Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: , uuid, , , grpc, pino #1525

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

EitanGayor
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

@google-cloud/debug-agent
from 4.0.1 to 4.2.2 | 7 versions ahead of your current version | 5 years ago
on 2020-01-23
uuid
from 3.2.1 to 3.4.0 | 4 versions ahead of your current version | 5 years ago
on 2020-01-16
@google-cloud/trace-agent
from 4.0.1 to 4.2.5 | 8 versions ahead of your current version | 5 years ago
on 2020-01-06
@grpc/proto-loader
from 0.1.0 to 0.7.13 | 56 versions ahead of your current version | 4 months ago
on 2024-05-01
grpc
from 1.22.2 to 1.24.11 | 20 versions ahead of your current version | 3 years ago
on 2021-07-23
pino
from 5.6.2 to 5.17.0 | 38 versions ahead of your current version | 5 years ago
on 2020-02-28

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Prototype Pollution
SNYK-JS-GRPC-598671
696 Proof of Concept
medium severity Information Exposure
SNYK-JS-NODEFETCH-2342118
696 No Known Exploit
medium severity Denial of Service
SNYK-JS-NODEFETCH-674311
696 No Known Exploit
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
696 Proof of Concept
Release notes
Package name: @google-cloud/debug-agent from @google-cloud/debug-agent GitHub release notes
Package name: uuid
  • 3.4.0 - 2020-01-16
  • 3.3.3 - 2019-08-19
  • 3.3.2 - 2018-06-28
  • 3.3.0 - 2018-06-26
  • 3.2.1 - 2018-01-16
from uuid GitHub release notes
Package name: @google-cloud/trace-agent
  • 4.2.5 - 2020-01-06

    Bug Fixes

  • 4.2.4 - 2019-12-06

    Bug Fixes

    • deps: TypeScript 3.7.0 causes breaking change in typings (#1163) (6448c94)
    • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.19 (#1158) (76b2162)
    • deps: update dependency got to v10 (#1162) (432404d)
    • docs: add jsdoc-region-tag plugin (#1151) (ee19cb9)
  • 4.2.3 - 2019-11-11

    Bug Fixes

    chore(deps): update dependency source-map-support to v0.5.16 (#1148) (3947e5b)

  • 4.2.2 - 2019-10-14

    Bug Fixes

    • fix tracing not working in mongoose 3.3+ (#1134) (fe7e925)
    • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.18 (#1140) (8d39dd2)
  • 4.2.1 - 2019-10-03

    Bug Fixes

    • deps: update dependency gcp-metadata to v3 (#1115) (94c6dae)
    • unpin @ types/node and account for new http.request signatures (#1120) (bd9863b)
  • 4.2.0 - 2019-09-10

    Bug Fixes

    • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.17 (#1112) (5636738)
    • deps: update dependency require-in-the-middle to v5 (#1099) (1d49cb6)
    • deps: use the latest extend (#1096) (abc4b4e)
    • docs: remove reference doc anchor (#1109) (801e495)

    Features

  • 4.1.1 - 2019-08-05

    Bug Fixes

    • deps: update dependency @ opencensus/propagation-stackdriver to v0.0.16 (#1079) (e48dc54)
    • docs: standardize README and add repo metadata (#1095) (c24faa3)
    • force http and https clients to be patched (#1084) (3ac0b90)
  • 4.1.0 - 2019-07-18

    In this release, a log that is emitted by the Trace Agent when it's not the first required module has been downgraded from error-level to warn-level, and a new boolean config option disableUntracedModulesWarning disables this message entirely.

    Commits

    f688e33 feat: add config.disableUntracedModulesWarn (#1070)
    7cf423c test: upgrade grpc test fixture to 1.22.2 (#1071)
    8bdd946 fix: warn if tracing might not work instead of err (#1068)
    e1d0ed9 test: fix type issue in mongoose test (#1067)
    8bbd9b5 build: use synth templates and kokoro config (#1062)
    3cfa7a0 test: add smoke test for app sample (#1061)
    f3e81d3 test: don't timeout no-target http test if error not emitted (#1060)
    d40fee2 build: mark some new tests as integration tests (#1059)
    8a0ee15 build: fix npm run get-plugin-types on windows (#1057)

  • 4.0.1 - 2019-06-26

    This release fixes a bug introduced in v4.0.0 where authentication credentials from the user configuration object wouldn't be read (#1048).

    Commits

    e3f763c refactor: use the shared prettier config (#1055)
    0d954a1 chore: add github issue templates (#1054)
    8930df3 fix: copy credentials in internal config (#1052)

from @google-cloud/trace-agent GitHub release notes
Package name: @grpc/proto-loader
  • 0.7.13 - 2024-05-01
  • 0.7.12 - 2024-03-28
  • 0.7.11 - 2024-03-26
  • 0.7.10 - 2023-09-18
  • 0.7.9 - 2023-08-23
  • 0.7.9-pre.1 - 2023-07-28
  • 0.7.8 - 2023-07-11
  • 0.7.7 - 2023-05-03
  • 0.7.6 - 2023-03-22
  • 0.7.5 - 2023-02-13
  • 0.7.4 - 2022-12-07
  • 0.7.3 - 2022-09-21
  • 0.7.2 - 2022-08-17
  • 0.7.1 - 2022-08-17
  • 0.7.0 - 2022-07-14
  • 0.6.13 - 2022-06-06
  • 0.6.12 - 2022-05-05
  • 0.6.11 - 2022-05-03
  • 0.6.10 - 2022-05-02
  • 0.6.9 - 2022-01-05
  • 0.6.8 - 2022-01-04
  • 0.6.7 - 2021-11-16
  • 0.6.6 - 2021-10-18
  • 0.6.5 - 2021-09-13
  • 0.6.4 - 2021-06-29
  • 0.6.3 - 2021-06-24
  • 0.6.2 - 2021-05-11
  • 0.6.1 - 2021-04-14
  • 0.6.0 - 2021-04-06
  • 0.6.0-pre9 - 2020-07-10
  • 0.6.0-pre8 - 2020-07-10
  • 0.6.0-pre7 - 2020-07-10
  • 0.6.0-pre6 - 2020-07-06
  • 0.6.0-pre5 - 2020-06-25
  • 0.6.0-pre4 - 2020-06-24
  • 0.6.0-pre3 - 2020-06-18
  • 0.6.0-pre2 - 2020-06-12
  • 0.6.0-pre18 - 2021-03-31
  • 0.6.0-pre17 - 2020-10-22
  • 0.6.0-pre16 - 2020-10-21
  • 0.6.0-pre15 - 2020-10-21
  • 0.6.0-pre14 - 2020-08-10
  • 0.6.0-pre13 - 2020-08-10
  • 0.6.0-pre12 - 2020-08-03
  • 0.6.0-pre11 - 2020-07-20
  • 0.6.0-pre10 - 2020-07-13
  • 0.6.0-pre1 - 2020-06-12
  • 0.5.6 - 2021-01-20
  • 0.5.5 - 2020-07-10
  • 0.5.4 - 2020-04-01
  • 0.5.3 - 2019-11-04
  • 0.5.2 - 2019-09-03
  • 0.5.1 - 2019-05-17
  • 0.5.0 - 2019-04-10
  • 0.4.0 - 2019-01-17
  • 0.3.0 - 2018-07-11
  • 0.1.0 - 2018-04-30
from @grpc/proto-loader GitHub release notes
Package name: grpc
  • 1.24.11 - 2021-07-23
  • 1.24.10 - 2021-05-17
  • 1.24.9 - 2021-05-04
  • 1.24.8 - 2021-05-03
  • 1.24.7 - 2021-04-22
  • 1.24.6 - 2021-03-10
  • 1.24.5 - 2021-02-09
  • 1.24.4 - 2020-11-10
  • 1.24.3 - 2020-06-04
  • 1.24.2 - 2019-11-01
  • 1.24.1 - 2019-10-22
  • 1.24.0 - 2019-09-26
  • 1.24.0-pre1 - 2019-09-19
  • 1.23.4 - 2019-10-03
  • 1.23.3 - 2019-08-23
  • 1.23.2 - 2019-08-21
  • 1.23.1 - 2019-08-19
  • 1.23.0 - 2019-08-19
  • 1.23.0-pre1 - 2019-08-07
  • 1.22.3 - 2019-08-19
  • 1.22.2 - 2019-07-10
from grpc GitHub release notes
Package name: pino
  • 5.17.0 - 2020-02-28
    • Fix two broken links in the documentation (#769)
    • api.md - fix wrong letter case (#770)
    • Fixed stream metadata loss during prettification (#780)
    • Deprecate the changeLevelName option and alias it to levelKey (#772)
    • Bind pino instance to prettifier (#721)
  • 5.16.0 - 2020-01-11
    • add nestedKey option #759
  • 5.15.0 - 2019-12-13

    📚 PR:

    • test(mixin): improve object test to ensure proper object assign order (#745)
    • CI : Move from sleep to watch exists (#748)
    • feat(bindings): allow setting of bindings (#754)
  • 5.14.0 - 2019-11-21

    📚 PR:

    • catch potential write errors on fatal flush sync (#740)
    • feat(mixin): add mixin config option (#741)
  • 5.13.6 - 2019-11-08

    📚 PR:

    • Bumped dependencies
    • fix(redaction): fix corner cases with paths (#732)
    • Add MySQL/MariaDB transport (#708)
  • 5.13.5 - 2019-10-14
    • always sync flush on fatal log – #730
    • fastify integration clarification - #729
  • 5.13.4 - 2019-09-27
    • bump fast redact #714
  • 5.13.3 - 2019-09-13

    📚 PR:

    • docs(transports): add CloudWatch (#696)
    • docs(api): remove Lambda note in pino-destination (#697)
    • fix(serializers): properly transfer Symbol based serializers (#707)
    • docs(api): fix binding example (#700)
  • 5.13.2 - 2019-08-07
  • 5.13.1 - 2019-07-23
    • #684
    • flatstr 0.7.5
  • 5.13.0 - 2019-07-17
  • 5.12.6 - 2019-05-25
  • 5.12.5 - 2019-05-16
  • 5.12.4 - 2019-05-14
  • 5.12.3 - 2019-04-24
  • 5.12.2 - 2019-04-05
  • 5.12.1 - 2019-04-04
  • 5.12.0 - 2019-03-27
  • 5.11.3 - 2019-03-22
  • 5.11.2 - 2019-03-20
  • 5.11.1 - 2019-01-25
  • 5.11.0 - 2019-01-24
  • 5.10.10 - 2019-01-23
  • 5.10.9 - 2019-01-23
  • 5.10.8 - 2019-01-18
  • 5.10.7 - 2019-01-16
  • 5.10.6 - 2019-01-02
  • 5.10.5 - 2018-12-23
  • 5.10.4 - 2018-12-21
  • 5.10.3 - 2018-12-21
  • 5.10.2 - 2018-12-19
  • 5.10.1 - 2018-12-12
  • 5.9.0 - 2018-11-22
  • 5.8.1 - 2018-11-06
  • 5.8.0 - 2018-10-16
  • 5.7.0 - 2018-10-05
  • 5.6.4 - 2018-10-05
  • 5.6.3 - 2018-10-03
  • 5.6.2 - 2018-09-24
from pino GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade:
  - @google-cloud/debug-agent from 4.0.1 to 4.2.2.
    See this package in npm: https://www.npmjs.com/package/@google-cloud/debug-agent
  - uuid from 3.2.1 to 3.4.0.
    See this package in npm: https://www.npmjs.com/package/uuid
  - @google-cloud/trace-agent from 4.0.1 to 4.2.5.
    See this package in npm: https://www.npmjs.com/package/@google-cloud/trace-agent
  - @grpc/proto-loader from 0.1.0 to 0.7.13.
    See this package in npm: https://www.npmjs.com/package/@grpc/proto-loader
  - grpc from 1.22.2 to 1.24.11.
    See this package in npm: https://www.npmjs.com/package/grpc
  - pino from 5.6.2 to 5.17.0.
    See this package in npm: https://www.npmjs.com/package/pino

See this project in Snyk:
https://app.snyk.io/org/eitan/project/0e648885-8648-4be1-a9dc-81d883c9d91d?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants