[Snyk] Upgrade: axios, cheerio, ts-jest #43
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- axios from 1.7.4 to 1.7.5.
See this package in npm: https://www.npmjs.com/package/axios
- cheerio from 1.0.0-rc.12 to 1.0.0.
See this package in npm: https://www.npmjs.com/package/cheerio
- ts-jest from 29.2.3 to 29.2.5.
See this package in npm: https://www.npmjs.com/package/ts-jest
See this project in Snyk:
https://app.snyk.io/org/pavel-durov/project/94dc3fda-4f43-470b-8834-efed0f8570eb?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
axios
from 1.7.4 to 1.7.5 | 1 version ahead of your current version | 22 days ago
on 2024-08-23
cheerio
from 1.0.0-rc.12 to 1.0.0 | 1 version ahead of your current version | a month ago
on 2024-08-09
ts-jest
from 29.2.3 to 29.2.5 | 2 versions ahead of your current version | 22 days ago
on 2024-08-23
Release notes
Package name: axios
-
1.7.5 - 2024-08-23
- adapter: fix undefined reference to hasBrowserEnv (#6572) (7004707)
- core: add the missed implementation of AxiosError#status property; (#6573) (6700a8a)
- core: fix
- fetch: fix credentials handling in Cloudflare workers (#6533) (550d885)
Dmitriy Mozgovoy
Antonin Bas
Hans Otto Wirtz
-
1.7.4 - 2024-08-13
- sec: CVE-2024-39338 (#6539) (#6543) (6b6b605)
- sec: disregard protocol-relative URL to remediate SSRF (#6539) (07a661a)
Lev Pachmanov
Đỗ Trọng Hải
from axios GitHub release notesRelease notes:
Bug Fixes
ReferenceError: navigator is not definedfor custom environments; (#6567) (fed1a4b)Contributors to this release
Release notes:
Bug Fixes
Contributors to this release
Package name: cheerio
-
1.0.0 - 2024-08-09
-
-
-
import cheerio, { html } from 'cheerio';
import * as cheerio from 'cheerio';
-
-
- Add functions to load buffers, streams & URLs in NodeJS by @ fb55 in #2857
- Add extract method by @ fb55 in #2750
- Allow imports of
- Allow empty string in
- Make
- Fix potential github action smells by @ ceddy4395 in #3826
- Cheerio has a new website, featuring updated API docs and guides! #2950
-
1.0.0-rc.12 - 2022-06-26
- Align
- Allow deep imports of
- @ blixt made their first contribution in #2601
from cheerio GitHub release notesCheerio 1.0 is here! 🎉
Announcement Blog Post
Breaking Changes
The minimum NodeJS version is now 18.17 or higher #3959
Import paths were simplified. For example, use
cheerio/sliminstead ofcheerio/lib/slim. #3970The deprecated default Cheerio instance and static methods were removed. #3974
Before, it was possible to write code like this:
html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS
Make sure to always load documents first:
cheerio.load('<test></test>').html();
Node types previously re-exported by Cheerio must now be imported directly
from (
domhandler)(https://github.com/fb55/domhandler). #3969htmlparser2 options now reside exclusively under the
xmlkey (#2916):New Features
Fixes
cheerio/utilsby @ blixt in #2601data, and simplify by @ fb55 in #2818closestbe able to start from text nodes by @ Qualtagh in #2811Other
Full Changelog: v1.0.0-rc.12...v1.0.0
Bugfix release. Fixed issues:
propundefined handling with jQuery by @ fb55 in #2557cheerio/lib/utilsby @ blixt in #2601New Contributors
Full Changelog: v1.0.0-rc.11...v1.0.0-rc.12
Package name: ts-jest
-
29.2.5 - 2024-08-23
-
29.2.4 - 2024-08-01
-
29.2.3 - 2024-07-18
from ts-jest GitHub release notesPlease refer to CHANGELOG.md for details.
Please refer to CHANGELOG.md for details.
Please refer to CHANGELOG.md for details.
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: