[Snyk] Fix for 2 vulnerabilities #14
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-SNYKGRADLEPLUGIN-8248487 - https://snyk.io/vuln/SNYK-JS-SNYKPHPPLUGIN-8248485
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-SNYKGRADLEPLUGIN-8248487
SNYK-JS-SNYKPHPPLUGIN-8248485
Release notes
Package name: snyk-gradle-plugin
-
4.5.0 - 2024-10-03
- handle gradle wrapper files for windows (#292) (2f5ee75)
-
4.4.0 - 2024-10-01
- support verbose gradle graphs for sbom generation (#290) (4a69447)
-
4.3.0 - 2024-09-12
- Update CI Window Machine (#289) (628c688)
-
4.2.0 - 2024-06-05
- add prodsec/security_scans (#282) (b4c107b)
-
4.1.0 - 2024-01-22
- added support for gradle 8 (#280) (a121cc1)
-
4.0.2 - 2024-01-17
- Use complete project path when filtering subprojects (#278) (e216d5c)
-
4.0.1 - 2023-11-30
- ci missing packages for publish new release (#276) (1596027)
- lint release file (#273) (ee41cb3)
- solved concurrency issue when looping a map (#272) (e8885b6)
-
4.0.0 - 2023-11-18
- cache sdkman to avoid all the temp unavailable errors (6f4d956)
- one depgraph had multiple changes, also on circleci (f9f59f5)
- updated dep graph fixture (c21d58c)
- updating tests (5747284)
- changing the way we name package dependency roots (3edf270)
- This major version bump is mostly cautionary, as existing consumers of this plugin ought not to encounter errors. However, it is a change in how the makeup of the dependency graph works, and therefore could be argued to require this version bump. Thus we err on the side of caution.
-
3.27.0 - 2023-06-19
- add secrets scanning (a41f3a4)
-
3.26.4 - 2023-04-28
- transitives when using gradle-normalize-deps (3e32407)
-
3.26.3 - 2023-03-28
-
3.26.2 - 2023-03-28
-
3.26.1 - 2023-03-22
-
3.26.0 - 2023-02-13
-
3.25.2 - 2023-01-13
-
3.25.1 - 2023-01-05
-
3.25.0 - 2023-01-05
-
3.24.6 - 2022-11-18
-
3.24.5 - 2022-11-14
-
3.24.4 - 2022-10-14
-
3.24.3 - 2022-10-13
-
3.24.2 - 2022-10-06
-
3.24.1 - 2022-10-04
-
3.24.0 - 2022-09-28
-
3.23.2 - 2022-09-28
-
3.23.1 - 2022-09-23
-
3.23.0 - 2022-09-23
-
3.22.2 - 2022-09-02
from snyk-gradle-plugin GitHub release notes4.5.0 (2024-10-03)
Features
4.4.0 (2024-10-01)
Features
4.3.0 (2024-09-12)
Features
4.2.0 (2024-06-05)
Features
4.1.0 (2024-01-22)
Features
4.0.2 (2024-01-17)
Bug Fixes
4.0.1 (2023-11-30)
Bug Fixes
4.0.0 (2023-11-18)
Bug Fixes
Features
BREAKING CHANGES
3.27.0 (2023-06-19)
Features
3.26.4 (2023-04-28)
Bug Fixes
Package name: snyk-php-plugin
-
1.10.0 - 2024-10-15
- add prodsec/security_scans (a2235c6)
- add secrets scanning (ba85128)
- pass command and args into spawn separately (9189f09)
- replace execSync with spawnSync (0d64ae5)
- update CODEOWNERS (82a960f)
- upgrade ci images (331dc00)
-
1.9.4 - 2022-10-14
- upgrade tslib from 1.13.0 to 1.14.1 (56f97e3)
-
1.9.3 - 2021-06-14
- upgrade tslib from 1.11.1 to 1.13.0 (b3b44d6)
-
1.9.2 - 2020-09-08
- add LICENSE file to distro (e4ea014)
- remove production env var from release (ea46451)
- update cli-interface and composer-lockfile-parser (b7e9298)
from snyk-php-plugin GitHub release notes1.10.0 (2024-10-15)
Features
1.9.4 (2022-10-14)
Bug Fixes
1.9.3 (2021-06-14)
Bug Fixes
1.9.2 (2020-09-08)
Bug Fixes
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Code Injection