[Snyk] Upgrade messageformat from 0.2.2 to 0.3.1 #4

shaneomatz · 2022-11-18T03:15:41Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade messageformat from 0.2.2 to 0.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 4 versions ahead of your current version.
The recommended version was released 7 years ago, on 2016-02-20.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: messageformat

0.3.1 - 2016-02-20
- IE8 bugfix: Special handling for ES3 reserved words (PR #122)
- Improve multi-instance/multi-language support (Issue #134)
- Improve code documentation, esp. examples
- Update authors
0.3.0 - 2016-01-30
- New website: messageformat.github.io
- Simplify usage to just compile(), which accepts single messages or hierarchical objects thereof (this replaces calls to parse(), precompile(), compile(), and precompileObject()
- Use make-plural.js to use CLDR locale definitions rather than self-defining them in locale/
- Use Browserify to package messageformat.js for in-browser use
- Add code documentation
- Update license to MIT
0.3.0-1 - 2015-04-06
Version 0.3.0-1
0.3.0-0 - 2015-03-17
Update version to 0.3.0-0 (Prerelease, still needs doc update!)
0.2.2 - 2015-04-06
Update comments version, and bump, to avoid confusion. No functionali…

…ty changes.

from messageformat GitHub release notes

Commit messages

Package name: messageformat

4fc06c7 Customize documentation CSS to fetch fonts remotely
23f695a Packaging files for release
481941d Version 0.3.1
51696f7 Improve code documentation, esp. examples
9218575 Make Runtime its own class (Fixes issue Deactivite stats process ? opensupports/opensupports#134)
596df69 Add test for multi-instance use -- fails due to shared runtime (Issue Deactivite stats process ? opensupports/opensupports#134)
1aa65de Merge pull request Revert "fix bug #58" opensupports/opensupports#133 from hadrianoliver/enclose_reserved_words_in_quotes
ddbadac Cleaned up detection of ECMAScript 3rd Edition reserved words
4155526 Simplified test strings to reflect test being performed
ecbd3fb Corrected to only escape property names when necessary and added test for it
b063bfc Enclose reserved JavaScript words in quotes when used as keys of compiled objects, needed for IE<=8 compatibility
f226602 Update dependencies & Travis CI config some more
1a465f1 Merge pull request fix bug #58 opensupports/opensupports#122 from nooks/patch-1
656efa9 Fix minor bugs revealed by release
672b315 Lol
0a1171a Version 0.3.0
ed1ae55 Merge pull request Changing department of a ticket to a department you are not in charge of opensupports/opensupports#130 from eemeli/update-readme
9ceb6f3 Add `make release` target
640d99a Update homepage URL
4982710 Update README.md, linking to messageformat.github.io
b2fd25e Update examples
036255d Cleaner isLanguageRTL() explanation in bidiMarkText()
d88abb0 Clean up bidi implementation, now using #setBiDiSupport() to enable (Closes Department update on localstorage opensupports/opensupports#129)
30de1bc messageformat.js: Provide Structured Text support to MessageFormat