[Snyk] Upgrade @fastify/cors from 8.2.0 to 8.5.0 #668
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade @fastify/cors from 8.2.0 to 8.5.0. See this package in npm: @fastify/cors See this project in Snyk: https://app.snyk.io/org/logseq-shared/project/7f360eb5-6119-4e4c-9d5d-fab2ee1d8fb1?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to upgrade @fastify/cors from 8.2.0 to 8.5.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version is 6 versions ahead of your current version.
The recommended version was released 5 months ago, on 2023-12-18.
The recommended version fixes:
SNYK-JS-BRACES-6838727
Why? Proof of Concept exploit, Recently disclosed, CVSS 7.5
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: @fastify/cors
-
8.5.0 - 2023-12-18
- chore(deps): bump mnemonist from 0.39.5 to 0.39.6 by @ dependabot in #283
- Revert "fix: support for embedded cors for route params (#278)" by @ climba03003 in #285
-
8.4.2 - 2023-12-04
- build(dependabot): ignore tap major updates by @ Fdawgs in #276
- fix: support for embedded cors for route params by @ mohammedSlimani in #278
- @ mohammedSlimani made their first contribution in #278
-
8.4.1 - 2023-10-29
- Fix type of OriginCallback by @ ken-browning in #272
- test: add
- chore(package): explicitly declare js module type by @ Fdawgs in #274
- test(index): replace
- @ ken-browning made their first contribution in #272
-
8.4.0 - 2023-09-19
- fix documentation, onRequest is default lifecycle stage by @ Uzlopak in #254
- perf(index): use spread over
- docs(readme): add plugin compatibility table by @ Fdawgs in #258
- test: cors headers sent when payload is stream by @ Uzlopak in #260
- Reduce bundle size by @ timedtext in #266
- chore(deps-dev): bump @ typescript-eslint/eslint-plugin from 5.62.0 to 6.4.1 by @ dependabot in #267
- chore(deps-dev): bump tsd from 0.28.1 to 0.29.0 by @ dependabot in #268
- test: use
- refactor(vary): use word character inside regex character class by @ Fdawgs in #270
- @ timedtext made their first contribution in #266
-
8.3.0 - 2023-05-25
- chore(deps-dev): bump typescript from 4.9.5 to 5.0.2 by @ dependabot in #247
- chore(deps-dev): bump tsd from 0.27.0 to 0.28.0 by @ dependabot in #248
- ci: only trigger on pushes to main branches by @ Fdawgs in #249
- chore(deps-dev): bump @ types/node from 18.16.5 to 20.1.0 by @ dependabot in #250
- Add
- @ brettwillis made their first contribution in #252
-
8.2.1 - 2023-03-14
- chore(deps-dev): bump tsd from 0.24.1 to 0.25.0 by @ dependabot in #235
- fix(types): Origin within OriginFunction can be undefined by @ joshmeads in #237
- chore(.gitignore): add clinic by @ Fdawgs in #239
- chore(.gitignore): add bun lockfile by @ Fdawgs in #241
- chore(deps-dev): bump tsd from 0.25.0 to 0.26.0 by @ dependabot in #242
- chore(deps-dev): bump tsd from 0.26.1 to 0.27.0 by @ dependabot in #245
- add normalizeCorsOptions and handle wildcards in origin parameter by @ Uzlopak in #244
- @ joshmeads made their first contribution in #237
-
8.2.0 - 2022-11-08
- chore(deps): bump mnemonist from 0.39.4 to 0.39.5 by @ dependabot in #233
- feature: allow custom hook name by @ giulianok in #234
- @ giulianok made their first contribution in #234
from @fastify/cors GitHub release notesWhat's Changed
Full Changelog: v8.4.2...v8.5.0
What's Changed
New Contributors
Full Changelog: v8.4.1...v8.4.2
What's Changed
uunicode flag to regex by @ Fdawgs in #273typeofundefined check by @ Fdawgs in #275New Contributors
Full Changelog: v8.4.0...v8.4.1
What's Changed
Object.assign()by @ Fdawgs in #257node:prefix to bypass require.cache call for builtins by @ Fdawgs in #269New Contributors
Full Changelog: v8.3.0...v8.4.0
What's Changed
cacheControlto control caching in CDN by @ brettwillis in #252New Contributors
Full Changelog: v8.2.1...v8.3.0
What's Changed
New Contributors
Full Changelog: v8.2.0...v8.2.1
What's Changed
New Contributors
Full Changelog: v8.1.1...v8.2.0
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs
Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.