[Snyk] Upgrade moment-timezone from 0.5.27 to 0.5.45

[rc042]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade moment-timezone from 0.5.27 to 0.5.45.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 18 versions ahead of your current version.

• The recommended version was released 3 months ago, on 2024-02-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Directory Traversal SNYK-JS-MOMENT-2440688	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: moment-timezone

• 0.5.45 - 2024-02-04
  
  • Updated data to IANA TZDB 2024a.
• 0.5.44 - 2023-12-29
  
  • Updated data to IANA TZDB 2023d.
  • Fixed .valueOf() to return NaN for invalid zoned objects (matching default moment) #1082.
  • Performance improvements:
    • Use binary search when looking up zone information #720.
    • Avoid redundant checks in tz.guess().
    • Avoid redundant getZone() calls in .tz().
• 0.5.43 - 2023-03-31
  
  • Updated data to IANA TZDB 2023c
• 0.5.42 - 2023-03-24
  
  • Updated data to IANA TZDB 2023b
• 0.5.41 - 2023-02-25
  
  • Updated moment npm dependency to 2.29.4 to remove automated warnings about insecure dependencies #1004.
    Moment Timezone still works with core Moment 2.9.0 and higher.
  • Updated all dev dependencies including UglifyJS, which produces the minified builds.
  • Added deprecation warning to the pre-built moment-timezone-with-data-2012-2022 bundles #1035.
    Use the rolling moment-timezone-with-data-10-year-range files instead.
• 0.5.40 - 2022-12-11
  
  • Updated data to IANA TZDB 2022g
• 0.5.39 - 2022-11-14
  
  • Updated data to IANA TZDB 2022f
• 0.5.38 - 2022-10-15
  
  • Updated data to IANA TZDB 2022e
  • Added moment.tz.dataVersion property to TypeScript definitions #930
  • Removed temporary .tar.gz files from npm releases #1000
• 0.5.37 - 2022-08-25
• 0.5.36 - 2022-08-25
• 0.5.35 - 2022-08-23
• 0.5.34 - 2021-11-10
• 0.5.33 - 2021-02-06
• 0.5.32 - 2020-11-14
• 0.5.31 - 2020-05-17
• 0.5.30 - 2020-05-17
• 0.5.29 - 2020-05-16
• 0.5.28 - 2020-02-21
• 0.5.27 - 2019-10-16

from moment-timezone GitHub release notes

Commit messages

Package name: moment-timezone

• 16157c7 Build moment-timezone 0.5.45
• 2d2b9a3 Bump version to 0.5.45
• 0a32e82 ci: Update to latest version of all actions
• 253bb00 Add editorconfig file for consistent indentation
• 526030f docs: Clarify data update PRs in contributing guide
• 6c31d29 Merge pull request detach causes servicegroups.cfg corruption centreon/centreon-archived#1095 from moment/automated/data-update
• 4d6bced ci: Force running tests after updating data files
• a276881 data: Add 2024a
• ba275d2 ci: Allow downloading tzcode archive as well as tzdata
• 6bf33a2 build(deps): bump @ babel/traverse from 7.17.3 to 7.23.2 (v-Metrics bug centreon/centreon-archived#1094)
• 8974d4f ci: Add experimental workflow to auto-update tzdb data
• 49fa3a9 tests: Rebuild guess tests for 2024
• 25f19b6 Build moment-timezone 0.5.44
• 4734cb2 Bump version to 0.5.44
• 585fabf Merge pull request Support for nagios group dependencies centreon/centreon-archived#1085 from moment/data/2023d
• ece926a Add test for valueOf behaviour with invalid moments (Check all options for sort in service monitoring centreon/centreon-archived#1075)
• 341beac Ensure valueOf returns NaN for invalid instances (Service Detailpage emtpy and no Service Detail PopUp centreon/centreon-archived#1082)
• 69d856d data: Add 2023d
• dc53e6c build(deps): bump @ babel/traverse ([source upgrade] check_pear.php wrong prerequistes centreon/centreon-archived#1076)
• dffed7a perf: Reduce unnecessary getZone() calls in moment.tz()
• f7d8fc2 docs: Add note about maintenance mode in contributing guide
• 4b1419b docs: Update contributing guide to reflect the latest data process
• 8b39cdc perf: Avoid redundant offset/abbr checks in tz.guess (non-Intl fallback)
• 287820a perf: Skip binary search when timestamp is after last transition

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.