Skip to content

[Snyk] Upgrade @octokit/rest from 15.9.5 to 15.18.3 - #703

Open
NOUIY wants to merge 1 commit into
masterfrom
snyk-upgrade-d65c57b559514671f0729230c2f44d12
Open

[Snyk] Upgrade @octokit/rest from 15.9.5 to 15.18.3#703
NOUIY wants to merge 1 commit into
masterfrom
snyk-upgrade-d65c57b559514671f0729230c2f44d12

Conversation

@NOUIY

@NOUIY NOUIY commented Mar 27, 2024

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade @octokit/rest from 15.9.5 to 15.18.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 21 versions ahead of your current version.
  • The recommended version was released 5 years ago, on 2019-08-23.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-AJV-584908
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-JSONSCHEMA-1920922
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Denial of Service (DoS)
SNYK-JS-DECODEURICOMPONENT-3149970
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Directory Traversal
SNYK-JS-MOMENT-2440688
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MOMENT-2944238
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Poisoning
SNYK-JS-QS-3153490
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-567746
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-XML2JS-5414874
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-MINIMATCH-3050818
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-MINIMIST-559764
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-559764
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-MINIMIST-2429795
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: @octokit/rest
  • 15.18.3 - 2019-08-23

    Bug fixes

    • send preview Accept header in listInstallationsForAuthenticatedUser (2f477d6)
  • 15.18.2 - 2019-08-16

    build(package): update semantic-release to latest

  • 15.18.1 - 2018-12-13
  • 15.18.0 - 2018-11-14
  • 15.17.0 - 2018-11-10
  • 15.16.1 - 2018-11-05
  • 15.16.0 - 2018-11-05
  • 15.15.1 - 2018-10-18
  • 15.15.0 - 2018-10-18
  • 15.14.0 - 2018-10-17
  • 15.13.1 - 2018-10-10
  • 15.13.0 - 2018-10-06
  • 15.12.1 - 2018-09-27
  • 15.12.0 - 2018-09-19
  • 15.11.4 - 2018-09-17
  • 15.11.3 - 2018-09-16
  • 15.11.2 - 2018-09-12
  • 15.11.1 - 2018-09-05
  • 15.11.0 - 2018-09-04
  • 15.10.0 - 2018-08-16
  • 15.9.6 - 2018-08-15
  • 15.9.5 - 2018-08-01
from @octokit/rest GitHub release notes
Commit messages
Package name: @octokit/rest
  • 4430ba3 build(package): update semantic-release to latest
  • 2f477d6 fix: send preview Accept header in listInstallationsForAuthenticatedUser ("Sign into GitHub" (which should probably be "Sign in to GitHub") doesn't work at all for me, and my atom/atom#1447)
  • 6651589 build(package): remove obsolete dist-tag publishConfig
  • c3dce71 fix: send labels array in request body root for `octokit.issues.addLabels()`
  • 683f2bf ci(travis): install npm@3 for node 4 test
  • 5c3433e test: send labels array in request body root for `octokit.issues.addLabels()`
  • 350d51f ci(travis): build & release on *.x branches
  • 6b7b24a build(package): install semantic-release@beta for support of maintenance releases
  • 223a387 test: typescript validation
  • 7540890 test: adopt for new deprecations
  • 855673e ci: temporarily disable the docs update stage on travis
  • 6f27bfe build: routes for API docs
  • d5513ca build: enable new scopes in generate-routes script
  • 1f7d9f1 build: remove temporary script to update routes
  • 959b4f4 refactor: `mapTo` is no longer needed for `.addLabels` & `.replaceLabels`
  • 179b876 build: update existing routes
  • 1fff810 feat: rename methods to align more closely to the documentation at https://developer.github.com/v3/
  • 722e3d3 build: temporary script to update routes.json in preparation for v16
  • c65376a build(package): sort-keys
  • 945ab1a build(package): @ octokit/routes@15.0.1
  • 31e3848 build(package): publish with @ deprecations-for-v16 dist-tag
  • 7897686 test: skip labels test due to https://github.com/octokit/routes/releases/tag/v14.7.0
  • 16f94f7 feat: deprecations
  • f7a2bae deprecate: options.input

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants