[Snyk] Security upgrade resend from 3.5.0 to 4.2.0 - #121
Power-Maverick wants to merge 1 commit into
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-20244952 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-20244950 - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-20244948
|
This major version upgrade from v3 to v4 introduces breaking changes, most notably in the naming of API parameters. Key Breaking Change:
This change requires direct code modification to maintain correct behavior. Given the lack of a formal changelog for the v4.0.0 release, there may be other undocumented changes. Source: GitHub Issue discussing the Recommendation:
|
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-BRACEEXPANSION-20244952
SNYK-JS-BRACEEXPANSION-20244950
SNYK-JS-BRACEEXPANSION-20244948
Breaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Uncontrolled Recursion
🦉 Regular Expression Denial of Service (ReDoS)