Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: bootstrap, jquery, reload, sass #87

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: bootstrap, jquery, reload, sass #87

wants to merge 1 commit into from

Conversation

ryanwittmers
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

bootstrap
from 4.6.1 to 4.6.2 | 1 version ahead of your current version | 2 years ago
on 2022-07-19
jquery
from 3.6.0 to 3.7.1 | 6 versions ahead of your current version | a year ago
on 2023-08-28
reload
from 3.2.0 to 3.3.0 | 3 versions ahead of your current version | a month ago
on 2024-08-14
sass
from 1.51.0 to 1.77.8 | 73 versions ahead of your current version | 2 months ago
on 2024-07-11

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574		 696 Proof of Concept
high severity Denial of Service (DoS)
SNYK-JS-WS-7266574		 696 Proof of Concept
Release notes
Package name: bootstrap from bootstrap GitHub release notes
Package name: jquery from jquery GitHub release notes
Package name: reload
  • 3.3.0 - 2024-08-14

    Reload command line quality of life enhancements

    • Reload command line now supports serving .html files when only / is present in the browser. See: #326
    • Reload command line now uses supervisor instead of nodemon for server side file watching - See: #367
    • Reload command line now watches sub-directories - See: #367
    • Reload command line now supports ignoring directories and files. See: #370
    • Reload command line now shows help if invalid flag is provided. See: #369
    • Refactored how file serving works in reload-server to make it more performant and easier to read. See: #326
    • Removed codecov dependency for coverage reporting in favor of native GitHub Action. See: #366
  • 3.2.2 - 2024-08-12

    A bunch of dependency updates and some project maintenance

    • Fixed tests and updated CI (drop 14.x and 16.x | added 20.x and 22.x) - See: #356
    • Updated actions/setup-node action to v4 - See: #350
    • Updated actions/checkout action to v4 - See: #347
    • Updated ws from ~8.11.0 to ~8.18.0 - See: #354 and #360
    • Updated sinon from 15.0.1 to 18.0.0 - See: #343 and #364
    • Updated standard from 17.0.0 to 17.1.0 - See: #345
    • Updated mocha from 10.2.0 to 10.7.3 - See: #359
    • Updated codecov from 3.8.2 to 3.8.3 - See: #358
    • Updated open from 8.4.0 to 8.4.2 - See: #358
    • Updated minimist from 1.2.7 to 1.2.8 - See: #341
    • Updated commander from ~9.4.0 to ~12.1.0 - See: #351
    • Updated cli-color from 2.0.3 to 2.0.4 - See: #357
    • Updated express from 4.18.2 to 4.19.2 - See: #352
    • Updated nyc from 15.1.0 to 17.0.0 - See: #362
  • 3.2.1 - 2023-01-02

    Happy New Year!

    • Drop 12.x and add 18.x on CI - See: #328

    • Update CI actions/checkout to v3 - See: #318

    • Update CI actions/setup-node to v3 - See: #319

    • Dependency Updates

      • Update ws from ~7.4.0 to ~8.11.0 - See: #307
      • Update express from 4.17.1 to 4.18.2 - See: #315
      • Update finalhandler from ~1.1.1 to ~1.2.0 - See: #316
      • Update serve-static from ~1.14.0 to ~1.15.0 - See: #317
      • Update commander from ~7.2.0 to ~9.4.0 - See: #332
      • Update mocha from 9.0.0 to 10.2.0 - See: #333
      • Update sinon from 11.1.1 to 15.0.1 - See: #334
      • Update standard from 16.0.3 to 17.0.0 - See: #335
      • Remove url-parse dependency in favor of built in function - See: #325
  • 3.2.0 - 2021-06-10
from reload GitHub release notes
Package name: sass
  • 1.77.8 - 2024-07-11

    To install Sass 1.77.8, download one of the packages below and add it to your PATH, or see the Sass website for full installation instructions.

    Changes

    • No user-visible changes.

    See the full changelog for changes in earlier releases.

  • 1.77.7 - 2024-07-09

    See sass/sass#3885

  • 1.77.6 - 2024-06-17
  • 1.77.5 - 2024-06-11
  • 1.77.4 - 2024-05-30
  • 1.77.3 - 2024-05-29
  • 1.77.2 - 2024-05-16
  • 1.77.1 - 2024-05-10
  • 1.77.0 - 2024-05-07
  • 1.76.0 - 2024-04-30
  • 1.75.0 - 2024-04-11
  • 1.74.1 - 2024-04-04
  • 1.72.0 - 2024-03-13
  • 1.71.1 - 2024-02-21
  • 1.71.0 - 2024-02-16
  • 1.70.0 - 2024-01-18
  • 1.69.7 - 2024-01-02
  • 1.69.6 - 2023-12-28
  • 1.69.5 - 2023-10-26
  • 1.69.4 - 2023-10-17
  • 1.69.3 - 2023-10-12
  • 1.69.2 - 2023-10-10
  • 1.69.1 - 2023-10-09
  • 1.69.0 - 2023-10-05
  • 1.68.0 - 2023-09-21
  • 1.67.0 - 2023-09-14
  • 1.66.1 - 2023-08-18
  • 1.66.0 - 2023-08-17
  • 1.65.1 - 2023-08-09
  • 1.65.0 - 2023-08-09
  • 1.64.2 - 2023-07-31
  • 1.64.1 - 2023-07-22
  • 1.64.0 - 2023-07-20
  • 1.63.6 - 2023-06-21
  • 1.63.5 - 2023-06-21
  • 1.63.4 - 2023-06-14
  • 1.63.3 - 2023-06-09
  • 1.63.2 - 2023-06-08
  • 1.63.1 - 2023-06-08
  • 1.63.0 - 2023-06-07
  • 1.62.1 - 2023-04-25
  • 1.62.0 - 2023-04-11
  • 1.61.0 - 2023-04-06
  • 1.60.0 - 2023-03-23
  • 1.59.3 - 2023-03-14
  • 1.59.2 - 2023-03-11
  • 1.59.1 - 2023-03-10
  • 1.59.0 - 2023-03-10
  • 1.58.3 - 2023-02-18
  • 1.58.2 - 2023-02-17
  • 1.58.1 - 2023-02-14
  • 1.58.0 - 2023-02-01
  • 1.57.1 - 2022-12-19
  • 1.57.0 - 2022-12-17
  • 1.56.2 - 2022-12-08
  • 1.56.1 - 2022-11-09
  • 1.56.0 - 2022-11-04
  • 1.55.0 - 2022-09-21
  • 1.54.9 - 2022-09-07
  • 1.54.8 - 2022-08-31
  • 1.54.7 - 2022-08-31
  • 1.54.6 - 2022-08-29
  • 1.54.5 - 2022-08-19
  • 1.54.4 - 2022-08-10
  • 1.54.3 - 2022-08-04
  • 1.54.2 - 2022-08-03
  • 1.54.1 - 2022-08-02
  • 1.54.0 - 2022-07-22
  • 1.53.0 - 2022-06-22
  • 1.52.3 - 2022-06-08
  • 1.52.2 - 2022-06-03
  • 1.52.1 - 2022-05-20
  • 1.52.0 - 2022-05-20
  • 1.51.0 - 2022-04-26
from sass GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
7b6eca2 
Snyk has created this PR to upgrade:
  - bootstrap from 4.6.1 to 4.6.2.
    See this package in npm: https://www.npmjs.com/package/bootstrap
  - jquery from 3.6.0 to 3.7.1.
    See this package in npm: https://www.npmjs.com/package/jquery
  - reload from 3.2.0 to 3.3.0.
    See this package in npm: https://www.npmjs.com/package/reload
  - sass from 1.51.0 to 1.77.8.
    See this package in npm: https://www.npmjs.com/package/sass

See this project in Snyk:
https://app.snyk.io/org/rwittmers19/project/cff0bb3d-0663-4d95-9ba6-d87d292e24ff?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ryanwittmers @snyk-bot