Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency mysql2 to v3.9.7 [security] - autoclosed #13489

Closed
wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 23, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
mysql2 (source) 3.9.6 -> 3.9.7 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2024-21511

Versions of the package mysql2 before 3.9.7 are vulnerable to Arbitrary Code Injection due to improper sanitization of the timezone parameter in the readCodeFor function by calling a native MySQL Server date/time function.


Release Notes

sidorares/node-mysql2 (mysql2)

v3.9.7

Compare Source

Bug Fixes
  • security: sanitize timezone parameter value to prevent code injection (#​2608) (7d4b098)

Configuration

πŸ“… Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ”• Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Apr 23, 2024
Copy link
Contributor Author

renovate bot commented Apr 23, 2024

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

β™» Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm error code ERESOLVE
npm error ERESOLVE could not resolve
npm error
npm error While resolving: @nestjs/graphql@12.1.1
npm error Found: ts-morph@22.0.0
npm error node_modules/ts-morph
npm error   dev ts-morph@"22.0.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peerOptional ts-morph@"^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^20.0.0 || ^21.0.0" from @nestjs/graphql@12.1.1
npm error node_modules/@nestjs/graphql
npm error   dev @nestjs/graphql@"12.1.1" from the root project
npm error   peer @nestjs/graphql@"^12.0.0" from @nestjs/apollo@12.1.0
npm error   node_modules/@nestjs/apollo
npm error     dev @nestjs/apollo@"12.1.0" from the root project
npm error
npm error Conflicting peer dependency: ts-morph@21.0.1
npm error node_modules/ts-morph
npm error   peerOptional ts-morph@"^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^20.0.0 || ^21.0.0" from @nestjs/graphql@12.1.1
npm error   node_modules/@nestjs/graphql
npm error     dev @nestjs/graphql@"12.1.1" from the root project
npm error     peer @nestjs/graphql@"^12.0.0" from @nestjs/apollo@12.1.0
npm error     node_modules/@nestjs/apollo
npm error       dev @nestjs/apollo@"12.1.0" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /tmp/renovate/cache/others/npm/_logs/2024-05-02T08_56_46_290Z-eresolve-report.txt

npm error A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-05-02T08_56_46_290Z-debug-0.log

@coveralls
Copy link

Pull Request Test Coverage Report for Build ff63b8bb-8319-4abb-912f-628bb0b7af54

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 92.124%

Totals Coverage Status
Change from base Build b32e22d6-f72e-486a-85a2-044c2b5df08f: 0.0%
Covered Lines: 6737
Relevant Lines: 7313

πŸ’› - Coveralls

@renovate renovate bot force-pushed the renovate/npm-mysql2-vulnerability branch 2 times, most recently from 0a95b9c to dad164e Compare April 30, 2024 11:00
@renovate renovate bot changed the title fix(deps): update dependency mysql2 to v3.9.7 [security] chore(deps): update dependency mysql2 to v3.9.7 [security] Apr 30, 2024
@renovate renovate bot force-pushed the renovate/npm-mysql2-vulnerability branch from dad164e to 57e660f Compare May 2, 2024 08:56
@renovate renovate bot changed the title chore(deps): update dependency mysql2 to v3.9.7 [security] chore(deps): update dependency mysql2 to v3.9.7 [security] - autoclosed May 2, 2024
@renovate renovate bot closed this May 2, 2024
@renovate renovate bot deleted the renovate/npm-mysql2-vulnerability branch May 2, 2024 09:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant