[Snyk] Upgrade amqplib from 0.8.0 to 0.10.3

[debarghyab]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade amqplib from 0.8.0 to 0.10.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released a year ago, on 2022-09-01.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Input Validation SNYK-JS-URLPARSE-2407770	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Authorization Bypass SNYK-JS-URLPARSE-2407759	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Open Redirect SNYK-JS-URLPARSE-1533425	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Access Restriction Bypass SNYK-JS-URLPARSE-2401205	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: amqplib

• 0.10.3 - 2022-09-01
  

  0.10.3

• 0.10.2 - 2022-08-07
  

  0.10.2

• 0.10.1 - 2022-07-26
  

  0.10.1

• 0.10.0 - 2022-06-02
  

  0.10.0

• 0.9.1 - 2022-05-22
• 0.9.0 - 2022-05-09
  

  0.9.0

• 0.8.0 - 2021-05-19
  

  ⚠️ This release drops support for NodeJS < v10 ⚠️. This version of amqplib still works with NodeJS v0.6 through v16, but future versions will not be tested for compatibility with NodeJS < v10.

  This is to unlock other improvements that can now be made, like

  • using the built-in Promise object
  • updating or switching libraries that previously couldn't be updated, because they had dropped support for older NodeJS
  • removing code that is now covered in the standard library, e.g., checking whether a number is an integer

  This release also includes an improvement to TLS connections for people using an AMQP server behind a load balancer. amqplib will now copy the hostname of the connection URL or object to the server name indication field.

from amqplib GitHub release notes

Commit messages

Package name: amqplib

• 7cba4c2 0.10.3
• c0f9a59 Update bitsyntax
• 557aa7c Use @ acuminous/bitsytnax fork
• 3de60ea Update bug_report.md
• 4a66bc0 Update bug_report.md
• 97de17a Experiment with issue templates
• 62433e5 0.10.2
• 3cace63 Merge branch 'chkimes-alloc-unsafe'
• 0aeb5f8 Update CHANGELOG
• c6490d4 Link to PR from allocUnsafe comment
• 92a7cdd Merge branch 'alloc-unsafe' of https://github.com/chkimes/amqplib into chkimes-alloc-unsafe
• 9da3c9b Update connection.js
• a98003e 0.10.1
• 231e24a Fix changelog
• 318a682 Allow servername to be specified via socket options
• 2f952fe Use Buffer.allocUnsafe to reduce allocations
• fd93de3 0.10.0
• 1112257 Update CHANGELOG
• 5f621ad Merge branch 'mohd-akram-native-promise'
• d090310 Address review comments
• f7a8ee1 Use native promises
• 8f5f328 0.9.1
• 7e4910c Add version to changelog
• aa46d76 update changelog

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs