Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency nexmo to v2 #3

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jul 5, 2022

This PR contains the following updates:

Package Type Update Change
nexmo dependencies major ^1.0.0-beta-7 -> ^2.2.1

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
High High 8.8 CVE-2018-3728

Release Notes

nexmo/nexmo-node (nexmo)

v2.2.1

Compare Source

  • Update dependencies to fix security vulnerability (See #​179)

v2.2.0

Compare Source

  • Add support for media API

v2.1.1

Compare Source

Bug Fixes
  • #​125 - Prevent default headers being overwritten in HTTPClient (@​poying)
  • #​155 - Handle 204 status code as a success, not an error (@​AverageMarcus)
  • You can now change the port in HTTPClient (previously forced to use 443)
Documentation
New Features
  • #​139 - Search SMS messages
  • #​140 - Search SMS rejections
  • #​141 - Report conversion data to Nexmo (if enabled on your account)
  • #​169 - Trigger an auto-reload top-up
Other goodies
  • #​111 - We now officially support all LTS node.js versions + the latest current
  • Added Prettier as our formatting tool via eslint. Run npm run lint-fix to automatically fix any formatting issues
  • Added NYC for code coverage. There are currently no thresholds - we'll be adding these in the future
Q&A

Q. What happened to 2.1.0?
A. @​mheap can't computer correctly and published the wrong thing to NPM. As NPM (quite rightly) doesn't let you overwrite tags, we're having to skip to 2.1.1

v2.0.2

Compare Source

  • Remove SDK check for valid phone number, instead leaving this to the API
  • Remove SDK check for valid application type, instead leaving this to the API

v2.0.1

Compare Source

  • FIXED: #​116 - default setting of retry-after for 429 http status code responses

v2.0.0

Compare Source

  • FIXED: #​110 - check the statusCode on the response
  • FIXED: #​114 - handle 429 HTTP status codes
  • UPDATED: To allow errors to be programmatically useful the error callback objects has been updated to {statusCode: STATUS_CODE, body: JSON_BODY, headers: HEADERS}

v1.2.1

Compare Source

v1.2.0

Compare Source

  • ADDED: Add File API to library. nexmo.files.get and nexmo.files.save.

v1.1.2

Compare Source

  • Fixed: Bug #​104 - Fix JSON parsing error

v1.1.1

Compare Source

  • UPDATED: Changed User Agent format to match other libraries
  • FIXED: Bug #​88 - Undefined method when missing method declaration

v1.1.0

Compare Source

  • ADDED: nexmo.generateJwt to generate JWT based on instance credentials
  • ADDED: Nexmo.generateJwt static function to generate JWT

v1.0.0

Compare Source

  • ADDED: applicationId and privateKey properties to first constructor parameter to support JWT generation.
  • ADDED: options.logger to constructor 2nd parameter to allow adding customer logger.
  • ADDED: options.appendToUserAgent to constructor 2nd paramater to append custom string to User-Agent header sent to Nexmo.
  • ADDED: nexmo.calls adding support to create, get, update and delete calls.
  • ADDED: nexmo.applications adding support to create, get, update and delete calls.
  • ADDED: Functionality is now namespaced:
    • nexmo.message
    • nexmo.calls
    • nexmo.number
    • nexmo.verify
    • nexmo.numberInsight
    • nexmo.account
    • nexmo.voice - legacy voice functionality
  • CHANGED: var Nexmo = require('nexmo'); returns a class definition which should be created using the new operator e.g. var nexmo = new Nexmo(args...);.
  • REMOVED: var nexmo = require('nexmo'); no longer exposes singleton functions offered by "easynexmo".

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jul 5, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency nexmo to v2 Update dependency nexmo to v2 - autoclosed Mar 26, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/nexmo-2.x branch March 26, 2023 18:04
@mend-for-github-com mend-for-github-com bot changed the title Update dependency nexmo to v2 - autoclosed Update dependency nexmo to v2 Mar 31, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/nexmo-2.x branch March 31, 2023 05:46
@mend-for-github-com mend-for-github-com bot changed the title Update dependency nexmo to v2 Update dependency nexmo to v2 - autoclosed Jun 14, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/nexmo-2.x branch June 14, 2023 21:28
@mend-for-github-com mend-for-github-com bot changed the title Update dependency nexmo to v2 - autoclosed Update dependency nexmo to v2 Jun 19, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 19, 2023
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/nexmo-2.x branch from 7ee5e1c to f2742ef Compare June 19, 2023 20:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants