Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade browser-sync from 2.24.5 to 2.26.7 #4

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

@snyk-bot snyk-bot commented May 6, 2020

Snyk has created this PR to upgrade browser-sync from 2.24.5 to 2.26.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 15 versions ahead of your current version.
  • The recommended version was released a year ago, on 2019-06-07.

The recommended version fixes:

Severity Issue Exploit Maturity
Denial of Service (DoS)
SNYK-JS-AXIOS-174505
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905
No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:braces:20180219
Proof of Concept
Release notes
Package name: browser-sync
  • 2.26.7 - 2019-06-07

    v2.26.7

  • 2.26.6 - 2019-06-07

    v2.26.6

  • 2.26.5 - 2019-04-24

    v2.26.5

  • 2.26.4 - 2019-04-22

    v2.26.4

  • 2.26.3 - 2018-10-13

    fixes

    • application/wasm support - fixes #1598 d60cd91
    • deps - ensure previous users of browser-sync-client are not affected by new structure - fixes #1615 0a2ff5a
    • npm audit fixes across all packages - fixes #1618 9f3fea4
  • 2.26.2 - 2018-10-13

    v2.26.2

  • 2.26.1 - 2018-10-13

    v2.26.1

  • 2.26.0 - 2018-10-06

    these notes describe the change from 2.24.6 -> 2.26.0

    fixes

    • Removing default logger prefix [BS] - fixes #1607 257fba6
    • case-insensitive matching on domain key in proxy responses dacfc8b
    • bump chokidar fixing fsevents build - closes #1613 11729cc
    • Unexpected Page Reload after Pausing in Debugger - fixes #1591 06ee1b7
    • scroll - add missing init method for window.name method of scroll restoring - fixes #1586 #1457 #1457 9e96603
    • proxy Port gets unnecesarily rewritten in Proxy - fixes #1577 48286e0

    chore

    • move cypress to top-level dep 0d4ab81
    • package-lock files 900e23e
    • change API of option transforms ef12e9a

    lerna

    feature

    • adding 'listen' option to restrict binding of interfaces d641916

    docs

    • emphasize a couple of points - fixes #1461 cf0febd
    • added additional note about httpModule option - fixes #1485 16487ad

    deps

    • npm audit for localtunnel - fixes #1587 27f2173
    • easy-extender@2.3.4 cypress@3.1.0 supertest@3.1.0 a6578a3
  • 2.25.3-alpha.0 - 2018-10-06

    v2.25.3-alpha.0

  • 2.25.2-alpha.0 - 2018-10-06

    v2.25.2-alpha.0

  • 2.25.1-alpha.0 - 2018-10-06
  • 2.25.0 - 2018-10-06
  • 2.25.0-alpha.0 - 2018-09-17
  • 2.24.7 - 2018-08-26
  • 2.24.6 - 2018-07-21
  • 2.24.5 - 2018-06-24
from browser-sync GitHub release notes
Commit messages
Package name: browser-sync
  • 2191369 v2.26.7
  • 53f9b36 docs: readme
  • 0b3d98b v2.26.6
  • fdfc681 tests: add e2e tests to package.json
  • c56cfd9 Merge pull request #1698 from emeitch/fix_deprecated_header
  • 2fd598f Merge pull request #1690 from XhmikosR/xmr-ci
  • 841ccd5 Merge pull request #1694 from coliff/patch-1
  • 209c9c1 Merge pull request #1697 from gaards/update-localtunnel
  • 87bee4b Use getHeaders or _headers
  • 77abfd3 Update localtunnel
  • 1f073f9 Remove gittip from README (service closed down)
  • 51792b1 AppVeyor tweaks.
  • 9c9d71a CI: Add Node.js 12 and 10.
  • 6dd2d56 v2.26.5
  • 62007c8 SyntaxError in micromatch when starting browser-sync - fixes #1682
  • 47a4d1b v2.26.4
  • 05a58db deps: fixes #1677 #1671 #1659 #1648
  • 35035df deps: removed nodemon since it includes flat-stream (security)
  • 1b2eab5 Merge pull request #1634 from mxschmitt/patch-1
  • e35e5dc fix(ui): updated dead links and moved to https
  • 85c4ba7 examples: server + proxy
  • 924d5e7 v2.26.3
  • d60cd91 fix: application/wasm support in Chrome - fixes #1598
  • f95dd7a v2.26.2

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment