[Snyk] Upgrade: uuid, , , , , commander, dotenv #542

WontonSam · 2024-09-19T20:07:35Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name	Versions	Released on

uuid
from 8.3.2 to 10.0.0 | 4 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
on 2024-06-09
@commander-js/extra-typings
from 0.1.0 to 12.1.0 | 16 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-19
@tsconfig/node16
from 1.0.4 to 16.1.3 | 4 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 6 months ago
on 2024-03-27
@oclif/core
from 2.16.0 to 4.0.19 | 154 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
on 2024-08-24
@types/uuid
from 8.3.4 to 10.0.0 | 10 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
on 2024-06-20
commander
from 9.5.0 to 12.1.0 | 8 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-18
dotenv
from 10.0.0 to 16.4.5 | 39 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
on 2024-02-20

Release notes

Package name: uuid

10.0.0 - 2024-06-09
chore: typo in CHANGELOG
9.0.1 - 2023-09-12
chore(release): 9.0.1
9.0.0 - 2022-09-05
chore(release): 9.0.0
9.0.0-beta.0 - 2022-08-05
8.3.2 - 2020-12-08
chore(release): 8.3.2

from uuid GitHub release notes

Package name: @commander-js/extra-typings

12.1.0 - 2024-05-19
Changed
- use ESLint for linting (#65)
- format source files with Prettier (#66)
Removed
- removed unimplemented Option.fullDescription from TypeScript definition (#70)
12.0.1 - 2024-03-01
Release
12.0.0 - 2024-02-03
Changed
- update peerDependencies to [email protected], which requires Node.js v18 or higher
12.0.0-1 - 2023-11-13
Fixed
- use prerelease Commander version for peerDependencies
12.0.0-0 - 2023-11-12
Changed
- update peerDependencies to [email protected], which requires Node.js v18 or higher
11.1.0 - 2023-10-15
Added
- Option properties: envVar, presetArg (#48)
- Argument properties: argChoices, defaultValue, defaultValueDescription (#48)
- Command properties: options, registeredArguments (#50)
Changed
- commands property of Command is now readonly (#48)
- update peerDependencies to [email protected] (#48)
Fixed
- remove unused Option.optionFlags property (#48)
- add that Command.version() can also be used as getter (#48)
- add null return type to Commands.executableDir(), for when not configured (#48)
- preserve option typings when adding arguments to Command (#49)
11.0.0 - 2023-06-16
Changed
- update peerDependencies to [email protected], which requires Node.js v16 or higher
10.0.3 - 2023-03-03
Added
- narrow types based on .choices() (#29)
Fixed
- improve Option type inferences for certain combinations of configuration (#31)
- mark .action() callback as allowing promises (#33)
10.0.2 - 2023-01-28
Fixed
- createOption passes through description into object constructor. (#25)
10.0.1 - 2023-01-17
10.0.0 - 2023-01-14
9.5.0 - 2023-01-12
9.4.1 - 2022-11-01
9.4.0 - 2022-10-28
0.3.0 - 2022-09-07
0.2.0 - 2022-08-23
0.1.0 - 2022-08-16

from @commander-js/extra-typings GitHub release notes

Package name: @tsconfig/node16

16.1.3 - 2024-03-27
16.1.2 - 2024-03-24
16.1.1 - 2023-08-22
16.1.0 - 2023-06-28
1.0.4 - 2023-05-12

from @tsconfig/node16 GitHub release notes

Package name: @oclif/core

4.0.19 - 2024-08-24
Bug Fixes
- deps: bump micromatch from 4.0.7 to 4.0.8 (eb2aa14)
4.0.18 - 2024-08-21
Bug Fixes
- ts-path: use file url to import tsx at runtime (#1171) (be3f6e9)
4.0.17 - 2024-07-28
Bug Fixes
- deps: bump ansis from 3.3.1 to 3.3.2 (081e8bc)
4.0.16 - 2024-07-27
Bug Fixes
- deps: bump requirejs from 2.3.6 to 2.3.7 (216d8e7)
4.0.15 - 2024-07-26
Bug Fixes
- ignore escaped delimiters (#1148) (a41962a)
4.0.14 - 2024-07-23
Bug Fixes
- husky 9.1.1 fix (#1147) (cd3720f)
4.0.13 - 2024-07-21
Bug Fixes
- deps: bump ansis from 3.2.1 to 3.3.1 (a0eba0a)
4.0.12 - 2024-07-13
4.0.11 - 2024-07-10
4.0.10 - 2024-07-10
4.0.9 - 2024-07-09
4.0.8 - 2024-07-01
4.0.7 - 2024-06-25
4.0.6 - 2024-06-12
4.0.5 - 2024-06-12
4.0.4 - 2024-06-11
4.0.3 - 2024-06-06
4.0.2 - 2024-06-05
4.0.1 - 2024-06-04
4.0.0 - 2024-06-04
4.0.0-beta.17 - 2024-06-04
4.0.0-beta.16 - 2024-06-04
4.0.0-beta.15 - 2024-06-03
4.0.0-beta.14 - 2024-06-03
4.0.0-beta.13 - 2024-05-24
4.0.0-beta.12 - 2024-05-24
4.0.0-beta.11 - 2024-05-23
4.0.0-beta.10 - 2024-05-23
4.0.0-beta.9 - 2024-05-23
4.0.0-beta.8 - 2024-05-20
4.0.0-beta.7 - 2024-05-15
4.0.0-beta.6 - 2024-05-07
4.0.0-beta.5 - 2024-05-06
4.0.0-beta.4 - 2024-04-25
4.0.0-beta.3 - 2024-04-24
4.0.0-beta.2 - 2024-04-22
4.0.0-beta.1 - 2024-04-18
3.27.0 - 2024-06-04
3.26.9 - 2024-06-03
3.26.8 - 2024-06-03
3.26.7 - 2024-06-03
3.26.6 - 2024-05-06
3.26.5 - 2024-04-30
3.26.4 - 2024-04-18
3.26.3 - 2024-04-13
3.26.2 - 2024-04-08
3.26.1 - 2024-04-08
3.26.0 - 2024-03-22
3.25.3 - 2024-03-19
3.25.2 - 2024-03-15
3.25.1 - 2024-03-14
3.25.0 - 2024-03-12
3.24.0 - 2024-03-11
3.23.1 - 2024-03-11
3.23.0 - 2024-03-05
3.22.0 - 2024-03-05
3.21.2 - 2024-03-04
3.21.1 - 2024-03-04
3.21.0 - 2024-03-04
3.20.1-dev.1 - 2024-03-01
3.20.1-dev.0 - 2024-02-27
3.20.0 - 2024-02-27
3.19.7 - 2024-02-26
3.19.6 - 2024-02-23
3.19.5 - 2024-02-22
3.19.5-dev.0 - 2024-02-21
3.19.4 - 2024-02-21
3.19.3 - 2024-02-19
3.19.3-dev.0 - 2024-02-16
3.19.2 - 2024-02-14
3.19.2-qa.0 - 2024-02-14
3.19.2-dev.0 - 2024-02-15
3.19.1 - 2024-02-06
3.19.0 - 2024-02-05
3.18.2 - 2024-01-31
3.18.1 - 2024-01-10
3.18.0 - 2024-01-09
3.17.0 - 2024-01-09
3.16.0 - 2024-01-02
3.15.1 - 2023-12-23
3.15.0 - 2023-12-15
3.14.1 - 2023-12-08
3.14.0 - 2023-12-07
3.13.2 - 2023-12-04
3.13.1 - 2023-11-30
3.13.0 - 2023-11-30
3.12.1 - 2023-11-30
3.12.0 - 2023-11-20
3.11.1-dev.1 - 2023-11-16
3.11.1-dev.0 - 2023-11-16
3.11.0 - 2023-11-13
3.10.8 - 2023-11-08
3.10.7 - 2023-11-07
3.10.6 - 2023-11-06
3.10.5 - 2023-11-06
3.10.4 - 2023-11-06
3.10.3 - 2023-11-06
3.10.2 - 2023-11-06
3.10.1 - 2023-11-03
3.10.0 - 2023-11-02
3.9.2 - 2023-10-30
3.9.1 - 2023-10-27
3.9.0 - 2023-10-26
3.8.0 - 2023-10-25
3.7.1 - 2023-10-24
3.7.0 - 2023-10-24
3.6.0 - 2023-10-23
3.5.0 - 2023-10-19
3.4.1-dev.0 - 2023-10-19
3.4.0 - 2023-10-19
3.3.3 - 2023-10-19
3.3.3-dev.0 - 2023-10-18
3.3.2 - 2023-10-17
3.3.1 - 2023-10-16
3.3.0 - 2023-10-16
3.2.1 - 2023-10-13
3.2.0 - 2023-10-13
3.1.0 - 2023-10-13
3.0.9 - 2023-10-12
3.0.8 - 2023-10-12
3.0.7 - 2023-10-12
3.0.6 - 2023-10-11
3.0.5 - 2023-10-11
3.0.5-dev.0 - 2023-10-10
3.0.4 - 2023-10-09
3.0.3 - 2023-10-05
3.0.2 - 2023-10-05
3.0.1 - 2023-10-05
3.0.0 - 2023-10-04
3.0.0-beta.25 - 2023-10-03
3.0.0-beta.24 - 2023-10-03
3.0.0-beta.23 - 2023-10-02
3.0.0-beta.22 - 2023-10-02
3.0.0-beta.21 - 2023-10-02
3.0.0-beta.20 - 2023-10-02
3.0.0-beta.19 - 2023-09-29
3.0.0-beta.18 - 2023-09-28
3.0.0-beta.17 - 2023-09-25
3.0.0-beta.16 - 2023-09-22
3.0.0-beta.15 - 2023-09-22
3.0.0-beta.14 - 2023-09-22
3.0.0-beta.13 - 2023-09-06
3.0.0-beta.12 - 2023-09-01
3.0.0-beta.11 - 2023-09-01
3.0.0-beta.10 - 2023-09-01
3.0.0-beta.9 - 2023-08-31
3.0.0-beta.8 - 2023-08-31
3.0.0-beta.7 - 2023-08-31
3.0.0-beta.6 - 2023-08-31
3.0.0-beta.5 - 2023-08-31
3.0.0-beta.4 - 2023-08-31
3.0.0-beta.3 - 2023-08-31
3.0.0-beta.2 - 2023-08-31
3.0.0-beta.1 - 2023-08-21
2.16.0 - 2024-04-08

from @oclif/core GitHub release notes

Package name: @types/uuid

10.0.0 - 2024-06-20
9.0.8 - 2024-01-25
9.0.7 - 2023-11-07
9.0.6 - 2023-10-18
9.0.5 - 2023-10-06
9.0.4 - 2023-09-14
9.0.3 - 2023-08-30
9.0.2 - 2023-06-08
9.0.1 - 2023-02-22
9.0.0 - 2022-11-29
8.3.4 - 2022-01-06

from @types/uuid GitHub release notes

Package name: commander

12.1.0 - 2024-05-18
Added
- auto-detect special node flags node --eval and node --print when call .parse() with no arguments (#2164)
Changed
- prefix require of Node.js core modules with node: (#2170)
- format source files with Prettier (#2180)
- switch from StandardJS to directly calling ESLint for linting (#2153)
- extend security support for previous major version of Commander (#2150)
Removed
- removed unimplemented Option.fullDescription from TypeScript definition (#2191)
12.0.0 - 2024-02-03
Added
- .addHelpOption() as another way of configuring built-in help option (#2006)
- .helpCommand() for configuring built-in help command (#2087)
Fixed
- Breaking: use non-zero exit code when spawned executable subcommand terminates due to a signal (#2023)
- Breaking: check passThroughOptions constraints when using .addCommand and throw if parent command does not have .enablePositionalOptions() enabled (#1937)
Changed
- Breaking: Commander 12 requires Node.js v18 or higher (#2027)
- Breaking: throw an error if add an option with a flag which is already in use (#2055)
- Breaking: throw an error if add a command with name or alias which is already in use (#2059)
- Breaking: throw error when calling .storeOptionsAsProperties() after setting an option value (#1928)
- replace non-standard JSDoc of @ api private with documented @ private (#1949)
- .addHelpCommand() now takes a Command (passing string or boolean still works as before but deprecated) (#2087)
- refactor internal implementation of built-in help option (#2006)
- refactor internal implementation of built-in help command (#2087)
Deprecated
- .addHelpCommand() passing string or boolean (use .helpCommand() or pass a Command) (#2087)
Removed
- Breaking: removed default export of a global Command instance from CommonJS (use the named program export instead) (#2017)
Migration Tips

global program

If you are using the deprecated default import of the global Command object, you need to switch to using a named import (or create a new Command).
```
// const program = require('commander');
const { program } = require('commander');
```
option and command clashes

A couple of configuration problems now throw an error, which will pick up issues in existing programs:
- adding an option which uses the same flag as a previous option
- adding a command which uses the same name or alias as a previous command
12.0.0-1 - 2024-01-19
Added
- .addHelpOption() as another way of configuring built-in help option (#2006)
- .helpCommand() for configuring built-in help command (#2087)
Changed
- .addHelpCommand() now takes a Command (passing string or boolean still works as before but deprecated) (#2087)
- refactor internal implementation of built-in help option (#2006)
- refactor internal implementation of built-in help command (#2087)
Deprecated
- .addHelpCommand() passing string or boolean (use .helpCommand() or pass a Command) (#2087)
12.0.0-0 - 2023-11-11
Fixed
- Breaking: use non-zero exit code when spawned executable subcommand terminates due to a signal (#2023)
- Breaking: check passThroughOptions constraints when using .addCommand and throw if parent command does not have .enablePositionalOptions() enabled (#1937)
Changed
- Breaking: Commander 12 requires Node.js v18 or higher (#2027)
- Breaking: throw an error if add an option with a flag which is already in use (#2055)
- Breaking: throw an error if add a command with name or alias which is already in use (#2059)
- Breaking: throw error when calling .storeOptionsAsProperties() after setting an option value (#1928)
- replace non-standard JSDoc of @ api private with documented @ private (#1949)
Removed
- Breaking: removed default export of a global Command instance from CommonJS (use the named program export instead) (#2017)
Migration Tips

global program

If you are using the deprecated default import of the global Command object, you need to switch to using a named import (or create a new Command).
```
// const program = require('commander');
const { program } = require('commander');
```
option and command clashes

A couple of configuration problems now throw an error, which will pick up issues in existing programs:
- adding an option which uses the same flag as a previous option
- adding a command which uses the same name or alias as a previous command
11.1.0 - 2023-10-13
Fixed
- TypeScript: update OptionValueSource to allow any string, to match supported use of custom sources (#1983)
- TypeScript: add that Command.version() can also be used as getter (#1982)
- TypeScript: add null return type to Commands.executableDir(), for when not configured (#1965)
- subcommands with an executable handler and only a short help flag are now handled correctly by the parent's help command (#1930)
Added
- registeredArguments property on Command with the array of defined Argument (like Command.options for Option) (#2010)
- TypeScript declarations for Option properties: envVar, presetArg (#2019)
- TypeScript declarations for Argument properties: argChoices, defaultValue, defaultValueDescription (#2019)
- example file which shows how to configure help to display any custom usage in the list of subcommands (#1896)
Changed
- (developer) refactor TypeScript configs for multiple use-cases, and enable checks in JavaScript files in supporting editors (#1969)
Deprecated
- Command._args was private anyway, but now available as registeredArguments (#2010)
11.0.0 - 2023-06-16
Fixed
- help command works when help option is disabled (#1864)
Changed
- leading and trailing spaces are now ignored by the .arguments() method (#1874)
- refine "types" exports for ESM to follow TypeScript guidelines (#1886)
- Breaking: Commander 11 requires Node.js v16 or higher
10.0.1 - 2023-04-15
Added
- improvements to documentation (#1858, #1859, #1860)
Fixed
- remove unused Option.optionFlags property from TypeScript definition (#1844)
Changed
- assume boolean option intended if caller passes string instead of hash to .implies() (#1854)
10.0.0 - 2023-01-14
Added
- wrap command description in help (#1804)
Changed
- Breaking: Commander 10 requires Node.js v14 or higher
9.5.0 - 2023-01-07
Added
- .getOptionValueSourceWithGlobals() (#1832)
- showGlobalOptions for .configureHelp{} and Help (#1828)

from commander GitHub release notes

Package name: dotenv

from dotenv GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - uuid from 8.3.2 to 10.0.0. See this package in npm: https://www.npmjs.com/package/uuid - @commander-js/extra-typings from 0.1.0 to 12.1.0. See this package in npm: https://www.npmjs.com/package/@commander-js/extra-typings - @tsconfig/node16 from 1.0.4 to 16.1.3. See this package in npm: https://www.npmjs.com/package/@tsconfig/node16 - @oclif/core from 2.16.0 to 4.0.19. See this package in npm: https://www.npmjs.com/package/@oclif/core - @types/uuid from 8.3.4 to 10.0.0. See this package in npm: https://www.npmjs.com/package/@types/uuid - commander from 9.5.0 to 12.1.0. See this package in npm: https://www.npmjs.com/package/commander - dotenv from 10.0.0 to 16.4.5. See this package in npm: https://www.npmjs.com/package/dotenv See this project in Snyk: https://app.snyk.io/org/cachiman-inc/project/9e61d83a-f9a9-4044-8094-fb59200be56f?utm_source=github&utm_medium=referral&page=upgrade-pr

google-cla · 2024-09-19T20:07:40Z

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[Snyk] Upgrade: uuid, , , , , commander, dotenv #542

Are you sure you want to change the base?

[Snyk] Upgrade: uuid, , , , , commander, dotenv #542

Conversation

WontonSam commented Sep 19, 2024

Snyk has created this PR to upgrade multiple dependencies.

Changed

Removed

Changed

Fixed

Changed

Added

Changed

Fixed

Changed

Added

Fixed

Fixed

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Added

Changed

Removed

Added

Fixed

Changed

Deprecated

Removed

Migration Tips

Added

Changed

Deprecated

Fixed

Changed

Removed

Migration Tips

Fixed

Added

Changed

Deprecated

Fixed

Changed

Added

Fixed

Changed

Added

Changed

Added

google-cla bot commented Sep 19, 2024