[Snyk] Fix for 2 vulnerabilities - #360
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-BRACEEXPANSION-18512280 - https://snyk.io/vuln/SNYK-JS-JSYAML-18593780
|
This update includes a major version bump for nyc@17.1.0 → nyc@18.0.0Risk: Medium This is a major version upgrade with a significant environment change.
Recommendation: Source: nyc CHANGELOG js-yaml@4.3.0 → js-yaml@4.3.1Risk: Low This is a patch version upgrade. Patch releases typically contain bug fixes or security patches and are not expected to have breaking changes. No vulnerabilities were found for this version. Source: Package documentation
|
|
🔄 Auto-Retry Failed Run The Tests workflow failed for the commits below and has been automatically retried.
|
Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
shell/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-BRACEEXPANSION-18512280
SNYK-JS-JSYAML-18593780
Breaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling