.1-alpha.20230207.1 - 2023-02-07
  • 5.1.1-alpha.20230202.1 - 2023-02-02
  • 5.1.1-alpha.20230127.1 - 2023-01-27
  • 5.1.1-alpha.20230126.1 - 2023-01-26
  • 5.1.1-alpha.20230124.1 - 2023-01-24
  • 5.1.1-alpha.20230104.1 - 2023-01-04
  • 5.1.1-alpha.20221215.1 - 2022-12-15
  • 5.1.1-alpha.20221214.1 - 2022-12-14
  • 5.1.1-alpha.20221129.1 - 2022-11-29
  • 5.1.1-alpha.20221115.1 - 2022-11-15
  • 5.1.0 - 2022-11-14
  • 5.1.0-alpha.20221110.1 - 2022-11-10
  • 5.0.2-alpha.20221102.1 - 2022-11-02
  • 5.0.2-alpha.20221026.1 - 2022-10-26
  • 5.0.2-alpha.20221021.1 - 2022-10-21
  • 5.0.2-alpha.20221017.1 - 2022-10-17
  • 5.0.2-alpha.20221004.1 - 2022-10-04
  • 5.0.2-alpha.20221003.1 - 2022-10-03
  • 5.0.2-alpha.20220927.1 - 2022-09-27
  • 5.0.2-alpha.20220923.1 - 2022-09-23
  • 5.0.2-alpha.20220922.1 - 2022-09-22
  • 5.0.2-alpha.20220920.1 - 2022-09-20
  • 5.0.2-alpha.20220908.1 - 2022-09-08
  • 5.0.2-alpha.20220421.1 - 2022-04-21
  • 5.0.1 - 2022-04-20
from @azure/arm-resources GitHub release notes
Package name: @microsoft/vscode-azureresources-api
  • 2.3.2 - 2024-08-19
  • 2.3.1 - 2024-08-06
  • 2.3.0 - 2024-08-06
  • 2.2.1 - 2024-04-25
  • 2.2.0 - 2024-01-30
  • 2.1.0 - 2023-06-14
from @microsoft/vscode-azureresources-api GitHub release notes
Package name: @microsoft/vscode-azext-utils
  • 2.5.6 - 2024-08-19

    Added

    • [1768] Ensure JWT redaction for error messages
  • 2.5.5 - 2024-08-14

    Added

    • Add stashReadOnlyContentSync
  • 2.5.4 - 2024-08-07
  • 2.5.3 - 2024-08-07

    Added

    • Bump vscode-azureresources-api dependency
  • 2.5.2 - 2024-07-31

    Engineering

    • [1758] Bump @ microsoft/vscode-telemetry to latest version (0.9.6)
  • 2.5.1 - 2024-06-05
  • 2.5.0 - 2024-04-22

    Added

    • getSessionWithScopes to get a session that has the proper scoping instead of always the default management plane
  • 2.4.0 - 2024-03-08
  • 2.3.1 - 2024-02-09
from @microsoft/vscode-azext-utils GitHub release notes
Package name: @microsoft/vscode-azext-azureappservice
  • 3.3.1 - 2024-07-26
  • 3.3.0 - 2024-07-02
  • 3.2.1 - 2024-03-28
  • 3.2.0 - 2024-03-27
  • 3.1.2 - 2024-03-12
  • 3.1.1 - 2024-02-29

    Changes

    • [1781] Add masking to VerifyProviderStep
    • [1776] Add new error telemetry properties
    • [1760] Make static and export generalizedLocationName
    • [1763] Improve and dedupe randomUtils
  • 3.1.0 - 2024-02-13

    Added

    • [1757] Add wizard steps to list/create UserAssignedIdentities and execute role definitions
from @microsoft/vscode-azext-azureappservice GitHub release notes
Package name: @microsoft/vscode-azext-azureappsettings
  • 0.2.1 - 2024-03-13
  • 0.2.0 - 2023-06-05
from @microsoft/vscode-azext-azureappsettings GitHub release notes
Package name: fast-xml-parser
  • 4.4.1 - 2024-07-28

    fix oneListGroup for attribute and string array~

  • 4.4.0 - 2024-05-18

    fix: validator for closing tag, parser for stop-node

  • 4.3.6 - 2024-03-16

    support HTML numeric entities by parser

  • 4.3.5 - 2024-02-24

    Parser v5 experimental

  • 4.3.4 - 2024-01-30

    Don't escape entities in CDATA sections

  • 4.3.3 - 2024-01-10

    remove unnecessary regex

  • 4.3.2 - 2023-10-02

    fix hasOwnProperty for null input

  • 4.3.1 - 2023-09-24

    revert back generic typings

  • 4.3.0 - 2023-09-20

    Fix typing, prototype issue, stopnode parsing

  • 4.2.7 - 2023-07-30

    fix builder for null, undefined or only text value

  • 4.2.6 - 2023-07-17
  • 4.2.5 - 2023-06-22
from fast-xml-parser GitHub release notes
Package name: open from open GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade:
  - @azure/core-rest-pipeline from 1.11.0 to 1.16.3.
    See this package in npm: https://www.npmjs.com/package/@azure/core-rest-pipeline
  - @azure/core-client from 1.7.3 to 1.9.2.
    See this package in npm: https://www.npmjs.com/package/@azure/core-client
  - @azure/arm-resources from 5.0.1 to 5.2.0.
    See this package in npm: https://www.npmjs.com/package/@azure/arm-resources
  - @microsoft/vscode-azureresources-api from 2.1.0 to 2.3.2.
    See this package in npm: https://www.npmjs.com/package/@microsoft/vscode-azureresources-api
  - @microsoft/vscode-azext-utils from 2.3.1 to 2.5.6.
    See this package in npm: https://www.npmjs.com/package/@microsoft/vscode-azext-utils
  - @microsoft/vscode-azext-azureutils from 3.0.0 to 3.1.0.
    See this package in npm: https://www.npmjs.com/package/@microsoft/vscode-azext-azureutils
  - @microsoft/vscode-azext-azureappservice from 3.1.0 to 3.3.1.
    See this package in npm: https://www.npmjs.com/package/@microsoft/vscode-azext-azureappservice
  - @microsoft/vscode-azext-azureappsettings from 0.2.0 to 0.2.1.
    See this package in npm: https://www.npmjs.com/package/@microsoft/vscode-azext-azureappsettings
  - fast-xml-parser from 4.2.5 to 4.4.1.
    See this package in npm: https://www.npmjs.com/package/fast-xml-parser
  - open from 8.4.0 to 8.4.2.
    See this package in npm: https://www.npmjs.com/package/open

See this project in Snyk:
https://app.snyk.io/org/nexuscompute/project/efa2c244-1de1-4a67-b091-88abc96db54f?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants