Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade concurrently from 6.0.0 to 6.5.1 #2

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

cleancoindev
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade concurrently from 6.0.0 to 6.5.1.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 10 versions ahead of your current version.
  • The recommended version was released 5 months ago, on 2021-12-19.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HOSTEDGITINFO-1088355
372/1000
Why? Proof of Concept exploit, CVSS 5.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: concurrently
  • 6.5.1 - 2021-12-19
  • 6.5.0 - 2021-12-17
    • Add support for configuring via environment variables that start with CONCURRENTLY_ prefix (#289)
    • Add --timings flag to show when each process started and stopped, and how long they ran for (#291, #295)
  • 6.4.0 - 2021-11-13
    • Add --hide flag to hide the output of specified commands (#138, #173)
  • 6.3.0 - 2021-10-02
    • Distribute prefix colors correctly when using npm/yarn/pnpm script expansion (#186, #210, #234, #286)
    • Add new option to programmatic API, prefixColors, which serves as fallback for commands without a prefixColor (#286)
  • 6.2.2 - 2021-09-27
    • Remove read-pkg dependency which had a vulnerability issue (#274)
  • 6.2.1 - 2021-08-08
    • Fix hanging issue after using programmatic API to read from stdin (#252, #253)
      Big kudos to @ brandonchinn178 for finding and fixing this! 🏆 🎉
    • Correctly reexport flow controllers (#278)
  • 6.2.0 - 2021-05-24
    • Include killed in the command result in programmatic API (#250)
    • Make --restart-tries restart forever with negative values (#263)
  • 6.1.0 - 2021-05-08
    • Change default color to reset (no color set), instead of gray.dim (#259, #275)
  • 6.0.2 - 2021-04-12
    • Fix --handle-input when input contains a colon (#269)
    • Update lodash to fix a vulnerability (#270, #271)
  • 6.0.1 - 2021-04-05
    • Fix cwd option not overwriting per command if specified in programmatic API (#266, #268)
  • 6.0.0 - 2021-02-20
from concurrently GitHub release notes
Commit messages
Package name: concurrently
  • 041e090 6.5.1
  • dd54b9f Fix wildcard naming to match documented behavior (#212)
  • ecc5fa0 6.5.0
  • ce799d6 npm audit fix
  • f8119bf docs: replace $0 placeholder with `concurrently`
  • 7578774 Add support for options in environment variables (#289)
  • c04740a Add timing functionality (#295)
  • 59de6e4 docs: make sure to wrap wildcards in quotes!
  • 0da5d93 6.4.0
  • 66ed4bf Simplify .gitignore
  • 475fb53 Optimise .editorconfig
  • 88b8d19 Add option and CLI flag to hide command output (#173)
  • 08eda4f 6.3.0
  • ed8d792 Fix colors option when using wildcard commands (#286)
  • 105445c 6.2.2
  • 875d375 Fix linting
  • 7263ffe Remove read-pkg
  • 8bcdf7f ci: add missing parallel coverage reporting step
  • 24e51ad Add coveralls badge to readme
  • b16585f ci: readd coveralls reporting
  • 0bc490f 6.2.1
  • c295062 Stop reading from stdin after programmatic API finishes (#253)
  • 07a7de1 Update links to new GH org and remove travis+appveyor (#285)
  • f574848 Fix link to substack blog post in README

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants