Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[Snyk] Fix for 15 vulnerabilities #31

Open
wants to merge 24 commits into
base: main
Choose a base branch
from
Open

[Snyk] Fix for 15 vulnerabilities #31

wants to merge 24 commits into from

Commits on May 23, 2024

  1. [ImgBot] Optimize images 

    *Total -- 1,244.02kb -> 1,081.46kb (13.07%)

/ietf/static/images/iab-logo-white.svg -- 3.83kb -> 2.80kb (26.96%)
/ietf/static/images/irtf-logo.svg -- 5.98kb -> 4.82kb (19.37%)
/ietf/static/images/irtf-logo-white.svg -- 5.63kb -> 4.58kb (18.62%)
/ietf/static/images/ietf-logo-nor-white.svg -- 7.37kb -> 6.03kb (18.23%)
/ietf/static/images/ietf-logo-white.svg -- 7.95kb -> 6.55kb (17.59%)
/docker/assets/vscode-sqltools.png -- 69.04kb -> 58.03kb (15.95%)
/docker/assets/vscode-tasks.png -- 26.11kb -> 22.30kb (14.59%)
/playwright/data/floor-plan-images/meeting-floor-6.jpg -- 492.25kb -> 423.88kb (13.89%)
/playwright/data/floor-plan-images/meeting-floor-2.png -- 198.30kb -> 171.26kb (13.63%)
/docker/assets/vscode-debug-toolbar.png -- 6.04kb -> 5.29kb (12.48%)
/docker/assets/vscode-ports.png -- 26.54kb -> 23.52kb (11.37%)
/playwright/data/floor-plan-images/meeting-floor-1.png -- 319.79kb -> 284.51kb (11.03%)
/playwright/data/floor-plan-images/meeting-floor-3.png -- 52.49kb -> 47.11kb (10.25%)
/docker/assets/vscode-terminal-new.png -- 22.71kb -> 20.78kb (8.48%)

Signed-off-by: ImgBotApp <ImgBotHelp@gmail.com>
    @ImgBotApp
    ImgBotApp committed May 23, 2024
    Configuration menu
    Copy the full SHA
    d49d7e9 View commit details
    Browse the repository at this point in the history

Commits on May 26, 2024

  1. feat: upgrade chart.js from 3.9.1 to 4.4.2 

    Snyk has created this PR to upgrade chart.js from 3.9.1 to 4.4.2.

See this package in npm:
chart.js

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/48e998f9-e104-41a9-b2b0-22f7a7998025?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed May 26, 2024
    Configuration menu
    Copy the full SHA
    2e96a7e View commit details
    Browse the repository at this point in the history

Commits on May 27, 2024

  1. feat: upgrade @octokit/core from 4.2.4 to 6.1.2 

    Snyk has created this PR to upgrade @octokit/core from 4.2.4 to 6.1.2.

See this package in npm:
@octokit/core

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/629944c4-126b-4cf9-bf6c-bcab92e15726?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed May 27, 2024
    Configuration menu
    Copy the full SHA
    aea18cf View commit details
    Browse the repository at this point in the history

  2. fix: upgrade caniuse-lite from 1.0.30001603 to 1.0.30001616 

    Snyk has created this PR to upgrade caniuse-lite from 1.0.30001603 to 1.0.30001616.

See this package in yarn:
caniuse-lite

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/6d5c60b9-38d8-4caa-a3f2-6f8576dfc23f?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed May 27, 2024
    Configuration menu
    Copy the full SHA
    5171599 View commit details
    Browse the repository at this point in the history

  3. fix: upgrade vue-router from 4.3.0 to 4.3.2 

    Snyk has created this PR to upgrade vue-router from 4.3.0 to 4.3.2.

See this package in yarn:
vue-router

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/6d5c60b9-38d8-4caa-a3f2-6f8576dfc23f?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed May 27, 2024
    Configuration menu
    Copy the full SHA
    3123eb0 View commit details
    Browse the repository at this point in the history

  4. fix: upgrade naive-ui from 2.38.1 to 2.38.2 

    Snyk has created this PR to upgrade naive-ui from 2.38.1 to 2.38.2.

See this package in yarn:
naive-ui

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/6d5c60b9-38d8-4caa-a3f2-6f8576dfc23f?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed May 27, 2024
    Configuration menu
    Copy the full SHA
    82bfd98 View commit details
    Browse the repository at this point in the history

  5. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-FONTTOOLS-6133203
- https://snyk.io/vuln/SNYK-PYTHON-JWCRYPTO-6405821
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SELENIUM-6062316
- https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674
    @snyk-bot
    snyk-bot committed May 27, 2024
    Configuration menu
    Copy the full SHA
    f5dd3e3 View commit details
    Browse the repository at this point in the history

Commits on Jun 5, 2024

  1. Merge pull request #10 from OKEAMAH/snyk-upgrade-037658e41121b55ab398… 

    …88d3ed3909d8
    @OKEAMAH
    OKEAMAH committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    ffb033c View commit details
    Browse the repository at this point in the history

  2. Merge pull request #8 from OKEAMAH/snyk-upgrade-3d52ae7ad2d287c17778c… 

    …fcdb02e2e66
    @OKEAMAH
    OKEAMAH committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    6339e8e View commit details
    Browse the repository at this point in the history

  3. Merge pull request #11 from OKEAMAH/snyk-fix-6f79b78a214d0acd9d82c256… 

    …131a7908
    @OKEAMAH
    OKEAMAH committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    696d83d View commit details
    Browse the repository at this point in the history

  4. Merge pull request #5 from OKEAMAH/snyk-upgrade-b86e5c3f72665030d8707… 

    …2fc6d777921
    @OKEAMAH
    OKEAMAH committed Jun 5, 2024
    Configuration menu
    Copy the full SHA
    dd2c294 View commit details
    Browse the repository at this point in the history

Commits on Jun 6, 2024

  1. feat: upgrade shepherd.js from 11.2.0 to 12.0.2 

    Snyk has created this PR to upgrade shepherd.js from 11.2.0 to 12.0.2.

See this package in yarn:
shepherd.js

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/6d5c60b9-38d8-4caa-a3f2-6f8576dfc23f?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    3f1c3e6 View commit details
    Browse the repository at this point in the history

  2. feat: upgrade got from 13.0.0 to 14.2.1 

    Snyk has created this PR to upgrade got from 13.0.0 to 14.2.1.

See this package in npm:
got

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/760bbc1c-a4df-4404-a525-5c75a57d1090?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    9480466 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #16 from OKEAMAH/snyk-upgrade-b703574f74805c012d9d… 

    …3d796b3de307
    @OKEAMAH
    OKEAMAH committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    5524cb7 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #14 from OKEAMAH/snyk-upgrade-319f72b9d951d68468fd… 

    …15d5202c3dc4
    @OKEAMAH
    OKEAMAH committed Jun 6, 2024
    Configuration menu
    Copy the full SHA
    db2f215 View commit details
    Browse the repository at this point in the history

Commits on Jun 9, 2024

  1. fix: upgrade got from 14.2.1 to 14.3.0 

    Snyk has created this PR to upgrade got from 14.2.1 to 14.3.0.

See this package in npm:
got

See this project in Snyk:
https://app.snyk.io/org/okeamah/project/760bbc1c-a4df-4404-a525-5c75a57d1090?utm_source=github&utm_medium=referral&page=upgrade-pr
    @snyk-bot
    snyk-bot committed Jun 9, 2024
    Configuration menu
    Copy the full SHA
    b44910a View commit details
    Browse the repository at this point in the history

Commits on Jun 15, 2024

  1. fix: docker/db.Dockerfile to reduce vulnerabilities 

    The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133
- https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133
- https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133
- https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133
- https://snyk.io/vuln/SNYK-DEBIAN11-ZLIB-6008961
    @snyk-bot
    snyk-bot committed Jun 15, 2024
    Configuration menu
    Copy the full SHA
    4ea31cd View commit details
    Browse the repository at this point in the history

Commits on Jun 16, 2024

  1. Merge pull request #3 from ietf-tools/main 

    [pull] main from ietf-tools:main
    @OKEAMAH
    OKEAMAH committed Jun 16, 2024
    Configuration menu
    Copy the full SHA
    f44fff9 View commit details
    Browse the repository at this point in the history

  2. Merge pull request #1 from OKEAMAH/imgbot 

    [ImgBot] Optimize images
    @OKEAMAH
    OKEAMAH committed Jun 16, 2024
    Configuration menu
    Copy the full SHA
    b2cccd9 View commit details
    Browse the repository at this point in the history

  3. Merge pull request #2 from OKEAMAH/snyk-upgrade-5429de5ae2c4ebabf3d69… 

    …136eef5ecd6

[Snyk] Upgrade chart.js from 3.9.1 to 4.4.2
    @OKEAMAH
    OKEAMAH committed Jun 16, 2024
    Configuration menu
    Copy the full SHA
    220a8e3 View commit details
    Browse the repository at this point in the history

  4. Merge pull request #4 from OKEAMAH/snyk-upgrade-71a2c869bcad1d677944b… 

    …01924cf356c

[Snyk] Upgrade @octokit/core from 4.2.4 to 6.1.2
    @OKEAMAH
    OKEAMAH committed Jun 16, 2024
    Configuration menu
    Copy the full SHA
    82ed036 View commit details
    Browse the repository at this point in the history

  5. Merge pull request #19 from OKEAMAH/snyk-fix-eb6d3b54be950da0194ead8a… 

    …8a7583c2

[Snyk] Security upgrade postgres from 14.6 to 14.12
    @OKEAMAH
    OKEAMAH committed Jun 16, 2024
    Configuration menu
    Copy the full SHA
    bf1bc4a View commit details
    Browse the repository at this point in the history

  6. Merge pull request #18 from OKEAMAH/snyk-upgrade-2346c9415056bf453c22… 

    …4a257772c22c

[Snyk] Upgrade got from 14.2.1 to 14.3.0
    @OKEAMAH
    OKEAMAH committed Jun 16, 2024
    Configuration menu
    Copy the full SHA
    bb2ba1d View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2024

  1. fix: requirements.txt to reduce vulnerabilities 

    The following vulnerabilities are fixed by pinning transitive dependencies:
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7435780
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436273
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436514
- https://snyk.io/vuln/SNYK-PYTHON-DJANGO-7436646
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-5918878
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6043904
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6182918
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219984
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6219986
- https://snyk.io/vuln/SNYK-PYTHON-PILLOW-6514866
- https://snyk.io/vuln/SNYK-PYTHON-REQUESTS-6928867
- https://snyk.io/vuln/SNYK-PYTHON-SETUPTOOLS-7448482
- https://snyk.io/vuln/SNYK-PYTHON-SQLPARSE-6615674
- https://snyk.io/vuln/SNYK-PYTHON-URLLIB3-7267250
- https://snyk.io/vuln/SNYK-PYTHON-ZIPP-7430899
    @snyk-bot
    snyk-bot committed Jul 27, 2024
    Configuration menu
    Copy the full SHA
    09b7dd1 View commit details
    Browse the repository at this point in the history