Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade ajv from 5.5.2 to 8.11.0 #36

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade ajv from 5.5.2 to 8.11.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


Warning: This is a major version upgrade, and may be a breaking change.

  • The recommended version is 97 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2022-03-22.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-AJV-584908
619/1000
Why? Has a fix available, CVSS 8.1
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: ajv
  • 8.11.0 - 2022-03-22

    Use root schemaEnv when resolving references in oneOf (#1901, @ asprouse)

    Only use equal function in generated code when it is used (#1922, @ bhvngt)

  • 8.10.0 - 2022-02-04

    uriResolver option (@ zekth, #1862)

  • 8.9.0 - 2022-01-15

    Option code.esm to generate ESM exports for standalone validation functions (@ rehanvdm, #1861)
    Support discriminator keyword with $ref in oneOf subschemas (@ dfeufel, #1815)

  • 8.8.2 - 2021-11-21

    Use full RegExp string (with flags) as cache key, related to ajv-validator/ajv-keywords#220

  • 8.8.1 - 2021-11-16

    Fix minContains: 0 (#1819)

  • 8.8.0 - 2021-11-13

    Fix browser bundles in cdnjs
    regExp option allowing to specify alternative RegExp engine, e.g. re2 (@ efebarlas)

  • 8.7.1 - 2021-11-08

    Publish Ajv bundle for JSON Schema 2020-12 to cdnjs.com

  • 8.7.0 - 2021-11-08

    Update JSON Schema Test Suite.
    Change minContains: 0 now correctly allows empty array.

  • 8.6.3 - 2021-09-12

    Fix $ref resolution for schemas without $id (@ rbuckton, #1725)
    Support standalone module import from ESM modules without using .default property (@ bhvngt, #1757)
    Update code for breaking TS change - error in catch has type unknown (#1760)

  • 8.6.2 - 2021-07-15

    Fix JTD serialiser (#1691)

  • 8.6.1 - 2021-07-04
  • 8.6.0 - 2021-06-06
  • 8.5.0 - 2021-05-20
  • 8.4.0 - 2021-05-14
  • 8.3.0 - 2021-05-09
  • 8.2.0 - 2021-04-27
  • 8.1.0 - 2021-04-11
  • 8.0.5 - 2021-04-02
  • 8.0.4 - 2021-04-02
  • 8.0.3 - 2021-04-01
  • 8.0.2 - 2021-03-31
  • 8.0.1 - 2021-03-27
  • 8.0.0 - 2021-03-27
  • 8.0.0-beta.4 - 2021-03-23
  • 8.0.0-beta.3 - 2021-03-21
  • 8.0.0-beta.2 - 2021-03-16
  • 8.0.0-beta.1 - 2021-03-15
  • 8.0.0-beta.0 - 2021-03-13
  • 7.2.4 - 2021-03-26
  • 7.2.3 - 2021-03-20
  • 7.2.2 - 2021-03-20
  • 7.2.1 - 2021-03-07
  • 7.2.0 - 2021-03-07
  • 7.1.1 - 2021-02-17
  • 7.1.0 - 2021-02-11
  • 7.0.4 - 2021-02-01
  • 7.0.3 - 2021-01-02
  • 7.0.2 - 2020-12-19
  • 7.0.1 - 2020-12-16
  • 7.0.0 - 2020-12-15
  • 7.0.0-rc.5 - 2020-12-14
  • 7.0.0-rc.4 - 2020-12-14
  • 7.0.0-rc.3 - 2020-12-14
  • 7.0.0-rc.2 - 2020-12-13
  • 7.0.0-rc.1 - 2020-12-09
  • 7.0.0-rc.0 - 2020-12-06
  • 7.0.0-beta.9 - 2020-12-02
  • 7.0.0-beta.8 - 2020-11-29
  • 7.0.0-beta.7 - 2020-11-22
  • 7.0.0-beta.6 - 2020-11-16
  • 7.0.0-beta.5 - 2020-11-15
  • 7.0.0-beta.4 - 2020-11-10
  • 7.0.0-beta.3 - 2020-11-05
  • 7.0.0-beta.2 - 2020-10-24
  • 7.0.0-beta.1 - 2020-10-10
  • 7.0.0-beta.0 - 2020-09-23
  • 7.0.0-alpha.1 - 2020-09-16
  • 7.0.0-alpha.0 - 2020-09-15
  • 6.12.6 - 2020-10-10
  • 6.12.5 - 2020-09-13
  • 6.12.4 - 2020-08-15
  • 6.12.3 - 2020-07-04
  • 6.12.2 - 2020-04-19
  • 6.12.1 - 2020-04-18
  • 6.12.0 - 2020-02-22
  • 6.11.0 - 2020-01-18
  • 6.10.2 - 2019-07-14
  • 6.10.1 - 2019-07-06
  • 6.10.0 - 2019-03-03
  • 6.9.2 - 2019-02-22
  • 6.9.1 - 2019-02-10
  • 6.9.0 - 2019-02-09
  • 6.8.1 - 2019-02-02
  • 6.8.0 - 2019-02-02
  • 6.7.0 - 2019-01-13
  • 6.6.2 - 2018-12-16
  • 6.6.1 - 2018-11-29
  • 6.6.0 - 2018-11-29
  • 6.5.5 - 2018-11-04
  • 6.5.4 - 2018-09-23
  • 6.5.3 - 2018-08-17
  • 6.5.2 - 2018-06-30
  • 6.5.1 - 2018-06-10
  • 6.5.0 - 2018-05-08
  • 6.4.0 - 2018-03-25
  • 6.3.0 - 2018-03-17
  • 6.2.1 - 2018-03-03
  • 6.2.0 - 2018-02-26
  • 6.1.1 - 2018-01-30
  • 6.1.0 - 2018-01-26
  • 6.0.1 - 2018-01-11
  • 6.0.0 - 2018-01-07
  • 6.0.0-rc.1 - 2017-12-03
  • 6.0.0-rc.0 - 2017-11-26
  • 6.0.0-beta.2 - 2017-11-12
  • 6.0.0-beta.1 - 2017-11-06
  • 6.0.0-beta.0 - 2017-11-06
  • 5.5.2 - 2017-12-16
from ajv GitHub release notes
Commit messages
Package name: ajv
  • c067d6d 8.11.0
  • a5119ef Update limitProperties.ts (#1918)
  • 3ec588b Fix some relative links (#1900)
  • 09f67f2 fix: emit equal when needed - alternative to #1853 (#1922)
  • bd7cf15 Fix KeywordCxt links (#1931)
  • 95b15b6 Use root schemaEnv when resolving references in oneOf (#1901)
  • 6e53e43 doc: add uriResolver (#1896)
  • a27f782 8.10.0
  • d0be809 docs: fix typo in discriminator documentation (#1885)
  • b3e0cb1 docs: Fix typo (#1890)
  • 0e47ab4 feat: add uriresolver option (#1862)
  • 8b993dc add badge
  • 979d46b 8.9.0
  • e7bc009 resolve references before validating the discriminator (#1815)
  • ec96c87 Updated standalone documentation and add new examples (#1866)
  • f2e590a Fix broken named anchor link (#1870)
  • d632539 Update getting-started.md (#1871)
  • 418cd0f Add option to generate ESM exports instead of CJS (#1523) (#1861)
  • d21fa70 build(deps-dev): bump @ types/node from 16.11.14 to 17.0.0 (#1851)
  • c3e203c Update ReDoS section of security.md to accommodate #1683 (#1828)
  • 43ed019 add logo
  • 84d0a57 Fix minor typo in json-schema.md (#1843)
  • e9df4c1 doc: fix typo (#1847)
  • c7bf889 fix prettier, add logo (#1848)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@sonarcloud
Copy link

sonarcloud bot commented Apr 13, 2022

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant