[Snyk] Upgrade: , , , chalk, command-line-args, jsonc-parser, leven, tmp #1

lucentlabz · 2024-09-10T18:48:30Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name	Versions	Released on

@iarna/toml
from 2.2.5 to 3.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 years ago
on 2020-04-23
@yarnpkg/libzip
from 2.3.0 to 3.1.0 | 54 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-08
@yarnpkg/fslib
from 2.10.4 to 3.1.0 | 55 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
on 2024-05-08
chalk
from 4.1.2 to 5.3.0 | 7 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
on 2023-06-29
command-line-args
from 5.2.1 to 6.0.0 | 2 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
on 2024-07-05
jsonc-parser
from 3.2.1 to 3.3.1 | 2 versions ahead of your current version | 3 months ago
on 2024-06-24
leven
from 3.1.0 to 4.0.0 | 1 version ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 3 years ago
on 2021-08-10
tmp
from 0.2.1 to 0.2.3 | 2 versions ahead of your current version | 6 months ago
on 2024-02-29

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	631	Proof of Concept

Release notes

Package name: @iarna/toml

3.0.0 - 2020-04-23
3.0.0
2.2.5 - 2020-04-22
2.2.5

from @iarna/toml GitHub release notes

Package name: @yarnpkg/libzip

3.1.0 - 2024-05-08
3.0.1 - 2024-01-30
3.0.0 - 2023-10-22
3.0.0-rc.53 - 2023-10-03
3.0.0-rc.52 - 2023-09-29
3.0.0-rc.51 - 2023-09-17
3.0.0-rc.50 - 2023-08-23
3.0.0-rc.49 - 2023-08-17
3.0.0-rc.48 - 2023-07-02
3.0.0-rc.47 - 2023-06-29
3.0.0-rc.46 - 2023-06-22
3.0.0-rc.45 - 2023-06-01
3.0.0-rc.44 - 2023-05-17
3.0.0-rc.43 - 2023-05-01
3.0.0-rc.42 - 2023-03-30
3.0.0-rc.41 - 2023-03-27
3.0.0-rc.40 - 2023-03-05
3.0.0-rc.39 - 2023-02-08
3.0.0-rc.38 - 2023-02-04
3.0.0-rc.37 - 2023-01-29
3.0.0-rc.36 - 2023-01-18
3.0.0-rc.35 - 2023-01-09
3.0.0-rc.34 - 2022-12-20
3.0.0-rc.33 - 2022-12-11
3.0.0-rc.32 - 2022-11-30
3.0.0-rc.31 - 2022-11-22
3.0.0-rc.30 - 2022-11-18
3.0.0-rc.29 - 2022-11-16
3.0.0-rc.28 - 2022-11-10
3.0.0-rc.27 - 2022-10-28
3.0.0-rc.26 - 2022-10-18
3.0.0-rc.25 - 2022-10-10
3.0.0-rc.24 - 2022-10-08
3.0.0-rc.23 - 2022-10-08
3.0.0-rc.22 - 2022-09-28
3.0.0-rc.21 - 2022-09-26
3.0.0-rc.20 - 2022-09-19
3.0.0-rc.18 - 2022-09-06
3.0.0-rc.17 - 2022-09-06
3.0.0-rc.16 - 2022-09-06
3.0.0-rc.15 - 2022-08-24
3.0.0-rc.14 - 2022-07-21
3.0.0-rc.12 - 2022-07-13
3.0.0-rc.11 - 2022-07-01
3.0.0-rc.10 - 2022-06-24
3.0.0-rc.9 - 2022-06-10
3.0.0-rc.8 - 2022-06-09
3.0.0-rc.7 - 2022-06-08
3.0.0-rc.6 - 2022-05-16
3.0.0-rc.5 - 2022-05-09
3.0.0-rc.4 - 2022-05-01
3.0.0-rc.3 - 2022-04-26
3.0.0-rc.2 - 2022-04-12
3.0.0-rc.1 - 2022-04-07
2.3.0 - 2023-03-16

from @yarnpkg/libzip GitHub release notes

Package name: @yarnpkg/fslib

3.1.0 - 2024-05-08
3.0.2 - 2024-01-30
3.0.1 - 2023-10-28
3.0.0 - 2023-10-22
3.0.0-rc.53 - 2023-10-03
3.0.0-rc.52 - 2023-09-29
3.0.0-rc.51 - 2023-09-17
3.0.0-rc.50 - 2023-08-23
3.0.0-rc.49 - 2023-08-17
3.0.0-rc.48 - 2023-07-02
3.0.0-rc.47 - 2023-06-29
3.0.0-rc.46 - 2023-06-22
3.0.0-rc.45 - 2023-06-01
3.0.0-rc.44 - 2023-05-17
3.0.0-rc.43 - 2023-05-01
3.0.0-rc.42 - 2023-03-30
3.0.0-rc.41 - 2023-03-27
3.0.0-rc.40 - 2023-03-05
3.0.0-rc.39 - 2023-02-08
3.0.0-rc.38 - 2023-02-04
3.0.0-rc.37 - 2023-01-29
3.0.0-rc.36 - 2023-01-18
3.0.0-rc.35 - 2023-01-09
3.0.0-rc.34 - 2022-12-20
3.0.0-rc.33 - 2022-12-11
3.0.0-rc.32 - 2022-11-30
3.0.0-rc.31 - 2022-11-22
3.0.0-rc.30 - 2022-11-18
3.0.0-rc.29 - 2022-11-16
3.0.0-rc.28 - 2022-11-10
3.0.0-rc.27 - 2022-10-28
3.0.0-rc.26 - 2022-10-18
3.0.0-rc.25 - 2022-10-10
3.0.0-rc.24 - 2022-10-08
3.0.0-rc.23 - 2022-10-08
3.0.0-rc.22 - 2022-09-28
3.0.0-rc.21 - 2022-09-26
3.0.0-rc.20 - 2022-09-19
3.0.0-rc.18 - 2022-09-06
3.0.0-rc.17 - 2022-09-06
3.0.0-rc.16 - 2022-09-06
3.0.0-rc.15 - 2022-08-24
3.0.0-rc.14 - 2022-07-21
3.0.0-rc.12 - 2022-07-13
3.0.0-rc.11 - 2022-07-01
3.0.0-rc.10 - 2022-06-24
3.0.0-rc.9 - 2022-06-10
3.0.0-rc.8 - 2022-06-09
3.0.0-rc.7 - 2022-06-08
3.0.0-rc.6 - 2022-05-16
3.0.0-rc.5 - 2022-05-09
3.0.0-rc.4 - 2022-05-01
3.0.0-rc.3 - 2022-04-26
3.0.0-rc.2 - 2022-04-12
3.0.0-rc.1 - 2022-04-07
2.10.4 - 2024-02-01

from @yarnpkg/fslib GitHub release notes

Package name: chalk

5.3.0 - 2023-06-29
- Add sideEffects field to package.json 5aafc0a
- Add support for Gitea Actions (#603) 29b8569
v5.2.0...v5.3.0
5.2.0 - 2022-12-08
- Improve Deno compatibility (#579) 7443e9f
- Detect true-color support for GitHub Actions (#579) 7443e9f
- Detect true-color support for Kitty terminal (#579) 7443e9f
- Fix test for Azure DevOps environment (#579) 7443e9f
v5.1.2...v5.2.0
5.1.2 - 2022-10-12
- Fix exported styles names (#569) a34bcf6
v5.1.1...v5.1.2
5.1.1 - 2022-10-12
- Improved the names of exports introduced in 5.1.0 (#567) 6e0df05
  - We of course preserved the old names.
v5.1.0...v5.1.1
5.1.0 - 2022-10-05
- Expose style names (#566) d7d7571
v5.0.1...v5.1.0
5.0.1 - 2022-03-08
- Add main field to package.json for backwards compatibility with some developer tools 85f7e96
v5.0.0...v5.0.1
5.0.0 - 2021-11-26
Breaking
- This package is now pure ESM. Please read this.
  - If you use TypeScript, you need to use TypeScript 4.7 or later. Why.
  - If you use a bundler, make sure it supports ESM and that you have correctly configured it for ESM.
  - The Chalk issue tracker is not a support channel for your favorite build/bundler tool.
  - It's totally fine to stay on Chalk v4. It's been stable for years.
- Require Node.js 12.20 fa16f4e
- Move some properties off the default export to individual named exports:
  - chalk.Instance → Chalk
  - chalk.supportsColor → supportsColor
  - chalk.stderr → chalkStderr
  - chalk.stderr.supportsColor → supportsColorStderr
- Remove .keyword(), .hsl(), .hsv(), .hwb(), and .ansi() coloring methods (#433) 4cf2e40
  - These were not commonly used and added a lot of bloat to Chalk. You can achieve the same by using the color-convert package.
- The tagged template literal support moved into a separate package: chalk-template (#524) c987c61
-import chalk from 'chalk';
+import chalkTemplate from 'chalk-template';

-chalk2 + 3 = {bold ${2 + 3}};
+chalkTemplate2 + 3 = {bold ${2 + 3}};

Improvements
- Bundle dependencies 04fdbd6
  - This means Chalk no longer has any dependencies 🎉
- The install size is less than half of v4.
- Add overline style (#433) 4cf2e40
- Preserve function prototype methods (#434) 0fba91b
v4.1.0...v5.0.0
4.1.2 - 2021-07-30
- Readme updates

from chalk GitHub release notes

Package name: command-line-args

6.0.0 - 2024-07-05
This is a non-functional release intended to refresh the codebase and dependency tree. There are no changes to the library's API or behaviour.

Breaking changes since 5.2.1
- Dropped support for Node versions less than v12.20
Misc other improvements
- The package is now a native ES6 module while still maintaining support for CommonJS
- All dependencies updated to their latest version
Upgrade Notes
- If you're using Node v12.20 or above it's safe to upgrade with zero changes to your code.
- Users of older versions of Node should stick with command-line-args v5.2.1.
6.0.0-preview.1 - 2018-06-25
6.0.0-preview.1
5.2.1 - 2022-01-29
5.2.1

from command-line-args GitHub release notes

Package name: jsonc-parser

3.3.1 - 2024-06-24
Changes:
- #92: remove exports, prepare 3.3.1
This list of changes was auto generated.
3.3.0 - 2024-06-24
Changes:

Feature Requests:
- #11: Can we have a "insertFinalNewline" option in "FormattingOptions"?
- #4: Source map referenced but not included in published package
Bugs:
- #33: Formatting valid json content is causing an invalid json
- #40: parseTree() returns undefined on empty string input
Others:
- #90: prepare 3.3.0
- #88: Allow the visitor to cease callbacks
- #89: Bump braces from 3.0.2 to 3.0.3
See More
- #84: prepare 3.2.1
- #81: perf(format): cache breaklines and spaces as much as possible
- #79: update dependencies
- #75: ci: add batch
- #72: delete pr-chat action
- #71: add publish pipeline & cleanup ci
- #70: set preserveConstEnums: true, switch to es2020
- #69: sort edits in applyEdits
- #66: An additional parameter keepLines has been added into the formatting options which allows to keep the original line formatting
- #64: Adding Microsoft SECURITY.MD
- #62: Add JSON path supplier parameter to visitor functions
- #44: findNodeAtLocation does not handle incomplete property pair
- #61: Update API section in README
- #53: Clarify whether / how Edit[] can be concatenated
- #46: Non-standard whitespace handling
- #47: Improve README
- #54: readme: improve ParseOptions documentation
- #43: Add file extenstion to typings property value
- #34: Optimize parseLiteral for number-heavy JSON files (ala GeoJSON)
- #39: Bump lodash from 4.17.15 to 4.17.19
- #35: Allow for array modifications, add inPlace formatting option.
- #32: Parse errors make parsed tree useless
- #31: Upgrading from 2.1.1 to 2.2.0 has diagnostic for file with only comments
- #25: Fix typo in README
- #24: parse function should include properties with empty string as their keys
- #21: Update README.md
- #18: JavaScipt -> JavaScript
- #17: add line and column information to scanner and visitor
- #15: Fix a few typos in doc comments
- #12: Do not mutate the given path
- #9: Refactor computeIndentLevel method
- #8: Fix typo of token
- #6: Allow trailing commas in array
- #5: add JSON formatter and editor from VS Code
- #1: Error objects should also contain location information
This list of changes was auto generated.
3.2.1 - 2024-01-22
prepare 3.2.1 (#84)

from jsonc-parser GitHub release notes

Package name: leven

4.0.0 - 2021-08-10
Breaking
- Require Node.js 12.20 d3e23a5
- This package is now pure ESM. Please read this.
v3.1.0...v4.0.0
3.1.0 - 2019-04-04
- Refactor TypeScript definition to CommonJS compatible export (#13) 1051a46
v3.0.0...v3.1.0

from leven GitHub release notes

Package name: tmp

0.2.3 - 2024-02-29
Tagging the release
0.2.2 - 2024-02-28
Tagging v0.2.2
0.2.1 - 2020-04-29
0.2.1

from tmp GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @iarna/toml from 2.2.5 to 3.0.0. See this package in npm: https://www.npmjs.com/package/@iarna/toml - @yarnpkg/libzip from 2.3.0 to 3.1.0. See this package in npm: https://www.npmjs.com/package/@yarnpkg/libzip - @yarnpkg/fslib from 2.10.4 to 3.1.0. See this package in npm: https://www.npmjs.com/package/@yarnpkg/fslib - chalk from 4.1.2 to 5.3.0. See this package in npm: https://www.npmjs.com/package/chalk - command-line-args from 5.2.1 to 6.0.0. See this package in npm: https://www.npmjs.com/package/command-line-args - jsonc-parser from 3.2.1 to 3.3.1. See this package in npm: https://www.npmjs.com/package/jsonc-parser - leven from 3.1.0 to 4.0.0. See this package in npm: https://www.npmjs.com/package/leven - tmp from 0.2.1 to 0.2.3. See this package in npm: https://www.npmjs.com/package/tmp See this project in Snyk: https://app.snyk.io/org/lucentlabz/project/55ef41f9-4f36-41e7-bad0-ae31e46f0795?utm_source=github&utm_medium=referral&page=upgrade-pr

lucentlabz merged commit f3d229b into main Sep 11, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

[Snyk] Upgrade: , , , chalk, command-line-args, jsonc-parser, leven, tmp #1

[Snyk] Upgrade: , , , chalk, command-line-args, jsonc-parser, leven, tmp #1

Uh oh!

lucentlabz commented Sep 10, 2024

Breaking

Improvements

Breaking changes since 5.2.1

Misc other improvements

Upgrade Notes

Changes:

Changes:

Feature Requests:

Bugs:

Others:

Breaking

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

[Snyk] Upgrade: , , , chalk, command-line-args, jsonc-parser, leven, tmp #1

[Snyk] Upgrade: , , , chalk, command-line-args, jsonc-parser, leven, tmp #1

Uh oh!

Conversation

lucentlabz commented Sep 10, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

Breaking

Improvements

Breaking changes since 5.2.1

Misc other improvements

Upgrade Notes

Changes:

Changes:

Feature Requests:

Bugs:

Others:

Breaking

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants