Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #16

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: @nestjs/common, @nestjs/core, @nestjs/platform-express #16

wants to merge 1 commit into from

Conversation

AbdulHakkam
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
@nestjs/common
from 10.0.1 to 10.3.6		 26 versions ahead of your current version 21 days ago
on 2024-03-27
@nestjs/core
from 10.0.1 to 10.3.6		 26 versions ahead of your current version 21 days ago
on 2024-03-27
@nestjs/platform-express
from 10.0.1 to 10.3.6		 26 versions ahead of your current version 21 days ago
on 2024-03-27

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Open Redirect
SNYK-JS-EXPRESS-6474509		 519/1000
Why? Has a fix available, CVSS 6.1		 No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @nestjs/common from @nestjs/common GitHub release notes
Package name: @nestjs/core from @nestjs/core GitHub release notes
Package name: @nestjs/platform-express from @nestjs/platform-express GitHub release notes
Commit messages
Package name: @nestjs/common
  • 1f2fae7 chore(@ nestjs) publish v10.3.6 release
  • 50385de Merge pull request #13362 from nestjs/dependabot/npm_and_yarn/grpc/proto-loader-0.7.11
  • 872ab40 Merge pull request #13367 from nestjs/revert-13328-fix/redundant-emit-code
  • f416f5a Revert "fix(microservices): fix redundant code to emit error"
  • f29f932 Merge pull request #13366 from breeeew/fix-request-scope-leak
  • 274011d chore(deps-dev): bump @ grpc/proto-loader from 0.7.10 to 0.7.11
  • ccbbe06 Merge pull request #13358 from nestjs/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-7.4.0
  • 1757840 Merge pull request #13361 from nestjs/dependabot/npm_and_yarn/mocha-10.4.0
  • e133595 Merge pull request #13363 from nestjs/dependabot/npm_and_yarn/grpc/grpc-js-1.10.4
  • 743c4b6 Merge pull request #13364 from nestjs/dependabot/npm_and_yarn/mysql2-3.9.3
  • 6a7f74f fix(core): break reference chain to instance object
  • 4510f6d chore(deps-dev): bump mysql2 from 3.9.2 to 3.9.3
  • b3f0b65 chore(deps-dev): bump @ grpc/grpc-js from 1.10.3 to 1.10.4
  • 0782837 chore(deps-dev): bump mocha from 10.3.0 to 10.4.0
  • 334b27b chore(deps-dev): bump @ typescript-eslint/eslint-plugin
  • ddc1265 Merge pull request #13355 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.2
  • 560e350 Merge pull request #13359 from nestjs/dependabot/npm_and_yarn/typescript-eslint/parser-7.4.0
  • b3a7510 Merge pull request #13357 from nestjs/dependabot/npm_and_yarn/express-4.19.2
  • 70dea80 chore(deps-dev): bump @ typescript-eslint/parser from 7.3.1 to 7.4.0
  • 8b1a1dd chore(deps): bump express from 4.19.1 to 4.19.2
  • 2957483 chore(deps-dev): bump @ apollo/server from 4.10.1 to 4.10.2
  • 1a605dd Merge branch 'master' of https://github.com/nestjs/nest
  • 8bf0015 chore: update readme
  • 09857ae Merge pull request #13343 from nestjs/dependabot/npm_and_yarn/core-js-3.36.1

Compare

Package name: @nestjs/core
  • 1f2fae7 chore(@ nestjs) publish v10.3.6 release
  • 50385de Merge pull request #13362 from nestjs/dependabot/npm_and_yarn/grpc/proto-loader-0.7.11
  • 872ab40 Merge pull request #13367 from nestjs/revert-13328-fix/redundant-emit-code
  • f416f5a Revert "fix(microservices): fix redundant code to emit error"
  • f29f932 Merge pull request #13366 from breeeew/fix-request-scope-leak
  • 274011d chore(deps-dev): bump @ grpc/proto-loader from 0.7.10 to 0.7.11
  • ccbbe06 Merge pull request #13358 from nestjs/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-7.4.0
  • 1757840 Merge pull request #13361 from nestjs/dependabot/npm_and_yarn/mocha-10.4.0
  • e133595 Merge pull request #13363 from nestjs/dependabot/npm_and_yarn/grpc/grpc-js-1.10.4
  • 743c4b6 Merge pull request #13364 from nestjs/dependabot/npm_and_yarn/mysql2-3.9.3
  • 6a7f74f fix(core): break reference chain to instance object
  • 4510f6d chore(deps-dev): bump mysql2 from 3.9.2 to 3.9.3
  • b3f0b65 chore(deps-dev): bump @ grpc/grpc-js from 1.10.3 to 1.10.4
  • 0782837 chore(deps-dev): bump mocha from 10.3.0 to 10.4.0
  • 334b27b chore(deps-dev): bump @ typescript-eslint/eslint-plugin
  • ddc1265 Merge pull request #13355 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.2
  • 560e350 Merge pull request #13359 from nestjs/dependabot/npm_and_yarn/typescript-eslint/parser-7.4.0
  • b3a7510 Merge pull request #13357 from nestjs/dependabot/npm_and_yarn/express-4.19.2
  • 70dea80 chore(deps-dev): bump @ typescript-eslint/parser from 7.3.1 to 7.4.0
  • 8b1a1dd chore(deps): bump express from 4.19.1 to 4.19.2
  • 2957483 chore(deps-dev): bump @ apollo/server from 4.10.1 to 4.10.2
  • 1a605dd Merge branch 'master' of https://github.com/nestjs/nest
  • 8bf0015 chore: update readme
  • 09857ae Merge pull request #13343 from nestjs/dependabot/npm_and_yarn/core-js-3.36.1

Compare

Package name: @nestjs/platform-express
  • 1f2fae7 chore(@ nestjs) publish v10.3.6 release
  • 50385de Merge pull request #13362 from nestjs/dependabot/npm_and_yarn/grpc/proto-loader-0.7.11
  • 872ab40 Merge pull request #13367 from nestjs/revert-13328-fix/redundant-emit-code
  • f416f5a Revert "fix(microservices): fix redundant code to emit error"
  • f29f932 Merge pull request #13366 from breeeew/fix-request-scope-leak
  • 274011d chore(deps-dev): bump @ grpc/proto-loader from 0.7.10 to 0.7.11
  • ccbbe06 Merge pull request #13358 from nestjs/dependabot/npm_and_yarn/typescript-eslint/eslint-plugin-7.4.0
  • 1757840 Merge pull request #13361 from nestjs/dependabot/npm_and_yarn/mocha-10.4.0
  • e133595 Merge pull request #13363 from nestjs/dependabot/npm_and_yarn/grpc/grpc-js-1.10.4
  • 743c4b6 Merge pull request #13364 from nestjs/dependabot/npm_and_yarn/mysql2-3.9.3
  • 6a7f74f fix(core): break reference chain to instance object
  • 4510f6d chore(deps-dev): bump mysql2 from 3.9.2 to 3.9.3
  • b3f0b65 chore(deps-dev): bump @ grpc/grpc-js from 1.10.3 to 1.10.4
  • 0782837 chore(deps-dev): bump mocha from 10.3.0 to 10.4.0
  • 334b27b chore(deps-dev): bump @ typescript-eslint/eslint-plugin
  • ddc1265 Merge pull request #13355 from nestjs/dependabot/npm_and_yarn/apollo/server-4.10.2
  • 560e350 Merge pull request #13359 from nestjs/dependabot/npm_and_yarn/typescript-eslint/parser-7.4.0
  • b3a7510 Merge pull request #13357 from nestjs/dependabot/npm_and_yarn/express-4.19.2
  • 70dea80 chore(deps-dev): bump @ typescript-eslint/parser from 7.3.1 to 7.4.0
  • 8b1a1dd chore(deps): bump express from 4.19.1 to 4.19.2
  • 2957483 chore(deps-dev): bump @ apollo/server from 4.10.1 to 4.10.2
  • 1a605dd Merge branch 'master' of https://github.com/nestjs/nest
  • 8bf0015 chore: update readme
  • 09857ae Merge pull request #13343 from nestjs/dependabot/npm_and_yarn/core-js-3.36.1

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@snyk-bot
fix: upgrade multiple dependencies with Snyk
48340d1 
Snyk has created this PR to upgrade:
  - @nestjs/common from 10.0.1 to 10.3.6.
    See this package in npm: https://www.npmjs.com/package/@nestjs/common
  - @nestjs/core from 10.0.1 to 10.3.6.
    See this package in npm: https://www.npmjs.com/package/@nestjs/core
  - @nestjs/platform-express from 10.0.1 to 10.3.6.
    See this package in npm: https://www.npmjs.com/package/@nestjs/platform-express

See this project in Snyk:
https://app.snyk.io/org/abdulhakkam/project/b3537fa0-73ab-4e9c-8da4-4668433e36fd?utm_source=github&utm_medium=referral&page=upgrade-pr
@AbdulHakkam AbdulHakkam self-assigned this Apr 17, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@AbdulHakkam AbdulHakkam

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@AbdulHakkam @snyk-bot