Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade: cookie-session, express-handlebars, express-session, fs, moment, mysql2, nodemailer #8

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Snyk] Upgrade: cookie-session, express-handlebars, express-session, fs, moment, mysql2, nodemailer #8

wants to merge 1 commit into from

Conversation

Akuzike8
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on

cookie-session
from 2.0.0 to 2.1.0 | 1 version ahead of your current version | 8 months ago
on 2024-01-24
express-handlebars
from 7.1.2 to 7.1.3 | 1 version ahead of your current version | 3 months ago
on 2024-06-19
express-session
from 1.17.3 to 1.18.0 | 1 version ahead of your current version | 7 months ago
on 2024-01-28
fs
from 0.0.1-security to 0.0.2 | 1 version ahead of your current version | 10 years ago
on 2014-09-12
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 8 months ago
on 2023-12-27
mysql2
from 3.10.0 to 3.11.0 | 4 versions ahead of your current version | a month ago
on 2024-07-27
nodemailer
from 6.9.13 to 6.9.14 | 1 version ahead of your current version | 3 months ago
on 2024-06-19

Release notes
Package name: cookie-session
  • 2.1.0 - 2024-01-24
    • Fix loading sessions with special keys
    • deps: cookies@0.9.1
      • Add partitioned option for CHIPS support
      • Add priority option for Priority cookie support
      • Fix accidental cookie name/value truncation when given invalid chars
      • Fix maxAge option to reject invalid values
      • Remove quotes from returned quoted cookie value
      • Use req.socket over deprecated req.connection
      • pref: small lookup regexp optimization
  • 2.0.0 - 2021-12-16
    • Change default cookie name to session
    • Change .populated to .isPopulated
    • Create new session for all types of invalid sessions
    • Drop support for Node.js 0.8
    • Remove private req.session.save()
    • Remove the key option; use name instead
    • Remove undocumented req.session.length to free up key name
    • Remove undocumented req.sessionCookies and req.sessionKey
    • Save all enumerable properties on req.session
      • Including _-prefixed properties
    • Use Object.defineProperty instead of deprecated __define*__
    • Use safe-buffer for improved Buffer API
    • deps: cookies@0.8.0
      • Fix check for default secure option behavior
      • Fix maxAge option preventing cookie deletion
      • Support "none" in sameSite option
      • deps: depd@~2.0.0
      • deps: keygrip@~1.1.0
      • perf: remove argument reassignment
    • deps: debug@3.2.7
      • Add DEBUG_HIDE_DATE
      • Add 256 color mode support
      • Enable / disable namespaces dynamically
      • Make millisecond timer namespace-specific
      • Remove DEBUG_FD support
      • Use Date#toISOString() when output is not a TTY
    • deps: on-headers@~1.0.2
      • Fix res.writeHead patch missing return value
    • deps: safe-buffer@5.2.1
    • perf: reduce the scope of try-catch deopt
    • perf: remove internal reference to request from session object
from cookie-session GitHub release notes
Package name: express-handlebars from express-handlebars GitHub release notes
Package name: express-session
  • 1.18.0 - 2024-01-28
    • Add debug log for pathname mismatch
    • Add partitioned to cookie options
    • Add priority to cookie options
    • Fix handling errors from setting cookie
    • Support any type in secret that crypto.createHmac supports
    • deps: cookie@0.6.0
      • Fix expires option to reject invalid dates
      • perf: improve default decode speed
      • perf: remove slow string split in parse
    • deps: cookie-signature@1.0.7
  • 1.17.3 - 2022-05-11
    • Fix resaving already-saved new session at end of request
    • deps: cookie@0.4.2
from express-session GitHub release notes
Package name: fs
  • 0.0.2 - 2014-09-12
  • 0.0.1-security - 2016-08-23
from fs GitHub release notes
Package name: moment from moment GitHub release notes
Package name: mysql2 from mysql2 GitHub release notes
Package name: nodemailer
  • 6.9.14 - 2024-06-19

    6.9.14 (2024-06-19)

    Bug Fixes

    • api: Added support for Ethereal authentication (56b2205)
    • services.json: Add Email Services Provider Feishu Mail (CN) (#1648) (e9e9ecc)
    • services.json: update Mailtrap host and port in well known (#1652) (fc2c9ea)
    • well-known-services: Add Loopia in well known services (#1655) (21a28a1)
  • 6.9.13 - 2024-03-20

    6.9.13 (2024-03-20)

    Bug Fixes

    • tls: Ensure servername for SMTP (d66fdd3)
from nodemailer GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

@snyk-bot
fix: upgrade multiple dependencies with Snyk
aaf2650 
Snyk has created this PR to upgrade:
  - cookie-session from 2.0.0 to 2.1.0.
    See this package in npm: https://www.npmjs.com/package/cookie-session
  - express-handlebars from 7.1.2 to 7.1.3.
    See this package in npm: https://www.npmjs.com/package/express-handlebars
  - express-session from 1.17.3 to 1.18.0.
    See this package in npm: https://www.npmjs.com/package/express-session
  - fs from 0.0.1-security to 0.0.2.
    See this package in npm: https://www.npmjs.com/package/fs
  - moment from 2.29.4 to 2.30.1.
    See this package in npm: https://www.npmjs.com/package/moment
  - mysql2 from 3.10.0 to 3.11.0.
    See this package in npm: https://www.npmjs.com/package/mysql2
  - nodemailer from 6.9.13 to 6.9.14.
    See this package in npm: https://www.npmjs.com/package/nodemailer

See this project in Snyk:
https://app.snyk.io/org/akuzike8/project/bcc5a9aa-568c-4b04-aa31-6bf1a8405551?utm_source=github&utm_medium=referral&page=upgrade-pr
@vercel Vercel
Copy link

vercel bot commented Sep 10, 2024 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
ueis-node ❌ Failed (Inspect) Sep 10, 2024 8:08am
ueis-node-v2 ❌ Failed (Inspect) Sep 10, 2024 8:08am

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@Akuzike8 @snyk-bot