[Snyk] Upgrade: async, cheerio, cson, snyk #217

hakatashi · 2024-09-08T09:14:46Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

Name	Versions	Released on

async
from 3.2.4 to 3.2.5 | 1 version ahead of your current version | 10 months ago
on 2023-11-03
cheerio
from 1.0.0-rc.12 to 1.0.0 | 1 version ahead of your current version | a month ago
on 2024-08-09
cson
from 7.20.0 to 8.4.0 | 10 versions ahead of your current version
⚠️ This is a major version upgrade, and may be a breaking change | 8 months ago
on 2023-12-29
snyk
from 1.1064.0 to 1.1292.4 | 242 versions ahead of your current version | a month ago
on 2024-08-12

Release notes

Package name: async

3.2.5 - 2023-11-03
Version 3.2.5
3.2.4 - 2022-06-07
Version 3.2.4

from async GitHub release notes

Package name: cheerio

1.0.0 - 2024-08-09
Cheerio 1.0 is here! 🎉

Announcement Blog Post

Breaking Changes
- The minimum NodeJS version is now 18.17 or higher #3959
- Import paths were simplified. For example, use cheerio/slim instead of
  cheerio/lib/slim. #3970
- The deprecated default Cheerio instance and static methods were removed. #3974
  
  Before, it was possible to write code like this:
  
  import cheerio, { html } from 'cheerio';
  
  html(cheerio('<test></test>')); // ~ '<test></test>' -- NO LONGER WORKS
  
  Make sure to always load documents first:
  
  import * as cheerio from 'cheerio';
  
  cheerio.load('<test></test>').html();
- Node types previously re-exported by Cheerio must now be imported directly
  from (domhandler)(https://github.com/fb55/domhandler). #3969
- htmlparser2 options now reside exclusively under the xml key (#2916):
```
const $ = cheerio.load('<html>', {
  xml: {
    withStartIndices: true,
  },
});
```
New Features
- Add functions to load buffers, streams & URLs in NodeJS by @ fb55 in #2857
- Add extract method by @ fb55 in #2750
Fixes
- Allow imports of cheerio/utils by @ blixt in #2601
- Allow empty string in data, and simplify by @ fb55 in #2818
- Make closest be able to start from text nodes by @ Qualtagh in #2811
- Fix potential github action smells by @ ceddy4395 in #3826
Other
- Cheerio has a new website, featuring updated API docs and guides! #2950
Full Changelog: v1.0.0-rc.12...v1.0.0
1.0.0-rc.12 - 2022-06-26
Bugfix release. Fixed issues:
- Align prop undefined handling with jQuery by @ fb55 in #2557
- Allow deep imports of cheerio/lib/utils by @ blixt in #2601
New Contributors
- @ blixt made their first contribution in #2601
Full Changelog: v1.0.0-rc.11...v1.0.0-rc.12

from cheerio GitHub release notes

Package name: cson

8.4.0 - 2023-12-29
- Updated dependencies, base files, and editions using boundation
- Thank you to the sponsors: Andrew Nesbitt, Balsa, Codecov, Poonacha Medappa, Rob Morris, Sentry, Syntax
8.4.0-next.1703862812.379264c2ac0b97044b8ec4d95d965bda9f823898 - 2023-12-29
8.3.0 - 2023-12-27
- Updated dependencies, base files, and editions using boundation
- Thank you to the sponsors: Andrew Nesbitt, Balsa, Codecov, Poonacha Medappa, Rob Morris, Sentry, Syntax
8.3.0-next.1703687848.e30f735e4bc3b0b1159c1c20891507b82d596b39 - 2023-12-27
8.2.0 - 2023-11-24
- Updated dependencies, base files, and editions using boundation
8.2.0-next.1700834233.489d178684c82fb1ba93f9f9177b2995441fb6a2 - 2023-11-24
8.1.0 - 2023-11-21
- Updated dependencies, base files, and editions using boundation
8.1.0-next.1700562115.eab6e68cff621e8ae7672b026cfadefadca83bc7 - 2023-11-21
8.0.0 - 2023-11-18
- Updated CLI to support autodetection of conversion, as well as supporting --cson2json and --json2cson args, also added cson bin
- Updated dependencies, base files, and editions using boundation
- Minimum required Node.js version changed from node: >=10 to node: >=6 adapting to ecosystem changes
8.0.0-next.1700268864.1502a8c11a6028ec4f4029a7a19df1df05af4600 - 2023-11-18
7.20.0 - 2020-09-04
- Updated dependencies, base files, and editions using boundation

from cson GitHub release notes

Package name: snyk

1.1292.4 - 2024-08-12
1.1292.4 (2024-08-12)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Complete changelog

Bug Fixes
- deployment: Rollback of digital signature for the bundled macOS binary (#5416)
1.1292.3 - 2024-08-12
1.1292.3 (2024-08-12)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Complete changelog

Bug Fixes
- deployment: Add digital signature for the bundled macOS binary
  (#5404)
1.1292.2 - 2024-08-01
1.1292.2 (2024-08-01)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Complete changelog

Bug Fixes
- container test: Improve the accuracy of identifying npm projects within docker images by removing the explicit folder ignore rules
  (#5384)
- container test: Pass platform parameter when pulling an image from a container registry (#5360)
1.1292.1 - 2024-06-27
1.1292.1 (2024-06-27)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Complete changelog

Bug Fixes
- test,monitor: fix improper permission error handling when accessing 'enablePnpmCli' feature flag
1.1292.0 - 2024-06-26
1.1292.0 (2024-06-26)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News

This Snyk CLI release delivers an assortment of bug fixes and improvements.
- We've added support for pnpm, giving you more flexibility in your project setup.
- You can now scan npm/yarn projects even without lockfiles, ensuring comprehensive vulnerability detection regardless of your dependency management approach.
- We're committed to strengthening security. This release includes redaction of additional sensitive data in debug logs, minimizing potential risks.
Complete changelog

Features
- test: Added pnpm support under 'enablePnpmCli' feature flag (#5181) (46769cc)
- test: Support scan of npm/yarn projects without lockfiles (e2d77a9)
- monitor: Set target-reference in the monitor request (51ed8f5)
- code: Centrally check if code test is enabled (#5239) (e5a00e2)
- sbom: Improve depgraph for Maven projects (fbb33d7)
- sbom: Use RFC 3339 for all timestamps in sbom test result (#5204) (91bf191)
- language-server: Add --all-projects flag scans by default IDE-318 (fdcf30e)
- language-server: Enable incremental scanning IDE-275 (d198685)
- language-server: Add support for IDE themes (c1c4d08)
- language-server: Consistent styling across intellij and vscode (#5282) (9aa6f76)
- logging: Redact additional types of sensitive data from debug logs (#5254) (056cdab)
Bug Fixes
- auth: Autodetect IDE usage and fallback to API token based authentication (#5241) (4c795e0)
- iac: Upgrade iac custom rules to address Vulnerabilities IAC-2944 (453db24)
- language-server: Caching problem when no vulnerabilities in the IDE (#5223) (89c9491)
- language-server: Remove incorrect /v1 path (#5214) (cf16470)
- dependencies: Update dependencies to reduce vulnerabilities (#5131) (4c7cb3c)
- sbom: sbom test output padding (e3b7cac)
- sbom: Fix container purl generation for apt and rpm (#5207) (fa9d512)
- sbom: Retain error code during SBOM generation (#5202) (5e98aaa)
- test: support cyclic dependencies in maven with dverbose (#5208) (fb24c02)
- test: Add tool version and informationUri to sarif output (#5203) (b899fd3)
- test: fixing several .NET bugs (#5217) (c27d767)
- test: fixing a bug causing .NET beta scanning to fail on older versions of .NET (#5228) (5fdecf7)
- test: .NET runtime resolution testing now supports projects targeting .NET Standard frameworks (#5169) (44d0861)
- test: fix issues of type 'Cannot find module ...' in snyk-docker-plugin (#5301) (88efd54)
- monitor: fix project name when using assets-project-name flag (#5077) (57dc718)
1.1291.1 - 2024-05-27
1.1291.1 (2024-05-27)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

Bug Fixes
- dependencies: Upgrade go-getter to v1.7.4 to fix vulnerabilities (#5252)
1.1291.0 - 2024-04-30
1.1291.0 (2024-04-30)

The Snyk CLI is being deployed to different deployment channels, users can select the stability level according to their needs. For details please see this documentation

News
- This is the first stable release of the CLI
- It makes use of semantic versioning and is the successor of 1.1290.0
Bug Fixes
- test: Fix support of cyclic dependencies in maven with dverbose #5208
1.1290.0 - 2024-04-19
1.1290.0 (2024-04-18)

Bug Fixes
- code: Fix error handling for experimental go native code client (#5170) (5400c69)
Features
- code: introduce human readable formatting for experimental test mechanism (#5174) (34bbc95)
- sbom: Introduce experimental sbom test command (#5176) (ea6293b)
- snyk woof ro language support and tests (#5166) (ed2e754)
1.1289.0 - 2024-04-16
1.1289.0 (2024-04-16)

Bug Fixes
- ls: Trigger re-analysis after fixing interfile issues (#5163) (05cb9f5)
Features
- code: Integrate experimental go native code client [CLI-224] (#5164) (5bd898e)
- include additional policy properties, when provided, in plain text output (#5142) (a8be764)
- use workflow data to determine exit code errors (51c717b)
1.1288.1 - 2024-04-15
1.1288.1 (2024-04-15)

Bug Fixes
- iac: Fix Issue Path in human readable and json output [IAC-2935] (#5159) (5fc3d59)
1.1288.0 - 2024-04-09
1.1287.0 - 2024-04-04
1.1286.4 - 2024-04-04
1.1286.3 - 2024-04-03
1.1286.2 - 2024-03-29
1.1286.1 - 2024-03-26
1.1286.0 - 2024-03-25
1.1285.1 - 2024-03-25
1.1285.0 - 2024-03-18
1.1284.0 - 2024-03-14
1.1283.1 - 2024-03-13
1.1283.0 - 2024-03-06
1.1282.1 - 2024-03-05
1.1282.0 - 2024-03-05
1.1281.0 - 2024-02-28
1.1280.1 - 2024-02-20
1.1280.0 - 2024-02-15
1.1279.0 - 2024-02-12
1.1278.0 - 2024-02-06
1.1277.0 - 2024-02-05
1.1276.0 - 2024-01-30
1.1275.0 - 2024-01-26
1.1274.0 - 2024-01-23
1.1273.0 - 2024-01-23
1.1272.0 - 2024-01-22
1.1271.0 - 2024-01-19
1.1270.0 - 2024-01-18
1.1269.0 - 2024-01-10
1.1268.0 - 2024-01-08
1.1267.0 - 2024-01-02
1.1266.0 - 2023-12-20
1.1265.0 - 2023-12-20
1.1264.0 - 2023-12-14
1.1263.0 - 2023-12-14
1.1262.0 - 2023-12-13
1.1261.0 - 2023-12-12
1.1260.0 - 2023-12-04
1.1259.0 - 2023-11-30
1.1258.0 - 2023-11-29
1.1257.0 - 2023-11-28
1.1256.0 - 2023-11-27
1.1255.0 - 2023-11-27
1.1254.0 - 2023-11-27
1.1253.0 - 2023-11-24
1.1252.0 - 2023-11-22
1.1251.0 - 2023-11-21
1.1250.0 - 2023-11-20
1.1249.0 - 2023-11-20
1.1248.0 - 2023-11-16
1.1247.0 - 2023-11-16
1.1246.0 - 2023-11-15
1.1245.0 - 2023-11-14
1.1244.0 - 2023-11-13
1.1243.0 - 2023-11-09
1.1242.0 - 2023-11-08
1.1241.0 - 2023-11-08
1.1240.0 - 2023-11-07
1.1239.0 - 2023-11-07
1.1238.0 - 2023-10-31
1.1237.0 - 2023-10-24
1.1236.0 - 2023-10-18
1.1235.0 - 2023-10-16
1.1234.0 - 2023-10-11
1.1233.0 - 2023-10-09
1.1232.0 - 2023-10-05
1.1231.0 - 2023-10-05
1.1230.0 - 2023-10-04
1.1229.0 - 2023-10-03
1.1228.0 - 2023-09-28
1.1227.0 - 2023-09-25
1.1226.0 - 2023-09-21
1.1225.0 - 2023-09-19
1.1224.0 - 2023-09-19
1.1223.0 - 2023-09-19
1.1222.0 - 2023-09-19
1.1221.0 - 2023-09-18
1.1220.0 - 2023-09-14
1.1219.0 - 2023-09-14
1.1218.0 - 2023-09-14
1.1217.0 - 2023-09-12
1.1216.0 - 2023-09-11
1.1215.0 - 2023-09-08
1.1214.0 - 2023-09-07
1.1213.0 - 2023-09-06
1.1212.0 - 2023-09-05
1.1211.0 - 2023-09-04
1.1210.0 - 2023-09-04
1.1209.0 - 2023-08-31
1.1208.0 - 2023-08-31
1.1207.0 - 2023-08-28
1.1206.0 - 2023-08-23
1.1205.0 - 2023-08-21
1.1204.0 - 2023-08-21
1.1203.0 - 2023-08-17
1.1202.0 - 2023-08-15
1.1201.0 - 2023-08-15
1.1200.0 - 2023-08-03
1.1199.0 - 2023-08-02
1.1198.0 - 2023-07-31
1.1197.0 - 2023-07-31
1.1196.0 - 2023-07-25
1.1195.0 - 2023-07-25
1.1194.0 - 2023-07-24
1.1193.0 - 2023-07-20
1.1192.0 - 2023-07-19
1.1191.0 - 2023-07-19
1.1190.0 - 2023-07-14
1.1189.0 - 2023-07-13
1.1188.0 - 2023-07-12
1.1187.0 - 2023-06-30
1.1186.0 - 2023-06-27
1.1185.0 - 2023-06-26
1.1184.0 - 2023-06-23
1.1183.0 - 2023-06-19
1.1182.0 - 2023-06-16
1.1181.0 - 2023-06-15
1.1180.0 - 2023-06-14
1.1179.0 - 2023-06-13
1.1178.0 - 2023-06-12
1.1177.0 - 2023-06-09
1.1176.0 - 2023-06-08
1.1175.0 - 2023-06-06
1.1174.0 - 2023-06-05
1.1173.0 - 2023-06-02
1.1172.0 - 2023-06-02
1.1171.0 - 2023-06-01
1.1170.0 - 2023-05-31
1.1169.0 - 2023-05-30
1.1168.0 - 2023-05-26
1.1167.0 - 2023-05-25
1.1166.0 - 2023-05-25
1.1165.0 - 2023-05-25
1.1164.0 - 2023-05-25
1.1163.0 - 2023-05-24
1.1162.0 - 2023-05-23
1.1161.0 - 2023-05-23
1.1160.0 - 2023-05-22
1.1159.0 - 2023-05-18
1.1158.0 - 2023-05-17
1.1157.0 - 2023-05-17
1.1156.0 - 2023-05-16
1.1155.0 - 2023-05-12
1.1154.0 - 2023-05-10
1.1153.0 - 2023-05-08
1.1152.0 - 2023-05-04
1.1151.0 - 2023-05-04
1.1150.0 - 2023-04-28
1.1149.0 - 2023-04-28
1.1148.0 - 2023-04-28
1.1147.0 - 2023-04-27
1.1146.0 - 2023-04-25
1.1145.0 - 2023-04-25
1.1144.0 - 2023-04-24
1.1143.0 - 2023-04-18
1.1142.0 - 2023-04-12
1.1141.0 - 2023-04-12
1.1140.0 - 2023-04-05
1.1139.0 - 2023-04-04
1.1138.0 - 2023-04-04
1.1137.0 - 2023-04-03
1.1136.0 - 2023-04-03
1.1135.0 - 2023-04-03
1.1134.0 - 2023-04-03
1.1133.0 - 2023-03-31
1.1132.0 - 2023-03-31
1.1131.0 - 2023-03-30
1.1130.0 - 2023-03-29
1.1129.0 - 2023-03-28
1.1128.0 - 2023-03-27
1.1127.0 - 2023-03-24
1.1126.0 - 2023-03-23
1.1125.0 - 2023-03-22
1.1124.0 - 2023-03-22
1.1123.0 - 2023-03-21
1.1122.0 - 2023-03-20
1.1121.0 - 2023-03-17
1.1120.0 - 2023-03-17
1.1119.0 - 2023-03-16
1.1118.0 - 2023-03-13
1.1117.0 - 2023-03-10
1.1116.0 - 2023-03-09
1.1115.0 - 2023-03-08
1.1114.0 - 2023-03-06
1.1113.0 - 2023-03-06
1.1112.0 - 2023-03-06
1.1111.0 - 2023-03-02
1.1110.0 - 2023-02-28
1.1109.0 - 2023-02-24
1.1108.0 - 2023-02-21
1.1107.0 - 2023-02-21
1.1106.0 - 2023-02-20
1.1105.0 - 2023-02-16
1.1104.0 - 2023-02-15
1.1103.0 - 2023-02-13
1.1102.0 - 2023-02-13
1.1101.0 - 2023-02-13
1.1100.0 - 2023-02-08
1.1099.0 - 2023-02-08
1.1098.0 - 2023-02-08
1.1097.0 - 2023-02-06
1.1096.0 - 2023-02-03
1.1095.0 - 2023-02-02
1.1094.0 - 2023-02-01
1.1093.0 - 2023-01-31
1.1092.0 - 2023-01-30
1.1091.0 - 2023-01-26
1.1090.0 - 2023-01-24
1.1089.0 - 2023-01-23
1.1088.0 - 2023-01-20
1.1087.0 - 2023-01-12
1.1086.0 - 2023-01-12
1.1085.0 - 2023-01-11
1.1084.0 - 2023-01-11
1.1083.0 - 2023-01-11
1.1082.0 - 2023-01-08
1.1081.0 - 2023-01-03
1.1080.0 - 2022-12-29
1.1079.0 - 2022-12-28
1.1078.0 - 2022-12-28
1.1077.0 - 2022-12-27
1.1076.0 - 2022-12-22
1.1075.0 - 2022-12-22
1.1074.0 - 2022-12-21
1.1073.0 - 2022-12-20
1.1072.0 - 2022-12-20
1.1071.0 - 2022-12-13
1.1070.0 - 2022-12-13
1.1069.0 - 2022-12-06
1.1068.0 - 2022-12-05
1.1067.0 - 2022-12-05
1.1066.0 - 2022-12-02
1.1065.0 - 2022-12-01
1.1064.0 - 2022-11-29

from snyk GitHub release notes

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - async from 3.2.4 to 3.2.5. See this package in npm: https://www.npmjs.com/package/async - cheerio from 1.0.0-rc.12 to 1.0.0. See this package in npm: https://www.npmjs.com/package/cheerio - cson from 7.20.0 to 8.4.0. See this package in npm: https://www.npmjs.com/package/cson - snyk from 1.1064.0 to 1.1292.4. See this package in npm: https://www.npmjs.com/package/snyk See this project in Snyk: https://app.snyk.io/org/hakatashi/project/2e3f9aca-9dd6-4f6a-a832-ecbbafd758a1?utm_source=github&utm_medium=referral&page=upgrade-pr

hakatashi merged commit 41db40f into master Sep 8, 2024

hakatashi deleted the snyk-upgrade-030e1684115e5efc77f885b585ed2de9 branch September 8, 2024 09:15

[Snyk] Upgrade: async, cheerio, cson, snyk #217

[Snyk] Upgrade: async, cheerio, cson, snyk #217

Uh oh!

Conversation

hakatashi commented Sep 8, 2024

Snyk has created this PR to upgrade multiple dependencies.

Announcement Blog Post

Breaking Changes

New Features

Fixes

Other

New Contributors

1.1292.4 (2024-08-12)

Complete changelog

Bug Fixes

1.1292.3 (2024-08-12)

Complete changelog

Bug Fixes

1.1292.2 (2024-08-01)

Complete changelog

Bug Fixes

1.1292.1 (2024-06-27)

Complete changelog

Bug Fixes

1.1292.0 (2024-06-26)

News

Complete changelog

Features

Bug Fixes

1.1291.1 (2024-05-27)

Bug Fixes

1.1291.0 (2024-04-30)

News

Bug Fixes

1.1290.0 (2024-04-18)

Bug Fixes

Features

1.1289.0 (2024-04-16)

Bug Fixes

Features

1.1288.1 (2024-04-15)

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants