[Snyk] Upgrade ts-node from 8.4.1 to 10.9.1 #4

MarcelRaschke · 2022-08-20T03:02:28Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade ts-node from 8.4.1 to 10.9.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

The recommended version is 34 versions ahead of your current version.
The recommended version was released a month ago, on 2022-07-14.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-608086	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-LODASH-567746	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-YARGSPARSER-560381	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-PATHVAL-596926	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-559764	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Prototype Pollution SNYK-JS-FLAT-596927	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Improper Input Validation SNYK-JS-ACTIONSCORE-2980270	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
Improper Input Validation SNYK-JS-ACTIONSCORE-1015402	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ts-node

10.9.1 - 2022-07-14
Fixed
- Workaround nodejs bug introduced in 18.6.0 (#1838) @ cspotcode
  - Only affects projects on node >=18.6.0 using --esm
  - Older versions of node and projects without --esm are unaffected
v10.9.0...v10.9.1
https://github.com/TypeStrong/ts-node/milestone/18?closed=1
10.9.0 - 2022-07-13
Added
- --project accepts path to a directory containing a tsconfig.json (#1829, #1830) @ cspotcode
  - previously it required an explicit filename
- Added helpful error message when swc version is too old to support our configuration (#1802) @ cspotcode
- Added experimentalTsImportSpecifiers option which allows using voluntary .ts file extensions in import specifiers (undocumented except for API docs) (#1815) @ cspotcode
Fixed
- Fixed bug where child_process.fork() would erroneously execute the parent's entrypoint script, not the intended child script (#1812, #1814) @ devversion
- Fixed support for jsx modes "react-jsx" and "react-jsxdev" in swc transpiler (#1800, #1802) @ cspotcode
- Fixed support for import assertions in swc transpiler (#1817, #1802) @ cspotcode
- Fixed bug where calling repl.evalCode() with code not ending in a newline would not update the typechecker accordingly (#1764, #1824) @ cspotcode
v10.8.2...v10.9.0
https://github.com/TypeStrong/ts-node/milestone/16?closed=1
10.8.2 - 2022-07-02
Fixed
- Revert "Use file URL for source map paths" (#1821) @ cspotcode
  - Fixes #1790: ts-node 10.8.1 regression where nyc code coverage reports had incorrect paths
  - Fixes #1797: ts-node 10.8.1 regression where breakpoints did not hit in VSCode debugging
- Allow JSON imports in node 16.15 and up (#1792) @ queengooborg
  - JSON imports were already supported in v17.5 and up
  - this change extends support to >=16.15.0,<17.0.0
  - These version ranges match vanilla node's support for JSON imports
v10.8.1...v10.8.2
https://github.com/TypeStrong/ts-node/milestone/15?closed=1
10.8.1 - 2022-06-03
Fixed
- Fixed #1769: source URLs in source map cache were malformed on Windows, affecting code coverage reports (#1769, #1771) @ PaperStrike
- Fixed #1778: typechecker was erronously resolving imports from ESM files as if they were from CJS files (#1778, #1782) @ cspotcode
v10.8.0...v10.8.1
https://github.com/TypeStrong/ts-node/milestone/14
10.8.0 - 2022-05-21
Read more
10.7.0 - 2022-03-06
Questions about this release? Ask in the official discussion thread: #1680

Added
- Adds --esm flag, option, and ts-node-esm binary (#1258, #1655)
  - Enables full esm support; no need for --loader nor NODE_OPTIONS
  - Use shebang #!/usr/bin/env ts-node-esm, run ts-node --esm, or add to your tsconfig.json: "ts-node": {"esm": true}
Changed
- Unflag ESM json modules on node >=17.5.0 (#1661, #1665) @ Jamesernator
  - no longer requires --experimental-json-modules
- Lazy-load dependencies to improve startup responsiveness. (#1676)
Fixed
- Fixed bug where "compiler", "transpiler", and swc backend would not resolve relative to the tsconfig.json that declared them (#1662, #1655)
  - Enables reusable tsconfig.json shared via node module to include necessary dependencies
v10.6.0...v10.7.0
https://github.com/TypeStrong/ts-node/milestone/11
10.6.0 - 2022-03-01
Read more
10.5.0 - 2022-02-07
Read more
10.4.0 - 2021-10-22
Added
- Adds support for targets "es2020" and "es2021" to swc transpiler (#1521)
- Adds automatic target downgrade when using older versions of swc (#1521)
  - If tsconfig specifies es2020, but your version of swc only supports up to es2019, ts-node will automatically switch to es2019 instead of throwing an error
Changed
- Improves types and API docs for creatEsmHooks (API docs) (#1506, #1529)
Fixed
- Fix #1526: data URL handling in new ESM loader hooks API (#1526, #1529)
v10.3.1...v10.4.0
https://github.com/TypeStrong/ts-node/milestone/8
10.3.1 - 2021-10-21
Fixed
- Add version check to use new loader hooks API for node >=16.12.0 (#1522) @ shrujalshah28
v10.3.0...v10.3.1
https://github.com/TypeStrong/ts-node/milestone/7
10.3.0 - 2021-10-11
10.2.1 - 2021-08-18
10.2.0 - 2021-08-08
10.1.0 - 2021-07-09
10.0.0 - 2021-05-23
9.1.1 - 2020-12-07
9.1.0 - 2020-12-03
9.0.0 - 2020-08-21
8.10.2 - 2020-05-28
8.10.1 - 2020-05-03
8.10.0 - 2020-05-03
8.9.1 - 2020-04-26
8.9.0 - 2020-04-20
8.8.2 - 2020-04-05
8.8.1 - 2020-03-22
8.8.0 - 2020-03-21
8.7.0 - 2020-03-02
8.6.2 - 2020-01-13
8.6.1 - 2020-01-10
8.6.0 - 2020-01-10
8.5.4 - 2019-11-28
8.5.3 - 2019-11-28
8.5.2 - 2019-11-15
8.5.0 - 2019-11-11
8.4.1 - 2019-09-16