Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency async to v3 - autoclosed #136

Closed
wants to merge 1 commit into from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Apr 9, 2022

This PR contains the following updates:

Package Type Update Change
async (source) devDependencies major ^2.0.0-rc.4 -> ^3.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 9.1 CVE-2019-10744 #10
High 7.8 CVE-2021-43138 #135
High 7.4 CVE-2020-8203 #67
High 7.2 CVE-2021-23337 #27
Medium 5.3 CVE-2020-28500 #54

Release Notes

caolan/async

v3.2.2

Compare Source

  • Fix potential prototype pollution exploit

v3.2.1

Compare Source

v3.2.0

Compare Source

v3.1.1

Compare Source

  • Allow redefining name property on wrapped functions.

v3.1.0

Compare Source

  • Added q.pushAsync and q.unshiftAsync, analagous to q.push and q.unshift, except they always do not accept a callback, and reject if processing the task errors. (#​1659)
  • Promises returned from q.push and q.unshift when a callback is not passed now resolve even if an error ocurred. (#​1659)
  • Fixed a parsing bug in autoInject with complicated function bodies (#​1663)
  • Added ES6+ configuration for Browserify bundlers (#​1653)
  • Various doc fixes (#​1664, #​1658, #​1665, #​1652)

v3.0.1

Compare Source

Bug fixes

  • Fixed a regression where arrays passed to queue and cargo would be completely flattened. (#​1645)
  • Clarified Async's browser support (#​1643)

v3.0.0

Compare Source

The async/await release!

There are a lot of new features and subtle breaking changes in this major version, but the biggest feature is that most Async methods return a Promise if you omit the callback, meaning you can await them from within an async function.

const results = await async.mapLimit(urls, 5, async url => {
    const resp = await fetch(url)
    return resp.body
})

Breaking Changes

  • Most Async methods return a Promise when the final callback is omitted, making them await-able! (#​1572)
  • We are now making heavy use of ES2015 features, this means we have dropped out-of-the-box support for Node 4 and earlier, and many old versions of browsers. (#​1541, #​1553)
  • In queue, priorityQueue, cargo and cargoQueue, the "event"-style methods, like q.drain and q.saturated are now methods that register a callback, rather than properties you assign a callback to. They are now of the form q.drain(callback). If you do not pass a callback a Promise will be returned for the next occurrence of the event, making them await-able, e.g. await q.drain(). (#​1586, #​1641)
  • Calling callback(false) will cancel an async method, preventing further iteration and callback calls. This is useful for preventing memory leaks when you break out of an async flow by calling an outer callback. (#​1064, #​1542)
  • during and doDuring have been removed, and instead whilst, doWhilst, until and doUntil now have asynchronous test functions. (#​850, #​1557)
  • limits of less than 1 now cause an error to be thrown in queues and collection methods. (#​1249, #​1552)
  • memoize no longer memoizes errors (#​1465, #​1466)
  • applyEach/applyEachSeries have a simpler interface, to make them more easily type-able. It always returns a function that takes in a single callback argument. If that callback is omitted, a promise is returned, making it awaitable. (#​1228, #​1640)

New Features

  • Async generators are now supported in all the Collection methods. (#​1560)
  • Added cargoQueue, a queue with both concurrency and payload size parameters. (#​1567)
  • Queue objects returned from queue now have a Symbol.iterator method, meaning they can be iterated over to inspect the current list of items in the queue. (#​1459, #​1556)
  • A ESM-flavored async.mjs is included in the async package. This is described in the package.json "module" field, meaning it should be automatically used by Webpack and other compatible bundlers.

Bug fixes

Other


v2.6.4

Compare Source

v2.6.3

Compare Source

v2.6.2

Compare Source


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Apr 9, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency async to v3 Update dependency async to v3 - autoclosed May 8, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/async-3.x branch May 8, 2022 02:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants