Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade knex from 0.13.0 to 0.16.4 #96

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • anno-store-sql/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
low severity 471/1000
Why? Recently disclosed, Has a fix available, CVSS 3.7
Prototype Pollution
SNYK-JS-MINIMIST-2429795
No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: knex The new version differs by 250 commits.
  • eb136f1 Merge branch 'master' of https://github.com/tgriesser/knex
  • 2072163 Update version in changelog (#3138)
  • f28ae7a Merge branch 'master' of https://github.com/tgriesser/knex
  • f757e36 Bump version to 0.16.4 (#3137)
  • 18532b2 Bump version to 0.16.4
  • 286d84b Prepare for 0.16.4-next3 release (#3136)
  • 1948c3d Add boolean as a column name in join (#3121)
  • fe6083e Support nullable timestamps on MySQL (#3100)
  • b15ee3d make unionAll()'s call signature match union() (#3055)
  • e7ed005 Fix queryContext not being passed to raw queries (#3111)
  • 11fdc0c Add missing clearOrder & clearCounters types (#3109)
  • 7ecbcd5 Update changelog and version number (#3108)
  • 5fea86e Update dependencies (#3107)
  • 19926d8 [#3033] fix: sqlite3 drop/renameColumn() breaks with postProcessResponse (#3040)
  • 24fcf27 Fix transaction support for migrations (#3084)
  • de1c934 Include 'string' as accepted Knex constructor type definition (#3105)
  • 0aacab5 Fix for #2998 - Migrator & TypeScript (#3041)
  • fcd21d9 Add command for executing tests on SQLite (#3101)
  • 1da56a3 Update mssql dev dep to v5 stable (#3096)
  • b9a648c Format code (#3088)
  • 0db7859 add test that clearing offset (#2954)
  • f3f0750 Make TS stubs modern (#3080)
  • 68723e0 Update changelog (#3086)
  • 1b39d67 Tests for drop-and-recreate with async/await (#3083)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
馃 View latest project report

馃洜 Adjust project settings

馃摎 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

馃 Prototype Pollution

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant