[Snyk] Upgrade np from 6.2.1 to 6.5.0 #16

snyk-bot · 2021-09-24T03:42:38Z

Snyk has created this PR to upgrade np from 6.2.1 to 6.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 9 versions ahead of your current version.
The recommended version was released a year ago, on 2020-08-29.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-URLREGEX-569472	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: np

6.5.0 - 2020-08-29
- Create release draft even when pushing to protected branches failed (#560) 3fc1e77
v6.4.0...v6.5.0
6.4.0 - 2020-08-09
- Add --test-script flag to run custom tests before publish (#557) 0c46a2f
- Add support for --no-2fa flag (#559) 0638d27
- Add support for specifying release branch (#558) b8b1976
v6.3.2...v6.4.0
6.3.2 - 2020-07-11
- Regression fix for tag not being taken when specified in CLI (#555) f29295d
v6.3.1...v6.3.2
6.3.1 - 2020-07-07
- Fix a regression from 6.3.0 (#552) 59edfe6
v6.3.0...v6.3.1
6.3.0 - 2020-07-05
- Fix specifying a custom version via UI (#546) 6b68244
- Respect preId in .npmrc for release tags (#547) aebd8ab
v6.2.5...v6.3.0
6.2.5 - 2020-06-27
- Update npm-name dependency (#545) e2cedde
v6.2.4...v6.2.5
6.2.4 - 2020-06-07
- Fix releaseDraft setting not working when set from config not CLI (#540) 81b0001
v6.2.3...v6.2.4
6.2.3 - 2020-04-27
- Fix 2FA prompt when the package exists (#505) 4a32039
v6.2.2...v6.2.3
6.2.2 - 2020-04-23
- Avoid scoped repo message for private registries (#529) a1d96c1
v6.2.1...v6.2.2
6.2.1 - 2020-04-12
- Fix scoped repo prompt showing even if package has already been published (#524) 1cf7d78
- Correctly detect if np is not run in a package (#512) b5a7dcf
v6.2.0...v6.2.1

from np GitHub release notes

Commit messages

Package name: np

556b52c 6.5.0
3fc1e77 Create release draft even when pushing to protected branches failed (#560)
7e64cc6 6.4.0
0c46a2f Add `--test-script` flag to run custom tests before publish (#557)
0638d27 Add support for `--no-2fa` flag (#559)
b8b1976 Add support for specifying release branch (#558)
6be4223 6.3.2
f29295d Regression fix for tag not being taken when specified in CLI (#555)
f0fe085 6.3.1
59edfe6 Fix a regression from 6.3.0 (#552)
fac6558 Add pre-publish task tests (#509)
5b0940c 6.3.0
6b68244 Fix specifying a custom version via UI (#546)
add34d2 Readme tweaks
aebd8ab Respect `preId` in `.npmrc` for release tags (#547)
1f701cd 6.2.5
e2cedde Update npm-name dependency (#545)
e137cdd 6.2.4
81b0001 Fix `releaseDraft` setting not working when set from config not CLI (#540)
f72c30e 6.2.3
4a32039 Fix 2FA prompt when the package exists (#505)
703fd1e 6.2.2
a1d96c1 Avoid scoped repo message for private registries (#529)
c5fd97d Use HTTPS links