Skip to content

[Snyk] Fix for 3 vulnerabilities - #29

Open
leonardoadame wants to merge 1 commit into
latestfrom
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open

[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d

Conversation

@leonardoadame

@leonardoadameleonardoadame commented Dec 2, 2023

Copy link
Copy Markdown
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS)
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS)
SNYK-JS-WORDWRAP-3149973		NoProof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: @npmcli/run-script The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0

See the full diff

Package name: @npmcli/template-oss The new version differs by 58 commits.

See the full diff

Package name: libnpmversion The new version differs by 250 commits.

See the full diff

Package name: node-gyp The new version differs by 40 commits.

See the full diff

Package name: pacote The new version differs by 29 commits.

See the full diff

Package name: tap The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

@bolt-new-by-stackblitz

bolt-new-by-stackblitzBot commented Dec 2, 2023

Copy link
Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.

@vercel

vercelBot commented Dec 2, 2023•
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎

NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm

Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
[Snyk] Fix for 3 vulnerabilities by leonardoadame · Pull Request #29 · leonardoadame/cli-1 · GitHub
Skip to content
[Snyk] Fix for 3 vulnerabilities - #29
Open
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Open
[Snyk] Fix for 3 vulnerabilities#29
leonardoadame wants to merge 1 commit into
latestfrom 
snyk-fix-bb36ba7521ab34e7ba0c5cd7a1da6c1d
Conversation
@leonardoadame
@leonardoadameleonardoadame
commented
Dec 2, 2023

Copy link


Copy Markdown

Owner
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
Changes included in this PR
  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

    • package.json
⚠️Warning
Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed
With an upgrade:
SeverityPriority Score (*)IssueBreaking ChangeExploit Maturity
high severity661/1000
Why? Recently disclosed, Has a fix available, CVSS 7.5		Missing Release of Resource after Effective Lifetime 
SNYK-JS-INFLIGHT-6095116		YesNo Known Exploit
high severity696/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 7.5		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-SEMVER-3247795		NoProof of Concept
low severity506/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 3.7		Regular Expression Denial of Service (ReDoS) 
SNYK-JS-WORDWRAP-3149973		NoProof of Concept
(*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: @npmcli/run-script
The new version differs by 15 commits.
  • fcebe38 chore: release 7.0.2
  • 30623cf deps: bump node-gyp from 9.4.1 to 10.0.0
  • 54e5bd0 chore: postinstall for dependabot template-oss PR
  • 7d95e9f chore: bump @ npmcli/template-oss from 4.18.1 to 4.19.0
  • 90bcf54 chore: postinstall for dependabot template-oss PR
  • ba0ab48 chore: bump @ npmcli/template-oss from 4.18.0 to 4.18.1
  • 43ccfc7 chore: release 7.0.1
  • f61fd84 deps: bump @ npmcli/promise-spawn from 6.0.2 to 7.0.0
  • 87b740b chore: release 7.0.0
  • e1b1a3c fix: drop node14 support
  • a8045a9 deps: bump which from 3.0.1 to 4.0.0
  • c4f4fb4 chore: postinstall for dependabot template-oss PR
  • dacd67e chore: bump @ npmcli/template-oss from 4.17.0 to 4.18.0
  • 9d2d807 chore: postinstall for dependabot template-oss PR
  • 8b21725 chore: bump @ npmcli/template-oss from 4.15.1 to 4.17.0
See the full diff
Package name: @npmcli/template-oss
The new version differs by 58 commits.
See the full diff
Package name: libnpmversion
The new version differs by 250 commits.
See the full diff
Package name: node-gyp
The new version differs by 40 commits.
See the full diff
Package name: pacote
The new version differs by 29 commits.
See the full diff
Package name: tap
The new version differs by 250 commits.
  • 793c1c0 update versions
  • 47a2289 add missing @ tapjs/mock service key polyfill
  • 6622dca snapshot: update snapshot
  • 556e520 mock: actually be resilient against multiple instances
  • 2c135b0 Add `t.mockAll` method
  • d7e7e4f clean process.cwd() out of snapshots by default
  • 4c0dc72 use the released version of tshy
  • c858f37 need to check in .tshy configs for typedoc to work
  • 82f48cd update versions
  • 0f27f73 TypeScript 5.2, use tshy for hybrid builds
  • de09096 remove my home directory from parser snapshots
  • 46e2bbb repl: mkdirp the .tap dir if missing
  • acfae01 link typedocs to main website
  • 2ece1da core spawn test even less flaky
  • a7a12d2 update typedoc to latest, ts-node to temporary fork
  • a5c0e0c some changelog updates
  • caf8d81 document repl
  • a5dc854 Store t.testdir() fixtures in .tap/fixtures
  • 6914d23 remove docs from source control
  • 1dcc6a7 exclude test files themselves from coverage
  • aff25fc update versions
  • c5972e7 core: make spawn timeout test less flaky
  • 1c11b37 stack: properly parse ErrnoException errors
  • 1280a55 parser: remove node v12 skip check
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
Note:You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information: 

🧐 View latest project report
🛠 Adjust project settings
📚 Read more about Snyk's upgrade and patch logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Regular Expression Denial of Service (ReDoS)
@bolt-new-by-stackblitz
bolt-new-by-stackblitzBot
commented
Dec 2, 2023

Copy link


Copy Markdown

Review PR in StackBlitz CodeflowRun & review this pull request in StackBlitz Codeflow.
@vercel
vercelBot
commented
Dec 2, 2023•

edited

Loading

Copy link


Copy Markdown

The latest updates on your projects. Learn more about Vercel for Git ↗︎
NameStatusPreviewCommentsUpdated (UTC)
cli-1leonardoadame❌ Failed (Inspect)Dec 2, 2023 5:57pm
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment

Reviewers


No reviews


Assignees


No one assigned


Labels


None yet


Projects


None yet


Milestone


No milestone


Development

Successfully merging this pull request may close these issues.

2 participants

@leonardoadame@snyk-bot