Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency cookie to v1 #74

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
cookie dependencies major ^0.5.0 -> ^1.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Medium Medium 5.3 CVE-2024-47764

Release Notes

jshttp/cookie (cookie)

v1.0.1

Compare Source

Added

v1.0.0

Compare Source

Breaking changes

  • Use modern JS features, ship TypeScript definition (#​175) 1cc64ff
    • Adds __esModule marker, imports need to use import { parse, serialize } or import * as cookie
  • Minimum node.js v18
  • Uses null prototype object for parse return value
  • Changes strict and priority to match the lower case strings (i.e. low, not LOW or Low)
  • Require maxAge to be an integer using Number.isInteger check
  • Delegates decode implementation details to decode option (i.e. error handling and quote parsing is defined by decode)
  • Improve arg/option error messages (#​162) e206fd5 @​MaoShizhong

Other

v0.7.2

Compare Source

Fixed

v0.7.1: 0.7.1

Compare Source

Fixed

  • Allow leading dot for domain (#​174)
    • Although not permitted in the spec, some users expect this to work and user agents ignore the leading dot according to spec
  • Add fast path for serialize without options, use obj.hasOwnProperty when parsing (#​172)

v0.7.0: 0.7.0

Compare Source

v0.6.0: 0.6.0

Compare Source

  • Add partitioned option

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Nov 2, 2024
Copy link
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm WARN ERESOLVE overriding peer dependency
npm WARN While resolving: @fimbul/bifrost@0.21.0
npm WARN Found: tslint@6.1.3
npm WARN node_modules/tslint
npm WARN   dev tslint@"^6.1.3" from the root project
npm WARN 
npm WARN Could not resolve dependency:
npm WARN peer tslint@"^5.0.0" from @fimbul/bifrost@0.21.0
npm WARN node_modules/@fimbul/bifrost
npm WARN   @fimbul/bifrost@"^0.21.0" from tslint-consistent-codestyle@1.16.0
npm WARN   node_modules/tslint-consistent-codestyle
npm WARN 
npm WARN Conflicting peer dependency: tslint@5.20.1
npm WARN node_modules/tslint
npm WARN   peer tslint@"^5.0.0" from @fimbul/bifrost@0.21.0
npm WARN   node_modules/@fimbul/bifrost
npm WARN     @fimbul/bifrost@"^0.21.0" from tslint-consistent-codestyle@1.16.0
npm WARN     node_modules/tslint-consistent-codestyle
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: tslint-consistent-codestyle@1.16.0
npm ERR! Found: tslint@6.1.3
npm ERR! node_modules/tslint
npm ERR!   dev tslint@"^6.1.3" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer tslint@"^5.0.0" from tslint-consistent-codestyle@1.16.0
npm ERR! node_modules/tslint-consistent-codestyle
npm ERR!   dev tslint-consistent-codestyle@"^1.16.0" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: tslint@5.20.1
npm ERR! node_modules/tslint
npm ERR!   peer tslint@"^5.0.0" from tslint-consistent-codestyle@1.16.0
npm ERR!   node_modules/tslint-consistent-codestyle
npm ERR!     dev tslint-consistent-codestyle@"^1.16.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-11-02T08_43_51_496Z-debug-0.log

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Development

Successfully merging this pull request may close these issues.

0 participants