[Snyk] Upgrade: , zone.js, zustand #33

VladDudarenko · 2024-09-18T12:18:10Z

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@nguniversal/express-engine
from 10.0.1 to 10.1.0 | 3 versions ahead of your current version | 4 years ago
on 2020-09-03
zone.js
from 0.11.8 to 0.15.0 | 16 versions ahead of your current version | a month ago
on 2024-08-21
zustand
from 4.4.1 to 4.5.5 | 12 versions ahead of your current version | a month ago
on 2024-08-15

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHTOREGEXP-7925106	524	Proof of Concept

Release notes

Package name: @nguniversal/express-engine

10.1.0 - 2020-09-03
commit 3f841ef
Author: Keen Yee Liau kyliau@google.com
Date: Wed Sep 2 21:17:50 2020 -0700
```
release: v10.1.0
```
commit f92baae
Author: dependabot[bot] <49699333+dependabot[bot]@ users.noreply.github.com>
Date: Wed Sep 2 17:35:00 2020 +0000
bl from 4.0.2 to 4.0.3.
- Release notes
- Commits
Signed-off-by: dependabot[bot] <support@github.com>">
```
build(deps): bump bl from 4.0.2 to 4.0.3
Bumps bl from 4.0.2 to 4.0.3.

Release notes
Commits

Signed-off-by: dependabot[bot] <support@github.com>
```
commit 09ae8c0
Author: Renovate Bot bot@renovateapp.com
Date: Wed Sep 2 16:51:20 2020 +0000
```
build: update karma to version 5.2.1
```
commit 132de1e
Author: Keen Yee Liau kyliau@google.com
Date: Thu Aug 27 10:42:25 2020 -0700
```
release: v10.1.0-rc.0
```
commit 756d0b1
Author: Alan Agius alan.agius4@gmail.com
Date: Thu Aug 27 10:08:22 2020 +0200
```
build: update Angular packages to 10.1.0-rc.0
```
commit 0eb7253
Author: Alan Agius alan.agius4@gmail.com
Date: Wed Aug 26 10:20:21 2020 +0200
```
build: update @ types/hapi__hapi to version ^20.0.0
```
commit b8a0040
Author: Alan Agius alan.agius4@gmail.com
Date: Wed Aug 26 08:23:46 2020 +0200
```
build: update to TypeScript 4.0
```
commit e47dbc8
Author: Renovate Bot bot@renovateapp.com
Date: Sat Aug 22 05:05:28 2020 +0000
```
build: update ts-node to version 9.0.0
```
commit f3efa35
Author: Renovate Bot bot@renovateapp.com
Date: Sat Aug 15 05:04:27 2020 +0000
```
build: update rollup to version ~2.26.0
```
commit 7bdd58d
Author: Renovate Bot bot@renovateapp.com
Date: Fri Aug 14 05:04:39 2020 +0000
```
build: update rollup to version ~2.25.0
```
commit 1b2ddbb
Author: Renovate Bot bot@renovateapp.com
Date: Thu Aug 13 05:05:04 2020 +0000
```
build: update karma-jasmine to version 4.0.1
```
commit d45d9b1
Author: renovate[bot] <29139614+renovate[bot]@ users.noreply.github.com>
Date: Wed Aug 12 01:29:03 2020 -0400
bot@renovateapp.com>">
```
build: update karma-jasmine to version 4.0.0 (#1798)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
```

10.1.0-rc.0 - 2020-08-27
commit 132de1e

Author: Keen Yee Liau kyliau@google.com

Date: Thu Aug 27 10:42:25 2020 -0700
```
release: v10.1.0-rc.0
```
commit 756d0b1
Author: Alan Agius alan.agius4@gmail.com
Date: Thu Aug 27 10:08:22 2020 +0200
```
build: update Angular packages to 10.1.0-rc.0
```
commit 0eb7253
Author: Alan Agius alan.agius4@gmail.com
Date: Wed Aug 26 10:20:21 2020 +0200
```
build: update @ types/hapi__hapi to version ^20.0.0
```
commit b8a0040
Author: Alan Agius alan.agius4@gmail.com
Date: Wed Aug 26 08:23:46 2020 +0200
```
build: update to TypeScript 4.0
```
commit e47dbc8
Author: Renovate Bot bot@renovateapp.com
Date: Sat Aug 22 05:05:28 2020 +0000
```
build: update ts-node to version 9.0.0
```
commit f3efa35
Author: Renovate Bot bot@renovateapp.com
Date: Sat Aug 15 05:04:27 2020 +0000
```
build: update rollup to version ~2.26.0
```
commit 7bdd58d
Author: Renovate Bot bot@renovateapp.com
Date: Fri Aug 14 05:04:39 2020 +0000
```
build: update rollup to version ~2.25.0
```
commit 1b2ddbb
Author: Renovate Bot bot@renovateapp.com
Date: Thu Aug 13 05:05:04 2020 +0000
```
build: update karma-jasmine to version 4.0.1
```
commit d45d9b1
Author: renovate[bot] <29139614+renovate[bot]@ users.noreply.github.com>
Date: Wed Aug 12 01:29:03 2020 -0400
bot@renovateapp.com>">
```
build: update karma-jasmine to version 4.0.0 (#1798)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
```

10.0.2 - 2020-08-11
commit 4e949a3

Author: Keen Yee Liau kyliau@google.com

Date: Tue Aug 11 14:18:43 2020 -0700
```
release: v10.0.2
```
commit 34ec6be
Author: renovate[bot] <29139614+renovate[bot]@ users.noreply.github.com>
Date: Mon Aug 10 12:16:47 2020 +0200
bot@renovateapp.com>">
```
build: update concurrently to version 5.3.0 (#1791)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
```
commit b5c2eb2
Author: An Sergei ahn.sergei@gmail.com
Date: Sat Aug 8 03:38:10 2020 +1000
http://api.example.com?params=1&params=2&params=3 cache key will be http://api.example.com?params=1
for api http://api.example.com?params=1&params=2 cache key will be the same http://api.example.com?params=1
and therefor API request will not be sent to server.">
```
fix(common): handle arrays in querystrings
caching GET request with query string with array of parameter gets the first value only.

it breaks caching for the same url with different query string for example

for api http://api.example.com?params=1&amp;params=2&amp;params=3 cache key will be http://api.example.com?params=1

for api http://api.example.com?params=1&amp;params=2 cache key will be the same http://api.example.com?params=1

and therefor API request will not be sent to server.
```
commit 7a4032a
Author: Renovate Bot bot@renovateapp.com
Date: Sat Aug 1 12:55:23 2020 +0000
```
build: update terser to version ^5.0.0
```
commit da64943
Author: Renovate Bot bot@renovateapp.com
Date: Sat Aug 1 05:04:50 2020 +0000
```
build: update tslint to version 6.1.3
```
commit adb8965
Author: Alan Agius alan.agius4@gmail.com
Date: Fri Jul 31 20:02:00 2020 +0200

docs: fix bug template
The bug template is not showing

commit 06b5113
Author: Renovate Bot bot@renovateapp.com
Date: Wed Jul 29 05:04:49 2020 +0000
```
build: update karma to version 5.1.1
```
commit c57bd3f
Author: Renovate Bot bot@renovateapp.com
Date: Fri Jul 24 05:04:28 2020 +0000
```
build: update rollup to version ~2.23.0
```
commit e158998
Author: Renovate Bot bot@renovateapp.com
Date: Fri Jul 24 05:04:10 2020 +0000
```
build: update jasmine-core to version 3.6.0
```
commit 5e14b93
Author: Renovate Bot bot@renovateapp.com
Date: Mon Jul 20 07:42:26 2020 +0000
```
build: update to version
```
commit df1881a
Author: Renovate Bot bot@renovateapp.com
Date: Sat Jul 18 12:54:36 2020 +0000
```
build: update rollup to version ~2.22.0
```
commit ef4e27d
Author: Renovate Bot bot@renovateapp.com
Date: Sat Jul 18 05:05:57 2020 +0000
```
build: update puppeteer to version ~5.2.0
```
commit c7a4cdf
Author: Renovate Bot bot@renovateapp.com
Date: Thu Jul 16 21:47:03 2020 +0000
```
build: update to version
```
commit b31a26b
Author: Renovate Bot bot@renovateapp.com
Date: Mon Jul 13 08:55:21 2020 +0000
```
build: update puppeteer to version ~5.1.0
```
commit eadf4d4
Author: Alan Agius alan.agius4@gmail.com
Date: Wed Jul 8 16:34:48 2020 +0200
https://github.com/angular/angular/blob/fd65958b887f6ea8dd5235e6de1d533e4c578602/packages/bazel/src/ng_package/ng_package.bzl#L226-L228

Users using UMD bundles, shouldn't be needing to add the tslib script, also this is important because tslib is a direct depedency of the package and not a peer depedency.

This is also to align with the Angular FW packages.">
```
build: embed tslib in umd bundles (#1760)
When tslib is listed as part of the globals, it will not be embedded in the UMD bundles.

https://github.com/angular/angular/blob/fd65958b887f6ea8dd5235e6de1d533e4c578602/packages/bazel/src/ng_package/ng_package.bzl#L226-L228
Users using UMD bundles, shouldn't be needing to add the tslib script, also this is important because tslib is a direct depedency of the package and not a peer depedency.
This is also to align with the Angular FW packages.
```
commit 9e0a150
Author: Renovate Bot bot@renovateapp.com
Date: Wed Jul 8 05:07:47 2020 +0000
```
build: update rollup to version ~2.21.0
```
commit 2aab22f
Author: Adam Plumer caerus.karu@gmail.com
Date: Sat Jun 27 16:17:36 2020 -0500
```
fixup! docs: update issue template and Gotchas guide
```
commit cc6f717
Author: Adam Plumer caerus.karu@gmail.com
Date: Sat Jun 27 16:16:29 2020 -0500
```
fixup! docs: update issue template and Gotchas guide
```
commit 394f30f
Author: Adam Plumer caerus.karu@gmail.com
Date: Sat Jun 13 22:34:22 2020 -0500

docs: update issue template and Gotchas guide The Gotchas guide hasn't been updated in quite some time. This refresh adds a more structured layout with explicit examples and solutions for the most common issues.
This also updates the issue template to add a note about what constitutes an appropriate issue, and a link to the gotchas guide.

commit 6fc561b
Author: Renovate Bot bot@renovateapp.com
Date: Tue Jul 7 05:06:10 2020 +0000
```
build: update rollup to version ~2.20.0
```
commit 6be1af9
Author: Renovate Bot bot@renovateapp.com
Date: Mon Jul 6 07:42:30 2020 +0000
```
build: update to version
```
commit 7a4e603
Author: Renovate Bot bot@renovateapp.com
Date: Sun Jul 5 05:31:05 2020 +0000
```
build: update rollup to version ~2.19.0
```
commit fd444a1
Author: renovate[bot] <29139614+renovate[bot]@ users.noreply.github.com>
Date: Fri Jul 3 01:27:01 2020 -0500
bot@renovateapp.com>">
```
build: update to version (#1717)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
```
commit dc2b87c
Author: renovate[bot] <29139614+renovate[bot]@ users.noreply.github.com>
Date: Fri Jul 3 01:04:56 2020 -0500
bot@renovateapp.com>">
```
build: update codelyzer to version 6.0.0 (#1752)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
```
commit 61c7e3d
Author: renovate[bot] <29139614+renovate[bot]@ users.noreply.github.com>
Date: Fri Jul 3 00:47:20 2020 -0500
bot@renovateapp.com>">
```
build: update puppeteer to version ~5.0.0 (#1753)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
```

10.0.1 - 2020-06-30
commit 8a32f27

Author: Keen Yee Liau kyliau@google.com

Date: Tue Jun 30 13:57:38 2020 -0700
```
release: v10.0.1
```
commit c262c72
Author: Alan Agius alan.agius4@gmail.com
Date: Fri Jun 26 13:00:45 2020 +0200
```
build: update lock file and @ types/node resolutions
```
commit 2dbe674
Author: Alan Agius alan.agius4@gmail.com
Date: Fri Jun 26 10:52:35 2020 +0200

fix(express-engine): RenderOptions is not assignable to object
Closes #1744

commit 0ebf846
Author: Alan Agius alan.agius4@gmail.com
Date: Fri Jun 26 10:45:56 2020 +0200
```
fix(express-engine): fix return type for app method
```
commit 9024f1c
Author: Alan Agius alan.agius4@gmail.com
Date: Fri Jun 26 10:41:24 2020 +0200
```
test: enable strict mode testing
```
commit ea49db1
Author: Alan Agius alan.agius4@gmail.com
Date: Thu Jun 25 12:14:20 2020 +0200
```
tests: update tests to work with version 10
```

from @nguniversal/express-engine GitHub release notes

Package name: zone.js

0.15.0 - 2024-08-21
PR Close #57418
0.14.10 - 2024-08-05
0.14.8 - 2024-07-17
0.14.7 - 2024-06-06
0.14.6 - 2024-05-17
0.14.5 - 2024-04-30
0.14.4 - 2024-02-13
0.14.3 - 2024-01-09
0.14.2 - 2023-11-03
0.14.1 - 2023-10-26
0.14.0 - 2023-09-18
0.13.3 - 2023-09-12
0.13.2 - 2023-09-11
0.13.1 - 2023-06-12
0.13.0 - 2023-03-06
0.12.0 - 2022-11-07
0.11.8 - 2022-08-12

from zone.js GitHub release notes

Package name: zustand

4.5.5 - 2024-08-15
This improves the persist middleware behavior for an edge case.

What's Changed
- fix(storage): avoid calling setItem with the state just retrieved by @ double-thinker in #2678
- chore(deps): update dependencies by @ dai-shi in #2680
New Contributors
- @ alwalxed made their first contribution in #2634
- @ YashChauhan858 made their first contribution in #2636
- @ donutcube made their first contribution in #2650
- @ vorant94 made their first contribution in #2661
- @ jeppester made their first contribution in #2667
- @ ryota-murakami made their first contribution in #2668
- @ double-thinker made their first contribution in #2678
Full Changelog: v4.5.4...v4.5.5
4.5.4 - 2024-06-26
There was an issue in v4.5.3 with some bundlers.

What's Changed
- fix: no type field in package.json by @ dai-shi in #2622
Full Changelog: v4.5.3...v4.5.4
4.5.3 - 2024-06-26
It comes with a minor fix in types, but also some changes in configs.

What's Changed
- Migrate to pnpm by @ dai-shi in #2545
- useStore uses ReadonlyStoreApi by @ holic in #2586
New Contributors
- @ elie made their first contribution in #2416
- @ DawidWraga made their first contribution in #2435
- @ dreamfliper made their first contribution in #2510
- @ fredericoo made their first contribution in #2525
- @ algoORgoal made their first contribution in #2530
- @ StyleShit made their first contribution in #2550
- @ Aberratio made their first contribution in #2558
- @ prncss-xyz made their first contribution in #2564
- @ sunil-sharma-999 made their first contribution in #2585
- @ yasintz made their first contribution in #2598
- @ L-Qun made their first contribution in #2612
- @ holic made their first contribution in #2586
Full Changelog: v4.5.2...v4.5.3
4.5.2 - 2024-03-02
It should improve the compatibility with old browsers.

What's Changed
- refactor(shallow): Use for..of instead of C-style for by @ onlined in #2374
- fix: return type of persist migrate function changed to PersistedState by @ bobdepreziz in #2360
- build: target es2018 by @ dai-shi in #2361
New Contributors
- @ medyahyejoud made their first contribution in #2353
- @ yankycranky made their first contribution in #2348
- @ cheeZery made their first contribution in #2364
- @ Cadienvan made their first contribution in #2378
- @ bobdepreziz made their first contribution in #2360
Full Changelog: v4.5.1...v4.5.2
4.5.1 - 2024-02-17
4.5.0 - 2024-01-20
4.4.7 - 2023-11-28
4.4.6 - 2023-11-02
4.4.5 - 2023-10-31
4.4.4 - 2023-10-21
4.4.3 - 2023-10-05
4.4.2 - 2023-10-02
4.4.1 - 2023-08-06

from zustand GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.
Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:...

Snyk has created this PR to upgrade: - @nguniversal/express-engine from 10.0.1 to 10.1.0. See this package in npm: https://www.npmjs.com/package/@nguniversal/express-engine - zone.js from 0.11.8 to 0.15.0. See this package in npm: https://www.npmjs.com/package/zone.js - zustand from 4.4.1 to 4.5.5. See this package in npm: https://www.npmjs.com/package/zustand See this project in Snyk: https://app.snyk.io/org/astrogo228/project/ee1e025b-df61-4c65-8457-4068781ac3f6?utm_source=github&utm_medium=referral&page=upgrade-pr

github-actions · 2024-10-03T02:34:39Z

This PR has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in two weeks if no further activity occurs.

github-actions · 2024-10-17T02:35:20Z

This PR was closed because it has been stalled for 14 days with no activity.

github-actions bot added the Stale label Oct 3, 2024

github-actions bot closed this Oct 17, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , zone.js, zustand #33

[Snyk] Upgrade: , zone.js, zustand #33

VladDudarenko commented Sep 18, 2024

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

github-actions bot commented Oct 3, 2024

github-actions bot commented Oct 17, 2024

[Snyk] Upgrade: , zone.js, zustand #33

[Snyk] Upgrade: , zone.js, zustand #33

Conversation

VladDudarenko commented Sep 18, 2024

Snyk has created this PR to upgrade multiple dependencies.

Issues fixed by the recommended upgrade:

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

github-actions bot commented Oct 3, 2024

github-actions bot commented Oct 17, 2024