New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade moment-timezone from 0.5.40 to 0.5.43 #4

Open

snyk-bot wants to merge 1 commit into master from snyk-upgrade-25b870b50e25706e7948c84917136703

snyk-bot commented May 18, 2023

Snyk has created this PR to upgrade moment-timezone from 0.5.40 to 0.5.43.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 3 versions ahead of your current version.
The recommended version was released 2 months ago, on 2023-03-31.

Release notes

Package name: moment-timezone

0.5.43 - 2023-03-31
- Updated data to IANA TZDB 2023c
0.5.42 - 2023-03-24
- Updated data to IANA TZDB 2023b
0.5.41 - 2023-02-25
- Updated moment npm dependency to 2.29.4 to remove automated warnings about insecure dependencies #1004.
  Moment Timezone still works with core Moment 2.9.0 and higher.
- Updated all dev dependencies including UglifyJS, which produces the minified builds.
- Added deprecation warning to the pre-built moment-timezone-with-data-2012-2022 bundles #1035.
  Use the rolling moment-timezone-with-data-10-year-range files instead.
0.5.40 - 2022-12-11
- Updated data to IANA TZDB 2022g

from moment-timezone GitHub release notes

Commit messages

Package name: moment-timezone

2448cdc Build moment-timezone 0.5.43
682aa63 Bump version to 0.5.43
e565ae4 Merge pull request Delete large package-lock.json files MagicMirrorOrg/MagicMirror#1053 from moment/data/2023c
8506787 data: Add 2023c
81ce252 Bump version in moment-timezone-utils.js
4116a04 Build moment-timezone 0.5.42
c4a1ce1 changelog: Add 0.5.42
d702a49 Bump version to 0.5.42
c008188 Merge pull request Weather (Current/Forecast): Use HTTPS instead of HTTP MagicMirrorOrg/MagicMirror#1047 from moment/data/2023b
f094113 tests: Fix country tests for 2023b
81e6c81 data: Add 2023b
a8d0fa1 Bump json5 via npm audit fix
98d3add Build moment-timezone 0.5.41
78cf3ad changelog: Add 0.5.41
cd35dc6 Bump version to 0.5.41
76f5a75 Re-number build tasks to match new running order
ace9a77 Fix broken badges in README
8080504 Bump moment dependency to 2.29.4 (More secure defaults. MagicMirrorOrg/MagicMirror#1004)
61b14d6 Add deprecation warning to 2012-2022 pre-built files (ipwhitelist not working MagicMirrorOrg/MagicMirror#1036)
fc29369 Bump remaining grunt-contrib packages
c83479e tests: Fix guess tests for 2023
e501621 Bump y18n from 4.0.0 to 4.0.3 (Application shuts down in RPI3 MagicMirrorOrg/MagicMirror#1026)
0a7b5dd Bump shelljs and grunt-contrib-jshint (Feature/indoor humidity MagicMirrorOrg/MagicMirror#1025)
6078ad6 Bump ejs and grunt-contrib-nodeunit (npm is not installing dependencies is missing any help ? MagicMirrorOrg/MagicMirror#1013)

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs


          fix: upgrade moment-timezone from 0.5.40 to 0.5.43

f504b56

Snyk has created this PR to upgrade moment-timezone from 0.5.40 to 0.5.43.

See this package in npm:
https://www.npmjs.com/package/moment-timezone

See this project in Snyk:
https://app.snyk.io/org/clarkcj/project/28b8840a-f008-498b-9781-fe660bc9a3fe?utm_source=github&utm_medium=referral&page=upgrade-pr

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet