Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #29

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

tomer-mobb
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • frontend/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5
Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
Yes No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @angular-builders/custom-webpack The new version differs by 56 commits.
  • 4dd0f2d ci(release): publish
  • dae4a57 ci(release): publish
  • b0b6a80 fix(ci): graduate flow
  • 020d3c4 fix(ci): update node version in graduate workflow
  • 3184a34 chore(deps): update commitlint monorepo to v17.6.5 (#1383)
  • d9df15b chore(deps): update dependency cpy-cli to v4 (#1175)
  • d3a537c chore(deps): update dependency @ types/node to v18 (#1298)
  • 5717596 chore(deps): update dependency @ types/jasmine to v4.3.2 (#1331)
  • 8d74d14 chore(deps): update dependency @ types/node to v16.18.34 (#1358)
  • aa04af3 chore(deps): update dependency @ types/lodash to v4.14.195 (#1382)
  • 8cfc11e chore(deps): update dependency cypress to v12.13.0 (#1376)
  • 047cfa6 chore(deps): update dependency tslib to v2.5.2 (#1370)
  • 726c605 chore(deps): update dependency html-webpack-plugin to v5.5.1 (#1359)
  • 358409d chore(deps): update angular-cli monorepo to v16.0.3 (#1381)
  • ca2b535 chore(deps): update angular monorepo to v16.0.3 (#1375)
  • 4fe16d0 chore(deps): update dependency rimraf to v5 (#1380)
  • 13465fc chore(deps): update dependency puppeteer to v20 (#1378)
  • c05d5f4 chore(deps): update dependency jest-junit to v16 (#1377)
  • faeb075 chore(deps): update dependency @ lerna-lite/cli to v2 (#1372)
  • efa4467 ci(release): publish
  • 8f728fa chore(deps): update dependency jasmine-core to v5 (#1374)
  • 97d816a ci(release): publish
  • aae89a1 chore(jest): update default mocks (#1371)
  • 97e6f46 ci(release): publish

See the full diff

Package name: @angular-devkit/build-angular The new version differs by 250 commits.
  • 29f2c17 release: cut the v16.1.0 release
  • f0a4ce6 build: bump versions for minor release
  • 72629bd refactor: move esbuild index generator, code bundle option and execution results
  • 15e0a88 refactor(@ angular-devkit/build-angular): update code base structure to facilitate future builders
  • abc49bd build: update angular
  • 8424ab0 fix(@ angular-devkit/build-angular): support proxy configuration array-form in esbuild builder
  • a0e3ae9 docs: removed the duplicate words
  • 32e2b22 refactor: removed unused import statements
  • 0e25fec refactor: replaced the String wrapper object with primitive type string
  • 78084aa build: update all non-major dependencies
  • 1aa9fb4 docs: updated the i tag to the em tag in the html and docs
  • 0fa1167 build: update all non-major dependencies
  • cd7c825 fix(@ angular-devkit/build-angular): correctly handle sass imports
  • ef384f3 build: update angular
  • 8772b62 release: cut the v16.1.0-rc.0 release
  • bc48a0d build: update all non-major dependencies
  • 15c14f7 docs: release notes for the v16.0.5 release
  • bc5b7d5 refactor(@ angular-devkit/build-angular): improve initial file analysis for esbuild builder
  • 7155cbe fix(@ angular-devkit/build-angular): ignore folders starting with a dot in browser-esbuild watcher
  • 772fe84 fix(@ angular-devkit/build-angular): ignore .git folder in browser-esbuild watcher
  • e2954d2 build: update angular
  • dfc052a refactor(@ schematics/angular): deprecate private standalone utilities
  • b14b959 feat(@ schematics/angular): add bootstrap-agnostic utilities for writing ng-add schematics
  • b36effd refactor(@ schematics/angular): add utility to find top-level identifiers

See the full diff

Package name: @angular/cli The new version differs by 250 commits.
  • f9527ce release: cut the v17.0.0 release
  • 180dfa3 build: update Angular packages to version 17 stable
  • 8bae6ad release: cut the v17.0.0-rc.5 release
  • 8a9def5 test: add timeout to vite re-use cache
  • 9d4d11c fix(@ angular-devkit/build-angular): allow SSR compilation to work with TS allowJs option
  • ec5e302 refactor(@ schematics/angular): add fallback fonts
  • 3c6d2d8 refactor(@ schematics/angular): remove unused CSS
  • abb1c6f refactor(@ schematics/angular): use control flow to reduce code
  • 81e4917 fix(@ angular/pwa): replace Angular logos
  • ecdcff2 fix(@ schematics/angular): add missing icons in ng-new template
  • 569b714 build: lock file maintenance
  • 303c98c fix(@ angular-devkit/build-angular): normalize exclude path
  • 455aed8 Revert "test: temporary disable Jest E2E tests"
  • 278bfa0 test(@ angular-devkit/build-angular): add test to validate vite cache re-usage
  • a8f041f release: cut the v17.0.0-rc.4 release
  • ae45c4a feat(@ schematics/angular): update `ng new` generated application
  • e10f49e fix(@ angular-devkit/build-angular): convert AOT compiler exceptions into diagnostics
  • 1b38430 fix(@ angular-devkit/build-angular): disable parallel TS/NG compilation inside WebContainers
  • f87f22d fix(@ angular-devkit/build-angular): keep dependencies pre-bundling validate between builds
  • d46fb12 fix(@ angular-devkit/build-angular): disable dependency optimization for SSR
  • 4733cd3 refactor(@ angular-devkit/build-angular): clean externalMetadata arrays on every rebuild
  • a02db0a refactor(@ angular-devkit/build-angular): allow JS transformer result reuse for application dev-server builder
  • 323b005 build: update angular
  • 59c22aa perf(@ angular-devkit/build-angular): start SSR dependencies optimization before the first request

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants