Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 2 vulnerabilities #971

Draft
wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

[Snyk] Fix for 2 vulnerabilities #971

wants to merge 1 commit into from

Conversation

ALRubinger
Copy link
Contributor

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • site/package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 484/1000
Why? Has a fix available, CVSS 5.4		 Open Redirect
SNYK-JS-GOT-2932019		 Yes No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Improper Input Validation
SNYK-JS-POSTCSS-5926692		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @docusaurus/core The new version differs by 250 commits.
  • ca8b463 v3.0.0
  • 2121b71 fix bad path
  • 0b3be15 version 3.0.0 docs
  • 9658a5b 3.0.0 changelog
  • 1089741 docs: archive v2 docs versions + create 2.x docs (#9472)
  • 495c793 chore: v3.0.0-rc.1 release (#9453)
  • 4a0bd92 docs: v3 upgrade guide should mention MDX v1 compat options (#9452)
  • 7e456ec feat(mdx-loader): upgrade to MDX v3 + (#9451)
  • 8d19054 fix(theme): fix useWindowSize React hydration issue (#9446)
  • d07567e chore: revert Lighthouse numberOfRuns due to bad/verbose reporting (#9448)
  • dd03a25 chore: Make Lighthouse CI run on local build (#9447)
  • c6762a2 feat(mdx-loader): Remark plugin to report unused MDX / Markdown directives (#9394)
  • 56cc8e8 chore(ci): fix missing screenshots on Argos (#9445)
  • f80e1bd refactor(blog-plugin): blog archive reverse ordering of posts (#9438)
  • 911dfb4 chore(deps): bump actions/setup-node from 3 to 4 (#9440)
  • e525794 chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#9441)
  • aa958f0 fix(plugin-blog): blog archive should hide unlisted blog posts (#9437)
  • 2bb4fd0 chore(ci): use new Argos playwright integration (#9419)
  • f674e02 docs: update Kinsta deployment documentation (#9430)
  • 7ee2f75 chore: v3.0.0-rc.0 release (#9418)
  • 4e150d2 docs: add Docusaurus v3.0 upgrade guide (#9417)
  • 45f1a66 feat(core): support TypeScript + ESM configuration (#9317)
  • 336a44f chore: remove docusaurus-migrate (#9400)
  • ae31916 docs: fix typos in website/docs/i18n/i18n-git.mdx (#9396)

See the full diff

Package name: @docusaurus/preset-classic The new version differs by 250 commits.
  • ca8b463 v3.0.0
  • 2121b71 fix bad path
  • 0b3be15 version 3.0.0 docs
  • 9658a5b 3.0.0 changelog
  • 1089741 docs: archive v2 docs versions + create 2.x docs (#9472)
  • 495c793 chore: v3.0.0-rc.1 release (#9453)
  • 4a0bd92 docs: v3 upgrade guide should mention MDX v1 compat options (#9452)
  • 7e456ec feat(mdx-loader): upgrade to MDX v3 + (#9451)
  • 8d19054 fix(theme): fix useWindowSize React hydration issue (#9446)
  • d07567e chore: revert Lighthouse numberOfRuns due to bad/verbose reporting (#9448)
  • dd03a25 chore: Make Lighthouse CI run on local build (#9447)
  • c6762a2 feat(mdx-loader): Remark plugin to report unused MDX / Markdown directives (#9394)
  • 56cc8e8 chore(ci): fix missing screenshots on Argos (#9445)
  • f80e1bd refactor(blog-plugin): blog archive reverse ordering of posts (#9438)
  • 911dfb4 chore(deps): bump actions/setup-node from 3 to 4 (#9440)
  • e525794 chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#9441)
  • aa958f0 fix(plugin-blog): blog archive should hide unlisted blog posts (#9437)
  • 2bb4fd0 chore(ci): use new Argos playwright integration (#9419)
  • f674e02 docs: update Kinsta deployment documentation (#9430)
  • 7ee2f75 chore: v3.0.0-rc.0 release (#9418)
  • 4e150d2 docs: add Docusaurus v3.0 upgrade guide (#9417)
  • 45f1a66 feat(core): support TypeScript + ESM configuration (#9317)
  • 336a44f chore: remove docusaurus-migrate (#9400)
  • ae31916 docs: fix typos in website/docs/i18n/i18n-git.mdx (#9396)

See the full diff

Package name: @docusaurus/theme-common The new version differs by 250 commits.
  • ca8b463 v3.0.0
  • 2121b71 fix bad path
  • 0b3be15 version 3.0.0 docs
  • 9658a5b 3.0.0 changelog
  • 1089741 docs: archive v2 docs versions + create 2.x docs (#9472)
  • 495c793 chore: v3.0.0-rc.1 release (#9453)
  • 4a0bd92 docs: v3 upgrade guide should mention MDX v1 compat options (#9452)
  • 7e456ec feat(mdx-loader): upgrade to MDX v3 + (#9451)
  • 8d19054 fix(theme): fix useWindowSize React hydration issue (#9446)
  • d07567e chore: revert Lighthouse numberOfRuns due to bad/verbose reporting (#9448)
  • dd03a25 chore: Make Lighthouse CI run on local build (#9447)
  • c6762a2 feat(mdx-loader): Remark plugin to report unused MDX / Markdown directives (#9394)
  • 56cc8e8 chore(ci): fix missing screenshots on Argos (#9445)
  • f80e1bd refactor(blog-plugin): blog archive reverse ordering of posts (#9438)
  • 911dfb4 chore(deps): bump actions/setup-node from 3 to 4 (#9440)
  • e525794 chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (#9441)
  • aa958f0 fix(plugin-blog): blog archive should hide unlisted blog posts (#9437)
  • 2bb4fd0 chore(ci): use new Argos playwright integration (#9419)
  • f674e02 docs: update Kinsta deployment documentation (#9430)
  • 7ee2f75 chore: v3.0.0-rc.0 release (#9418)
  • 4e150d2 docs: add Docusaurus v3.0 upgrade guide (#9417)
  • 45f1a66 feat(core): support TypeScript + ESM configuration (#9317)
  • 336a44f chore: remove docusaurus-migrate (#9400)
  • ae31916 docs: fix typos in website/docs/i18n/i18n-git.mdx (#9396)

See the full diff

Package name: postcss The new version differs by 138 commits.
  • 90208de Release 8.4.31 version
  • 58cc860 Fix carrier return parsing
  • 4fff8e4 Improve pnpm test output
  • cd43ed1 Update dependencies
  • caa916b Update dependencies
  • 8972f76 Typo
  • 11a5286 Typo
  • 45c5501 Release 8.4.30 version
  • bc3c341 Update linter
  • b2be58a Merge pull request #1881 from romainmenke/improve-sourcemap-performance--philosophical-spiny-dogfish-3eb029c1c8
  • 6a291d6 apply suggestions from code review
  • efa442c Update lib/map-generator.js
  • de33cf6 improve sourcemap performance
  • 1c6ad25 Highlight banner with lines
  • e10d5c0 More more detailed text below
  • 3ff5f5f Rephrase into
  • 272aae4 Remove old banner
  • 632e876 Update CI actions
  • cfa6cf4 Change EM banner
  • fee5448 Release 8.4.29 version
  • 3360c39 Update dependencies
  • ade4145 Merge pull request #1879 from idoros/ido/fix-location-offset
  • 9a7077b fix: node end offset
  • ce9f6b3 Merge pull request #1875 from coliff/patch-1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect
🦉 Improper Input Validation

@codesandbox CodeSandbox
Copy link

codesandbox bot commented Nov 8, 2023

Review or Edit in CodeSandbox

Open the branch in Web Editor • VS Code • Insiders

Open Preview

@netlify Netlify
Copy link

netlify bot commented Nov 8, 2023 •
edited

❌ Deploy Preview for tbd-website-developer failed.

Name Link
🔨 Latest commit 701ffe3
🔍 Latest deploy log https://app.netlify.com/sites/tbd-website-developer/deploys/654c20c037c94800084e1fd6

@ALRubinger ALRubinger requested review from dayhaysoos and removed request for angiejones November 8, 2023 23:59
@ALRubinger
Copy link
Contributor Author

@dayhaysoos testing Snyk auto upgrades - note that this bumps major version of Docusaurus to 3.0 and we may not elect to do that now. Let's talk about Snyk in general and this in particular on Discord.

@ALRubinger ALRubinger marked this pull request as draft November 9, 2023 00:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@dayhaysoos dayhaysoos Awaiting requested review from dayhaysoos dayhaysoos is a code owner

@angiejones angiejones Awaiting requested review from angiejones angiejones will be requested when the pull request is marked ready for review angiejones is a code owner

@EbonyLouis EbonyLouis Awaiting requested review from EbonyLouis EbonyLouis will be requested when the pull request is marked ready for review EbonyLouis is a code owner

@leordev leordev Awaiting requested review from leordev leordev will be requested when the pull request is marked ready for review leordev is a code owner

@blackgirlbytes blackgirlbytes Awaiting requested review from blackgirlbytes blackgirlbytes will be requested when the pull request is marked ready for review blackgirlbytes is a code owner

@acekyd acekyd Awaiting requested review from acekyd acekyd will be requested when the pull request is marked ready for review acekyd is a code owner

At least 1 approving review is required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@ALRubinger @snyk-bot