Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

fix(dependency maintenance): update dependency @nestjs/core to v9 [security] #820

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

fix(dependency maintenance): update dependency @nestjs/core to v9 [security] #820

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Mar 16, 2023 •
edited

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
@nestjs/core (source) 8.2.6 -> 9.0.5 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2023-26108

Versions of the package @​nestjs/core before 9.0.5 are vulnerable to Information Exposure via the StreamableFile pipe. Exploiting this vulnerability is possible when the client cancels a request while it is streaming a StreamableFile, the stream wrapped by the StreamableFile will be kept open.

Release Notes

nestjs/nest (@​nestjs/core)

v9.0.5

Compare Source

v9.0.5 (2022-07-20)

Bug fixes
Enhancements
  • microservices
  • platform-express, platform-fastify
Dependencies
Committers: 4

v9.0.4

Compare Source

v9.0.3

Compare Source

v9.0.2

Compare Source

v9.0.2

Bug fixes
Enhancements
Dependencies
Committers: 3

v9.0.1

Compare Source

v9.0.0

Compare Source

v9.0.0 (2022-07-08)

Article: https://trilon.io/blog/nestjs-9-is-now-available
Migration guide: https://docs.nestjs.com/migration-guide
Features
Bug fixes
Enhancements
Dependencies
Committers: 13

v8.4.7

Compare Source

v8.4.7 (2022-06-14)

Enhancements
  • microservices
  • common
Dependencies
Committers: 5

v8.4.6

Compare Source

v8.4.5

Compare Source

v8.4.5 (2022-05-13)

Bug fixes
Enhancements
Dependencies
Committers: 6

v8.4.4

Compare Source

v8.4.4 (2022-04-07)

Bug fixes
Enhancements
Dependencies
Committers: 5

v8.4.3

Compare Source

v8.4.2

Compare Source

v8.4.1

Compare Source

v8.4.1 (2022-03-14)

Bug fixes
Enhancements
Dependencies
Committers: 6

v8.4.0

Compare Source

v8.4.0 (2022-03-01)

Features
Bug fixes
Enhancements
Dependencies

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate
Copy link
Contributor Author

renovate bot commented Mar 16, 2023 •
edited

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: @sanofi-iadc/whispr@4.17.0
npm ERR! Found: @nestjs/common@8.2.6
npm ERR! node_modules/@nestjs/common
npm ERR!   @nestjs/common@"8.2.6" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @nestjs/common@"^9.0.0" from @nestjs/core@9.0.5
npm ERR! node_modules/@nestjs/core
npm ERR!   @nestjs/core@"9.0.5" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-04-10T11_09_34_171Z-debug-0.log

@renovate renovate bot changed the title chore(dependency maintenance): update dependency @nestjs/core to 9.0.5 [security] fix(dependency maintenance): update dependency @nestjs/core to v9 [security] Mar 23, 2023
@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch 3 times, most recently from 2bdbf7c to 9b205a6 Compare February 26, 2024 10:55
@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch 2 times, most recently from 126edba to b1ea3fe Compare March 28, 2024 06:28
@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch 12 times, most recently from 0cdc508 to 296fcf9 Compare April 10, 2024 11:09
@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch from 296fcf9 to 9561f21 Compare May 21, 2024 06:26
@renovate Renovate
Copy link
Contributor Author

renovate bot commented May 21, 2024 •
edited

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: @sanofi-iadc/whispr@4.17.5
npm ERR! Found: @nestjs/common@8.2.6
npm ERR! node_modules/@nestjs/common
npm ERR!   @nestjs/common@"8.2.6" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @nestjs/common@"^9.0.0" from @nestjs/core@9.0.5
npm ERR! node_modules/@nestjs/core
npm ERR!   @nestjs/core@"9.0.5" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-06-04T11_59_13_084Z-debug-0.log

@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch from 9561f21 to 1df6340 Compare May 21, 2024 06:34
@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch 7 times, most recently from 6c751c1 to dccba09 Compare June 4, 2024 11:51
@renovate renovate bot force-pushed the renovate/npm-@nestjs/core-vulnerability branch from dccba09 to ae0b5ea Compare June 4, 2024 11:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants