[Snyk] Upgrade: chai, diff, open, safe-regex-test, ts-loader, typescript, yarn #75
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯♂ The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
chai
from 4.3.4 to 4.5.0 | 9 versions ahead of your current version | a month ago
on 2024-07-25
diff
from 5.1.0 to 5.2.0 | 1 version ahead of your current version | 7 months ago
on 2024-02-12
open
from 8.4.0 to 8.4.2 | 2 versions ahead of your current version | 2 years ago
on 2023-02-20
safe-regex-test
from 1.0.0 to 1.0.3 | 3 versions ahead of your current version | 7 months ago
on 2024-02-06
ts-loader
from 9.3.1 to 9.5.1 | 7 versions ahead of your current version | 10 months ago
on 2023-11-15
typescript
from 4.4.4 to 4.9.5 | 452 versions ahead of your current version | 2 years ago
on 2023-01-30
yarn
from 1.22.19 to 1.22.22 | 3 versions ahead of your current version | 6 months ago
on 2024-03-09
Issues fixed by the recommended upgrade:
SNYK-JS-GETFUNCNAME-5923417
Release notes
Package name: chai
v4.4.1...v4.5.0
What's Changed
Full Changelog: v4.4.1...v4.5.0
What's Changed
??
for node compat by @ 43081j in #1574Full Changelog: v4.4.0...v4.4.1
What's Changed
Full Changelog: v4.3.10...v4.4.0
Package name: diff
Get ready for 5.2.0 release
v5.3.0
Update our docs on doing releases to something I could actually get working
The instructions with yeoman just errored out for me
… (#365)
Co-authored-by: Tony Spataro [email protected]
Package name: open
v8.4.1...v8.4.2
allowNonzeroExitCode
option (#296) 051edcaapp
argument with WSL (#295) 4cf1a6dv8.4.0...v8.4.1
v8.3.0...v8.4.0
Package name: safe-regex-test
v1.0.3
v1.0.2
v1.0.1
v1.0.0
Package name: ts-loader
enhanced-resolve
- thanks @ manuth.cjs
,.mjs
,.cts
and.mts
Files [#1503] - thanks @ manuthPackage name: typescript
Package name: yarn
Fixes a punycode warning.
Fixes a hoisting issue when transitive dependencies themselves listed aliases as dependencies.
Warning
This release is missing a couple of artifacts (the .msi/.rpm/.deb/.asc files); we're working on fixing this.
Fixes an issue in the v1.22.20 when calling Yarn from a project subfolder, outside of a Corepack context.
Added a
SKIP_YARN_COREPACK_CHECK
environment variable to skip the Corepack check.Warning
This release is missing a couple of artifacts (the .msi/.rpm/.deb/.asc files); we're working on fixing this.
Important: Punycode is now embed within the bundle, as it has been deprecated by Node.js and will be removed in a future version.
A message will be displayed when Yarn 1.22 notices that the local project has a package.json file referencing a non-1.x Yarn release via the
packageManager
field. The message will explain that the project is intended to be used with Corepack.The
yarn-error.log
files won't be generated anymore, as we don't process non-critical 1.x bug reports (we however process all bugs reported on https://github.com/yarnpkg/berry; we just released the 4.0.2 release there).The
yarn set version x.y.z
command will now install the exactx.y.z
version (prior to this change it used to first install the latest version, and only in a second step would it downgrade tox.y.z
; this was causing issues when we bump the minimal Node.js version we support, as runningyarn set version 3.6.4
wouldn't work on Node 16).Prevents crashes when reading from an empty
.yarnrc.yml
file.Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information: