Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Fix for 1 vulnerabilities #9

Open
wants to merge 1 commit into
base: Master
Choose a base branch
from

Conversation

FaizAlam
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 768/1000
Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5
Uncaught Exception
SNYK-JS-YAML-5458867
Yes Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: postcss-cli The new version differs by 45 commits.
  • e5419b5 10.0.0
  • d779476 Add tests for ESM config
  • a1e547e Fix watch test
  • 7a8d21e Update dependency postcss-load-config to v4 (#437)
  • e1751d0 Update dependency prettier to ~2.7.0 (#436)
  • eb45758 BREAKING: Drop Node 12 support (#438)
  • 82548ca Update dependency prettier to ~2.6.0 (#431)
  • 0062882 Update actions/checkout action to v3 (#430)
  • 62d9505 Update actions/setup-node action to v3 (#429)
  • 0736993 Update dependency globby to v13 (#427)
  • c9f6905 9.1.0
  • b06fa80 feat: only save files if they are unchanged (#417)
  • c7cc0bb Update dependency prettier to ~2.5.0 (#414)
  • 6256aa7 Refactor watch tests (#416)
  • 0184968 Update eslint & eslint-config-problems (#413)
  • 538b6f5 9.0.2
  • ecf2bee chore: use picocolors for colored terminal output (#409)
  • 66b7c80 Exclude test files from npm package
  • 392c4f5 9.0.1
  • 3143642 Actually exit when writing to stdout in watch mode
  • 49db822 Use nanocolors
  • 96a7dc6 Remove bin/ from `files` in package.json
  • b90bd7f 9.0.0
  • 201205c Run watch tests on Linux CI (#396)

See the full diff

Package name: tailwindcss The new version differs by 250 commits.
  • bd03dec 3.1.5
  • 13c2ad0 update changelog
  • 1110d92 Update changelog
  • 62f0791 Add more explicit types for the default theme (#8780)
  • 6e75e6e Update esbuild to version 0.14.48
  • 5d04331 Update eslint-plugin-prettier to version 4.2.1
  • 10e1b39 Update jest to version 28.1.2
  • 6729524 Support font-weight in font-size utilities (#8763)
  • 1318cb6 Update changelog
  • 1029775 Add support for alpha values in safelist (#8774)
  • f135bfa chore: Set permissions for GitHub actions (#8550)
  • 8494f75 Don’t prefix selectors in arbitrary variants (#8773)
  • 5191ec1 Fix usage of special-character prefixes (#8772)
  • c8c4852 Update changelog
  • 445970d Fix usage of postcss.config.js in standalone CLI (#8769)
  • d4f1f15 Allows fallback values in plugin API helpers (#8762)
  • c47e666 Update postcss-load-config to version 4.0.1 (#8686)
  • 7b03ee9 Update cssnano to version 5.1.12
  • 60a0ae2 Update resolve to version 1.22.1
  • 340cca9 Update eslint to version 8.18.0
  • 1a30ca0 3.1.4
  • 9f479f2 update changelog
  • 9c9ce36 Update prettier to version 2.7.1
  • 35b070e Fix typo in changelog

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants