Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Upgrade browser-sync from 2.18.8 to 2.26.7 #418

Closed
wants to merge 1 commit into from
Closed

[Snyk] Upgrade browser-sync from 2.18.8 to 2.26.7 #418

wants to merge 1 commit into from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade browser-sync from 2.18.8 to 2.26.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
  • The recommended version is 46 versions ahead of your current version.
  • The recommended version was released 9 months ago, on 2019-06-07.

The recommended version fixes:

Severity Issue Exploit Maturity
Denial of Service (DoS)
npm:ws:20171108		 Mature
Prototype Override Protection Bypass
npm:qs:20170213		 No Known Exploit
Prototype Override Protection Bypass
npm:qs:20170213		 No Known Exploit
Denial of Service (DoS)
npm:qs:20140806		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:parsejson:20170908		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:fresh:20170908		 No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-73638		 No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-450202		 Proof of Concept
Insecure Randomness
npm:ws:20160920		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:ua-parser-js:20171012		 No Known Exploit
Uninitialized Memory Exposure
npm:tunnel-agent:20170305		 Proof of Concept
Denial of Service (DoS)
npm:qs:20140806-1		 No Known Exploit
Prototype Pollution
npm:hoek:20180212		 No Known Exploit
Cross-site Scripting (XSS)
npm:express:20140912		 No Known Exploit
Cross-site Scripting (XSS)
npm:connect:20130701		 No Known Exploit
Denial of Service (DoS)
npm:connect:20120107		 No Known Exploit
Prototype Pollution
npm:lodash:20180130		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-73639		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:ms:20170412		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:ms:20170412		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:mime:20170907		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:mime:20170907		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		 No Known Exploit
Regular Expression Denial of Service (ReDoS)
npm:debug:20170905		 No Known Exploit
Release notes
Package name: browser-sync
  • 2.26.7 - 2019-06-07

    v2.26.7

  • 2.26.6 - 2019-06-07

    v2.26.6

  • 2.26.5 - 2019-04-24

    v2.26.5

  • 2.26.4 - 2019-04-22

    v2.26.4

  • 2.26.3 - 2018-10-13

    fixes

    • application/wasm support - fixes #1598 d60cd91
    • deps - ensure previous users of browser-sync-client are not affected by new structure - fixes #1615 0a2ff5a
    • npm audit fixes across all packages - fixes #1618 9f3fea4
  • 2.26.2 - 2018-10-13

    v2.26.2

  • 2.26.1 - 2018-10-13

    v2.26.1

  • 2.26.0 - 2018-10-06

    these notes describe the change from 2.24.6 -> 2.26.0

    fixes

    • Removing default logger prefix [BS] - fixes #1607 257fba6
    • case-insensitive matching on domain key in proxy responses dacfc8b
    • bump chokidar fixing fsevents build - closes #1613 11729cc
    • Unexpected Page Reload after Pausing in Debugger - fixes #1591 06ee1b7
    • scroll - add missing init method for window.name method of scroll restoring - fixes #1586 #1457 #1457 9e96603
    • proxy Port gets unnecesarily rewritten in Proxy - fixes #1577 48286e0

    chore

    • move cypress to top-level dep 0d4ab81
    • package-lock files 900e23e
    • change API of option transforms ef12e9a

    lerna

    feature

    • adding 'listen' option to restrict binding of interfaces d641916

    docs

    • emphasize a couple of points - fixes #1461 cf0febd
    • added additional note about httpModule option - fixes #1485 16487ad

    deps

    • npm audit for localtunnel - fixes #1587 27f2173
    • easy-extender@2.3.4 cypress@3.1.0 supertest@3.1.0 a6578a3
  • 2.25.3-alpha.0 - 2018-10-06

    v2.25.3-alpha.0

  • 2.25.2-alpha.0 - 2018-10-06

    v2.25.2-alpha.0

  • 2.25.1-alpha.0 - 2018-10-06
  • 2.25.0 - 2018-10-06
  • 2.25.0-alpha.0 - 2018-09-17
  • 2.24.7 - 2018-08-26
  • 2.24.6 - 2018-07-21
  • 2.24.5 - 2018-06-24
  • 2.24.4 - 2018-05-03
  • 2.24.3 - 2018-05-03
  • 2.24.3-rc1 - 2018-05-02
  • 2.24.2 - 2018-05-02
  • 2.24.2-rc1 - 2018-05-02
  • 2.24.1 - 2018-04-30
  • 2.24.1-rc1 - 2018-04-30
  • 2.24.0 - 2018-04-29
  • 2.24.0-rc4 - 2018-04-29
  • 2.24.0-rc3 - 2018-04-29
  • 2.24.0-rc2 - 2018-04-29
  • 2.24.0-rc1 - 2018-04-29
  • 2.23.7 - 2018-04-20
  • 2.23.6 - 2018-01-24
  • 2.23.5 - 2018-01-10
  • 2.23.4 - 2018-01-10
  • 2.23.3 - 2018-01-05
  • 2.23.2 - 2018-01-01
  • 2.23.1 - 2017-12-29
  • 2.23.0 - 2017-12-29
  • 2.22.0 - 2017-12-28
  • 2.21.0 - 2017-12-22
  • 2.20.1 - 2017-12-22
  • 2.20.0 - 2017-12-21
  • 2.19.0 - 2017-12-19
  • 2.18.13 - 2017-07-20
  • 2.18.12 - 2017-05-21
  • 2.18.11 - 2017-05-15
  • 2.18.10 - 2017-05-15
  • 2.18.9 - 2017-05-15
  • 2.18.8 - 2017-02-13
from browser-sync GitHub release notes
Commit messages
Package name: browser-sync
  • 2191369 v2.26.7
  • 53f9b36 docs: readme
  • 0b3d98b v2.26.6
  • fdfc681 tests: add e2e tests to package.json
  • c56cfd9 Merge pull request #1698 from emeitch/fix_deprecated_header
  • 2fd598f Merge pull request #1690 from XhmikosR/xmr-ci
  • 841ccd5 Merge pull request #1694 from coliff/patch-1
  • 209c9c1 Merge pull request #1697 from gaards/update-localtunnel
  • 87bee4b Use getHeaders or _headers
  • 77abfd3 Update localtunnel
  • 1f073f9 Remove gittip from README (service closed down)
  • 51792b1 AppVeyor tweaks.
  • 9c9d71a CI: Add Node.js 12 and 10.
  • 6dd2d56 v2.26.5
  • 62007c8 SyntaxError in micromatch when starting browser-sync - fixes #1682
  • 47a4d1b v2.26.4
  • 05a58db deps: fixes #1677 #1671 #1659 #1648
  • 35035df deps: removed nodemon since it includes flat-stream (security)
  • 1b2eab5 Merge pull request #1634 from mxschmitt/patch-1
  • e35e5dc fix(ui): updated dead links and moved to https
  • 85c4ba7 examples: server + proxy
  • 924d5e7 v2.26.3
  • d60cd91 fix: application/wasm support in Chrome - fixes #1598
  • f95dd7a v2.26.2

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@tcurdt tcurdt closed this Jun 16, 2020
@tcurdt tcurdt deleted the snyk-upgrade-3ef3b48497eaae8ceb71d93cefe91da6 branch June 16, 2020 10:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
2 participants
@snyk-bot @tcurdt