Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Security upgrade react-devtools from 4.24.6 to 4.27.3 #23

Merged
merged 1 commit into from
Jul 16, 2023
Merged

[Snyk] Security upgrade react-devtools from 4.24.6 to 4.27.3 #23

merged 1 commit into from
Jul 16, 2023

Conversation

snyk-bot
Copy link

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • extensions/defichain-lottery/package.json
    • extensions/defichain-lottery/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
medium severity 694/1000
Why? Mature exploit, Has a fix available, CVSS 5.3		 Out-of-Bounds
SNYK-JS-ELECTRON-1585619		 No Mature
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-1586050		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Buffer Overflow
SNYK-JS-ELECTRON-1656742		 No No Known Exploit
high severity 869/1000
Why? Mature exploit, Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-1656743		 No Mature
high severity 590/1000
Why? Has a fix available, CVSS 7.3		 Out-of-Bounds
SNYK-JS-ELECTRON-1656745		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Access Restriction Bypass
SNYK-JS-ELECTRON-1656746		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-1656752		 No No Known Exploit
medium severity 550/1000
Why? Has a fix available, CVSS 6.5		 Improper Input Validation
SNYK-JS-ELECTRON-1727342		 No No Known Exploit
medium severity 694/1000
Why? Mature exploit, Has a fix available, CVSS 5.3		 Improper Input Validation
SNYK-JS-ELECTRON-1727344		 No Mature
medium severity 601/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 5.6		 Sandbox Bypass
SNYK-JS-ELECTRON-1731315		 No Proof of Concept
high severity 869/1000
Why? Mature exploit, Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-1910985		 No Mature
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-1910987		 No No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3		 Exposure of Resource to Wrong Sphere
SNYK-JS-ELECTRON-1910988		 No No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3		 Improper Access Control
SNYK-JS-ELECTRON-1910991		 No No Known Exploit
critical severity 811/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 9.8		 Type Confusion
SNYK-JS-ELECTRON-1911949		 No Proof of Concept
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-1912074		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-1912075		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-1912082		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-1912084		 No No Known Exploit
medium severity 754/1000
Why? Mature exploit, Has a fix available, CVSS 6.5		 Information Exposure
SNYK-JS-ELECTRON-1912085		 No Mature
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-1924893		 No No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Inappropriate Implementation
SNYK-JS-ELECTRON-1924894		 No No Known Exploit
medium severity 539/1000
Why? Has a fix available, CVSS 6.5		 Inappropriate Implementation
SNYK-JS-ELECTRON-1924895		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-1930826		 No No Known Exploit
high severity 794/1000
Why? Mature exploit, Has a fix available, CVSS 7.3		 Use After Free
SNYK-JS-ELECTRON-2322001		 No Mature
medium severity 539/1000
Why? Has a fix available, CVSS 6.5		 Domain Spoofing
SNYK-JS-ELECTRON-2329155		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2329162		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-2329257		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2330890		 No No Known Exploit
critical severity 704/1000
Why? Has a fix available, CVSS 9.8		 Improper Input Validation
SNYK-JS-ELECTRON-2332173		 No No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Improper Control of a Resource Through its Lifetime
SNYK-JS-ELECTRON-2332176		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2338684		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-2339883		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Interger Underflow
SNYK-JS-ELECTRON-2351961		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2404183		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Improper Check or Handling of Exceptional Conditions
SNYK-JS-ELECTRON-2404184		 No No Known Exploit
high severity 809/1000
Why? Mature exploit, Has a fix available, CVSS 7.6		 Use After Free
SNYK-JS-ELECTRON-2414027		 No Mature
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Integer Overflow or Wraparound
SNYK-JS-ELECTRON-2420972		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2420994		 No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Information Exposure
SNYK-JS-ELECTRON-2422385		 No No Known Exploit
low severity 384/1000
Why? Has a fix available, CVSS 3.4		 Improper Access Control
SNYK-JS-ELECTRON-2431353		 No No Known Exploit
high severity 794/1000
Why? Mature exploit, Has a fix available, CVSS 7.3		 Type Confusion
SNYK-JS-ELECTRON-2434822		 No Mature
medium severity 554/1000
Why? Has a fix available, CVSS 6.8		 Use After Free
SNYK-JS-ELECTRON-2434824		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2774694		 No No Known Exploit
medium severity 529/1000
Why? Has a fix available, CVSS 6.3		 Type Confusion
SNYK-JS-ELECTRON-2803052		 No No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3		 Improper implementation
SNYK-JS-ELECTRON-2803053		 No No Known Exploit
critical severity 919/1000
Why? Mature exploit, Has a fix available, CVSS 9.8		 Type Confusion
SNYK-JS-ELECTRON-2805803		 No Mature
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2805927		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Type Confusion
SNYK-JS-ELECTRON-2806357		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-2806730		 No No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Inappropriate implementation
SNYK-JS-ELECTRON-2807802		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Improper Input Validation
SNYK-JS-ELECTRON-2807803		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2807804		 No No Known Exploit
high severity 619/1000
Why? Has a fix available, CVSS 8.1		 Use After Free
SNYK-JS-ELECTRON-2807809		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2808872		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2808873		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Inappropriate implementation
SNYK-JS-ELECTRON-2808874		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2812497		 No No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Inappropriate implementation
SNYK-JS-ELECTRON-2812499		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2824110		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-2838863		 No No Known Exploit
medium severity 544/1000
Why? Has a fix available, CVSS 6.6		 Improper Input Validation
SNYK-JS-ELECTRON-2869408		 No No Known Exploit
medium severity 489/1000
Why? Has a fix available, CVSS 5.5		 Exposure of Resource to Wrong Sphere
SNYK-JS-ELECTRON-2869410		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2870632		 No No Known Exploit
medium severity 539/1000
Why? Has a fix available, CVSS 6.5		 Improper Input Validation
SNYK-JS-ELECTRON-2932172		 No No Known Exploit
medium severity 509/1000
Why? Has a fix available, CVSS 5.9		 Protection Mechanism Failure
SNYK-JS-ELECTRON-2934721		 No No Known Exploit
high severity 859/1000
Why? Mature exploit, Has a fix available, CVSS 8.6		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-2946881		 No Mature
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-2946891		 No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JS-ELECTRON-2961655		 No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Information Exposure
SNYK-JS-ELECTRON-2977510		 No No Known Exploit
medium severity 479/1000
Why? Has a fix available, CVSS 5.3		 Improper Input Validation
SNYK-JS-ELECTRON-2977512		 No No Known Exploit
medium severity 494/1000
Why? Has a fix available, CVSS 5.6		 Buffer Overflow
SNYK-JS-ELECTRON-2978483		 No No Known Exploit
medium severity 509/1000
Why? Has a fix available, CVSS 5.9		 Access Control Bypass
SNYK-JS-ELECTRON-2978519		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2992453		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2992478		 No No Known Exploit
medium severity 429/1000
Why? Has a fix available, CVSS 4.3		 Improper Authentication
SNYK-JS-ELECTRON-2992482		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-2994414		 No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JS-ELECTRON-3014402		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3014405		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3014407		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3014409		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3014411		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3028028		 No No Known Exploit
high severity 869/1000
Why? Mature exploit, Has a fix available, CVSS 8.8		 Type Confusion
SNYK-JS-ELECTRON-3091122		 No Mature
medium severity 529/1000
Why? Has a fix available, CVSS 6.3		 Improper Input Validation
SNYK-JS-ELECTRON-3097694		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3097832		 No No Known Exploit
medium severity 504/1000
Why? Has a fix available, CVSS 5.8		 Information Exposure
SNYK-JS-ELECTRON-3107036		 No No Known Exploit
high severity 594/1000
Why? Has a fix available, CVSS 7.6		 Use After Free
SNYK-JS-ELECTRON-3111876		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-3111878		 No No Known Exploit
high severity 589/1000
Why? Has a fix available, CVSS 7.5		 Denial of Service (DoS)
SNYK-JS-ELECTRON-3111879		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3111880		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3111881		 No No Known Exploit
high severity 654/1000
Why? Has a fix available, CVSS 8.8		 Use After Free
SNYK-JS-ELECTRON-3160317		 No No Known Exploit
high severity 579/1000
Why? Has a fix available, CVSS 7.3		 Heap-based Buffer Overflow
SNYK-JS-ELECTRON-3237489		 No No Known Exploit
medium severity 484/1000
Why? Has a fix available, CVSS 5.4		 Open Redirect
SNYK-JS-GOT-2932019		 No No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: react-devtools The new version differs by 250 commits.
  • 28ce1c1 React DevTools 4.27.2 -> 4.27.3
  • b93b4f0 Should not throw for children of iframe or object (#26458)
  • c0b34bc chore: update links of docs and api (#26455)
  • 56f7a90 chore: update new docs links for react-dom (#26456)
  • bd5e323 Small Flow upgrade to 0.202.0 (#26435)
  • ffb6733 fix docs link for useSyncExternalStore (#26452)
  • 0018cf2 Add REVISION file to react-fbsource-import (#26448)
  • 12a1d14 Don't prerender siblings of suspended component (#26380)
  • 77ba161 Bugfix: Remove extra render pass when reverting to client render (#26445)
  • 520f7f3 Refactor ReactDOMComponent to use flatter property operations (#26433)
  • 0131d0c Check if suspensey instance resolves in immediate task (#26427)
  • 3554c88 Clean interface for public instances between React and React Native (#26416)
  • c57b90f [DiffTrain] Add artifacts for React Native to compiled (#26204)
  • 842bd78 Fix sizebot not working due to missing auth token (#26423)
  • db281b3 Feature: Suspend commit without blocking render (#26398)
  • 6310087 [ci] Fix download_base_build_for_sizebot (#26422)
  • 6854a3c [difftrain] Fix broken workflow (#26421)
  • 5530855 [www] enable enableFilterEmptyStringAttributesDOM flag (#26410)
  • 163d86e Updated comment message (#26158)
  • 108aed0 Fix use of stale props in Fabric events (#26408)
  • 8fa41ff Don't "fix up" mismatched text content with suppressedHydrationWarning (#26391)
  • 87c803d Fix a test case in ReactUpdates-test (#26399)
  • eaccf27 Revert "Remove hydrate entry point from www builds" (#26413)
  • 480aa77 Remove hydrate entry point from www builds (#26400)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Access Restriction Bypass
🦉 Denial of Service (DoS)
🦉 Open Redirect

@snyk-bot
fix: extensions/defichain-lottery/package.json & extensions/defichain…
ede8733 
…-lottery/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1585619
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1586050
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1656742
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1656743
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1656745
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1656746
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1656752
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1727342
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1727344
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1731315
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1910985
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1910987
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1910988
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1910991
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1911949
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1912074
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1912075
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1912082
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1912084
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1912085
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1924893
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1924894
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1924895
- https://snyk.io/vuln/SNYK-JS-ELECTRON-1930826
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2322001
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2329155
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2329162
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2329257
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2330890
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2332173
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2332176
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2338684
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2339883
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2351961
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2404183
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2404184
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2414027
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2420972
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2420994
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2422385
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2431353
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2434822
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2434824
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2774694
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2803052
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2803053
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2805803
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2805927
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2806357
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2806730
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2807802
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2807803
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2807804
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2807809
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2808872
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2808873
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2808874
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2812497
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2812499
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2824110
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2838863
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2869408
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2869410
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2870632
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2932172
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2934721
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2946881
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2946891
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2961655
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2977510
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2977512
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2978483
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2978519
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2992453
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2992478
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2992482
- https://snyk.io/vuln/SNYK-JS-ELECTRON-2994414
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3014402
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3014405
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3014407
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3014409
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3014411
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3028028
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3091122
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3097694
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3097832
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3107036
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3111876
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3111878
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3111879
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3111880
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3111881
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3160317
- https://snyk.io/vuln/SNYK-JS-ELECTRON-3237489
- https://snyk.io/vuln/SNYK-JS-GOT-2932019
@mergify mergify bot merged commit 36cfa73 into main Jul 16, 2023
@mergify mergify bot deleted the snyk-fix-fb18b72d5a1c8d61b7f11057327099c2 branch July 16, 2023 17:46
Centaurioun pushed a commit that referenced this pull request Mar 29, 2024
@thuoe @raycastbot
Add footy-report extension (raycast#9881)
c489975 
* Add footy-report extension

- Merge pull request #22 from thuoe/next
- Merge pull request #21 from thuoe/docs/2023-12-26-changelog
- docs: update changelog
- Merge pull request #20 from thuoe/feature/thu-33-redesign-test-api-command
- docs: update screenshots
- chore: delete unused assets
- feat: action to open ext preferences
- feat: use form to test API access token
- Merge pull request #19 from thuoe/bugfix/fetch-teams
- fix: optional position name
- Merge pull request #2 from thuoe/feature/thu-15-raycast-create-search-command
- Merge pull request #10 from thuoe/feature/thu-26-create-command-screenshots
- docs: include command screenshots in README.md
- docs: player stats screenshot
- docs: team list screenshot
- docs: update team details & API screenshots
- docs: delete outdated screenshots
- docs: create command screenshots
- Merge pull request #17 from thuoe/bugfix/type-errors
- build: include build step during CI pipeline
- fix: type error fetch teams hook
- fix: type error command arg
- fix: type errors for fetching fixtures
- fix: type erros from player stats
- fix: 2d array type further improvements
- fix: array type
- fix: multidimensional array type
- Merge pull request #18 from thuoe/feature/unit-tests
- build: test step to ci job
- test: create markdown from 2d array
- test: grouping obj
- test: format & select fields
- build: install jest
- Merge pull request #16 from thuoe/feature/thu-32-search-command-create-readme
- docs: add missing command subheading
- docs: create README.md template
- Merge pull request #15 from thuoe/feature/thu-29-player-markdown-season-stats
- feat: include yellow/red card stats
- refactor: set/filter events
- fix: map player id
- feat: fetch player stats across seasons for teams
- feat: create markdown table function
- Merge remote-tracking branch \'origin/next\' into feature/thu-15-raycast-create-search-command
- Merge pull request #14 from thuoe/chore/gh-actions-ci
- build: provide extension description
- refactor: ci pipeline
- Merge remote-tracking branch \'origin/next\' into feature/thu-15-raycast-create-search-command
- Merge pull request #13 from thuoe/feature/thu-28-create-extension-icon
- feat: create extension icon
- feat: create argument to search by team name
- feat: group squad by positions in grid view
- feat: create grouping function
- feat: create simple grid view for squad players
- feat: map tvstations to fixture calendar events
- feat: provide calendar name preference
- feat: wrap action in confirmation alert
- feat: create calendar event action for upcoming fixtures
- feat: icon for player details action button
- feat: introduce limit across fixture list items
- feat: populate upcoming fixtures list section
- fix: correct time range when fetching fixtures
- fix: rename fixture list category
- refactor: format fixture timestamp during response mapping
- feat: fetch latest fixtures and populate list items
- fix: correct squad subtitle count
- fix: populate title & placeholder with team name
- refactor: generic function to compute select fields
- fix: maximise player image size in markdown
- feat: create player details view
- feat: map player dob
- feat: restructure search command to search, favorite & display teams details
- feat: create new view for team details using dummy data
- build: create alias for shared types
- feat: create hook to fetch team with player info
- fix: invoke custom hook after change to path & provide execute flag
- refactor: rename search team command
- fix: prevent persisting dropdown value
- feat: create dropdown with team sections using dummy data
- feat(command): create search command template
- Merge pull request #12 from thuoe/chore/env-var-gh-actions
- chore: default env vars for gh actions
- chore: create basic ci pipeline (#11)
- Merge pull request #6 from thuoe/chore/local-dev-improvements
- fix: add missing package
- chore: format remaining files
- chore: update editorconfig
- chore: format code on save
- chore: create editorconfig file
- Merge pull request #5 from thuoe/feature/thu-23-create-preferences
- refactor: remove optional chaining
- refactor: create custom hook for API call
- feat: test API command
- chore: provide ESLint config (#4)
- Merge pull request #1 from thuoe/feature/thu-14-create-project-template
- feat: create simple command template
- Initial commit

* Update footy-report extension

- Merge pull request #26 from thuoe/next
- Merge pull request #25 from thuoe/bugfix/squad-details
- fix: map fixture id to item key
- fix: increase limit of squad players rendered in grid
- chore: remove console log
- fix: display age && render if dob provided
- fix: show seasons based on relevant team
- fix: filter season stats if no details found
- fix: render players without shirt no
- Merge pull request #23 from thuoe/main

* Update footy-report extension

- Merge pull request #29 from thuoe/next
- Merge pull request #28 from thuoe/feature/thu-34-error-handling-faulty-api-tokens
- fix: handle errors across views
- refactor: hooks response types
- fix: handle hook data responses if invalid token is found
- fix: provide error from promise hook
- feat: create error toast hook
- Merge pull request #27 from thuoe/main

* Update footy-report extension

- Merge pull request #32 from thuoe/next
- Merge pull request #31 from thuoe/feature/thu-35-api-test-command-validate-sportmonks-endpoint
- feat: validate endpoint before submit
- Merge pull request #30 from thuoe/main

* Update CHANGELOG.md and optimise images

---------

Co-authored-by: raycastbot <bot@raycast.com>
Centaurioun pushed a commit that referenced this pull request Mar 29, 2024
@thuoe @raycastbot @pernielsentikaer
Update footy-report extension (raycast#10183)
3a8ef7d 
* Add footy-report extension

- Merge pull request #22 from thuoe/next
- Merge pull request #21 from thuoe/docs/2023-12-26-changelog
- docs: update changelog
- Merge pull request #20 from thuoe/feature/thu-33-redesign-test-api-command
- docs: update screenshots
- chore: delete unused assets
- feat: action to open ext preferences
- feat: use form to test API access token
- Merge pull request #19 from thuoe/bugfix/fetch-teams
- fix: optional position name
- Merge pull request #2 from thuoe/feature/thu-15-raycast-create-search-command
- Merge pull request #10 from thuoe/feature/thu-26-create-command-screenshots
- docs: include command screenshots in README.md
- docs: player stats screenshot
- docs: team list screenshot
- docs: update team details & API screenshots
- docs: delete outdated screenshots
- docs: create command screenshots
- Merge pull request #17 from thuoe/bugfix/type-errors
- build: include build step during CI pipeline
- fix: type error fetch teams hook
- fix: type error command arg
- fix: type errors for fetching fixtures
- fix: type erros from player stats
- fix: 2d array type further improvements
- fix: array type
- fix: multidimensional array type
- Merge pull request #18 from thuoe/feature/unit-tests
- build: test step to ci job
- test: create markdown from 2d array
- test: grouping obj
- test: format & select fields
- build: install jest
- Merge pull request #16 from thuoe/feature/thu-32-search-command-create-readme
- docs: add missing command subheading
- docs: create README.md template
- Merge pull request #15 from thuoe/feature/thu-29-player-markdown-season-stats
- feat: include yellow/red card stats
- refactor: set/filter events
- fix: map player id
- feat: fetch player stats across seasons for teams
- feat: create markdown table function
- Merge remote-tracking branch \'origin/next\' into feature/thu-15-raycast-create-search-command
- Merge pull request #14 from thuoe/chore/gh-actions-ci
- build: provide extension description
- refactor: ci pipeline
- Merge remote-tracking branch \'origin/next\' into feature/thu-15-raycast-create-search-command
- Merge pull request #13 from thuoe/feature/thu-28-create-extension-icon
- feat: create extension icon
- feat: create argument to search by team name
- feat: group squad by positions in grid view
- feat: create grouping function
- feat: create simple grid view for squad players
- feat: map tvstations to fixture calendar events
- feat: provide calendar name preference
- feat: wrap action in confirmation alert
- feat: create calendar event action for upcoming fixtures
- feat: icon for player details action button
- feat: introduce limit across fixture list items
- feat: populate upcoming fixtures list section
- fix: correct time range when fetching fixtures
- fix: rename fixture list category
- refactor: format fixture timestamp during response mapping
- feat: fetch latest fixtures and populate list items
- fix: correct squad subtitle count
- fix: populate title & placeholder with team name
- refactor: generic function to compute select fields
- fix: maximise player image size in markdown
- feat: create player details view
- feat: map player dob
- feat: restructure search command to search, favorite & display teams details
- feat: create new view for team details using dummy data
- build: create alias for shared types
- feat: create hook to fetch team with player info
- fix: invoke custom hook after change to path & provide execute flag
- refactor: rename search team command
- fix: prevent persisting dropdown value
- feat: create dropdown with team sections using dummy data
- feat(command): create search command template
- Merge pull request #12 from thuoe/chore/env-var-gh-actions
- chore: default env vars for gh actions
- chore: create basic ci pipeline (#11)
- Merge pull request #6 from thuoe/chore/local-dev-improvements
- fix: add missing package
- chore: format remaining files
- chore: update editorconfig
- chore: format code on save
- chore: create editorconfig file
- Merge pull request #5 from thuoe/feature/thu-23-create-preferences
- refactor: remove optional chaining
- refactor: create custom hook for API call
- feat: test API command
- chore: provide ESLint config (#4)
- Merge pull request #1 from thuoe/feature/thu-14-create-project-template
- feat: create simple command template
- Initial commit

* Update footy-report extension

- Merge pull request #26 from thuoe/next
- Merge pull request #25 from thuoe/bugfix/squad-details
- fix: map fixture id to item key
- fix: increase limit of squad players rendered in grid
- chore: remove console log
- fix: display age && render if dob provided
- fix: show seasons based on relevant team
- fix: filter season stats if no details found
- fix: render players without shirt no
- Merge pull request #23 from thuoe/main

* Update footy-report extension

- Merge pull request #29 from thuoe/next
- Merge pull request #28 from thuoe/feature/thu-34-error-handling-faulty-api-tokens
- fix: handle errors across views
- refactor: hooks response types
- fix: handle hook data responses if invalid token is found
- fix: provide error from promise hook
- feat: create error toast hook
- Merge pull request #27 from thuoe/main

* Update footy-report extension

- Merge pull request #32 from thuoe/next
- Merge pull request #31 from thuoe/feature/thu-35-api-test-command-validate-sportmonks-endpoint
- feat: validate endpoint before submit
- Merge pull request #30 from thuoe/main

* Update CHANGELOG.md and optimise images

* Update footy-report extension

- Merge pull request #37 from thuoe/next
- Merge pull request #36 from thuoe/chore/sync-raycast-repo
- Merge branch \'contributions/merge-1705420963700882000\' into chore/sync-raycast-repo
- Pull contributions
- Merge pull request #35 from thuoe/next
- Merge pull request #24 from thuoe/feature/thu-18-raycast-command-search-league-standings
- docs: update timestamp
- fix: filter only domestic leagues
- Merge remote-tracking branch \'origin/next\' into feature/thu-18-raycast-command-search-league-standings
- docs: include install button (#34)
- Merge pull request #33 from thuoe/main
- Merge remote-tracking branch \'origin/next\' into feature/thu-18-raycast-command-search-league-standings
- docs: update changelog
- feat: action to open team details from standing
- docs: include command screenshot
- feat: include search bar placeholder
- fix: map league id
- feat: display standing once league is selected
- feat: map recent form for each standing
- fix: map image path
- feat: map matches played
- feat: create hook to fetch league standing data
- fix: map active season
- feat: fetch leagues

* Already an install button 🙂

* fix: error handle invalid api tokens for fetching standings (#38)

* fix: linting issues (#39)

* fix: error handle fetch league hook (#40)

* Update README.md

* Update CHANGELOG.md and optimise images

---------

Co-authored-by: raycastbot <bot@raycast.com>
Co-authored-by: Per Nielsen Tikær <per@raycast.com>
Centaurioun pushed a commit that referenced this pull request Dec 25, 2024
@wisdom-plus @pernielsentikaer
Update search-joplin-notes extension (raycast#15592)
8a04340 
* Update search-joplin-notes extension

- fix:conflict
- Pull contributions
- Merge pull request #23 from wisdom-plus/open_app
- fix:CHANGELOG
- fix:eslint
- update:package
- Merge pull request #22 from wisdom-plus/open_app
- add:CHANGELOG
- fix:lint
- fix:action title
- fix:open joplin command

* Update NoteDetail.tsx

---------

Co-authored-by: Per Nielsen Tikær <per@raycast.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@snyk-bot