[Snyk] Upgrade: , , uuid, , , axios, mysql2, sequelize, sequelize-cli #160
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @google-cloud/pubsub from 2.19.4 to 4.7.0.
See this package in npm: https://www.npmjs.com/package/@google-cloud/pubsub
- @google-cloud/scheduler from 3.3.1 to 4.3.0.
See this package in npm: https://www.npmjs.com/package/@google-cloud/scheduler
- uuid from 8.3.2 to 10.0.0.
See this package in npm: https://www.npmjs.com/package/uuid
- @google-cloud/spanner from 5.18.0 to 7.14.0.
See this package in npm: https://www.npmjs.com/package/@google-cloud/spanner
- @google-cloud/trace-agent from 5.1.6 to 8.0.0.
See this package in npm: https://www.npmjs.com/package/@google-cloud/trace-agent
- axios from 0.26.1 to 1.7.5.
See this package in npm: https://www.npmjs.com/package/axios
- mysql2 from 1.7.0 to 3.11.0.
See this package in npm: https://www.npmjs.com/package/mysql2
- sequelize from 5.22.5 to 6.37.3.
See this package in npm: https://www.npmjs.com/package/sequelize
- sequelize-cli from 5.5.1 to 6.6.2.
See this package in npm: https://www.npmjs.com/package/sequelize-cli
See this project in Snyk:
https://app.snyk.io/org/cachiman-inc/project/99d13bc1-28f2-4e5a-8d33-855fc070bac6?utm_source=github&utm_medium=referral&page=upgrade-pr
|
Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA). View this failed invocation of the CLA check for more information. For the most up to date status, view the checks section at the bottom of the pull request. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@google-cloud/pubsub
⚠️ This is a major version upgrade, and may be a breaking change | 23 days ago
⚠️ This is a major version upgrade, and may be a breaking change | 4 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 3 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | 7 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a month ago
⚠️ This is a major version upgrade, and may be a breaking change | 2 months ago
⚠️ This is a major version upgrade, and may be a breaking change | 5 months ago
⚠️ This is a major version upgrade, and may be a breaking change | a year ago
from 2.19.4 to 4.7.0 | 41 versions ahead of your current version
on 2024-08-26
@google-cloud/scheduler
from 3.3.1 to 4.3.0 | 5 versions ahead of your current version
on 2024-05-21
uuid
from 8.3.2 to 10.0.0 | 4 versions ahead of your current version
on 2024-06-09
@google-cloud/spanner
from 5.18.0 to 7.14.0 | 40 versions ahead of your current version
on 2024-08-14
@google-cloud/trace-agent
from 5.1.6 to 8.0.0 | 5 versions ahead of your current version
on 2024-02-07
axios
from 0.26.1 to 1.7.5 | 47 versions ahead of your current version
on 2024-08-23
mysql2
from 1.7.0 to 3.11.0 | 66 versions ahead of your current version
on 2024-07-27
sequelize
from 5.22.5 to 6.37.3 | 105 versions ahead of your current version
on 2024-04-13
sequelize-cli
from 5.5.1 to 6.6.2 | 14 versions ahead of your current version
on 2023-11-03
Issues fixed by the recommended upgrade:
SNYK-JS-PROTOBUFJS-2441248
SNYK-JS-PROTOBUFJS-5756498
SNYK-JS-PROTOBUFJS-5756498
SNYK-JS-SEQUELIZE-2932027
SNYK-JS-SEQUELIZE-2959225
SNYK-JS-SEQUELIZE-3324088
SNYK-JS-ANSIREGEX-1583908
SNYK-JS-AXIOS-6032459
SNYK-JS-MYSQL2-6861580
SNYK-JS-SEQUELIZE-3324089
SNYK-JS-SEQUELIZE-3324090
SNYK-JS-AXIOS-6124857
SNYK-JS-GRPCGRPCJS-7242922
SNYK-JS-INFLIGHT-6095116
SNYK-JS-MYSQL2-6591084
SNYK-JS-MYSQL2-6591085
SNYK-JS-MYSQL2-6591300
SNYK-JS-MYSQL2-6670046
Release notes
Package name: @google-cloud/pubsub
-
4.7.0 - 2024-08-26
- Add support for OTel context propagation and harmonized spans (#1833) (4b5c90d)
-
4.6.0 - 2024-08-23
- Add max messages batching for Cloud Storage subscriptions (#1956) (90546f6)
- Add use_topic_schema for Cloud Storage Subscriptions (#1948) (120fa1b)
- docs samples: Update missing argv in sample metadata for push subscription (#1946) (34b8c03)
-
4.5.0 - 2024-06-11
- Add service_account_email for export subscriptions (#1927) (c532854)
-
4.5.0-otel-beta.2 - 2024-08-08
-
4.4.1 - 2024-05-30
- An existing message
- An existing method
- An existing method
- deps: Update dependency protobufjs to ~7.3.0 (#1921) (c5afd34)
- Pull in new gax for protobufjs vuln fix (#1925) (8024c6d)
-
4.4.0 - 2024-05-06
- Add several fields to manage state of database encryption update (#1904) (aba9aee)
- deps: Update dependency @ types/long to v5 (#1901) (d13d395)
-
4.3.3 - 2024-03-06
- Add client library version to headers (#1891) (6b59195)
-
4.3.3-otel-beta.1 - 2024-04-04
-
4.3.2 - 2024-02-13
- Update minimum google-gax versions for auth fixes (#1888) (08acade)
-
4.3.1 - 2024-02-08
- Add option to disable emulator auth handling (temp fix) (#1861) (761cdc8)
-
4.3.0 - 2024-02-05
- Trusted Private Cloud support, use the universeDomain parameter (#1878) (d89fd1d)
- Updated google-gax required for TPC (#1882) (1445856)
-
4.2.0 - 2024-02-01
- Add enforce_in_transit fields and optional annotations (#1873) (09fc424)
- Add schema revision samples (#1870) (044e149)
- deps: Update dependency @ opentelemetry/semantic-conventions to ~1.20.0 (#1871) (2ee0dba)
- deps: Update dependency @ opentelemetry/semantic-conventions to ~1.21.0 (#1876) (0fe61a9)
-
4.1.1 - 2024-01-09
-
4.1.0 - 2023-12-14
-
4.0.7 - 2023-11-09
-
4.0.6 - 2023-09-15
-
4.0.5 - 2023-09-07
-
4.0.4 - 2023-09-06
-
4.0.3 - 2023-09-05
-
4.0.2 - 2023-08-24
-
4.0.1 - 2023-08-14
-
4.0.0 - 2023-08-03
-
3.7.5 - 2023-09-20
-
3.7.3 - 2023-07-26
-
3.7.2 - 2023-07-24
-
3.7.1 - 2023-06-08
-
3.7.0 - 2023-05-26
-
3.6.0 - 2023-05-12
-
3.5.2 - 2023-04-28
-
3.5.1 - 2023-04-25
-
3.5.0 - 2023-04-17
-
3.4.1 - 2023-03-08
-
3.4.0 - 2023-03-06
-
3.3.0 - 2023-01-23
-
3.2.1 - 2022-11-04
-
3.2.0 - 2022-09-22
-
3.1.1 - 2022-09-07
-
3.1.0 - 2022-07-15
-
3.0.3 - 2022-07-13
-
3.0.1 - 2022-05-30
-
3.0.0 - 2022-05-26
-
2.19.4 - 2022-05-05
from @google-cloud/pubsub GitHub release notes4.7.0 (2024-08-24)
Features
4.6.0 (2024-07-12)
Features
Bug Fixes
4.5.0 (2024-06-11)
Features
4.4.1 (2024-05-30)
Bug Fixes
UpdateVehicleLocationRequestis removed (5451d15)SearchFuzzedVehiclesis removed from serviceVehicleService(5451d15)UpdateVehicleLocationis removed from serviceVehicleService(5451d15)4.4.0 (2024-05-03)
Features
Bug Fixes
4.3.3 (2024-03-03)
Bug Fixes
4.3.2 (2024-02-13)
Bug Fixes
4.3.1 (2024-02-08)
Bug Fixes
4.3.0 (2024-02-05)
Features
Bug Fixes
4.2.0 (2024-02-01)
Features
Bug Fixes
Package name: @google-cloud/scheduler
-
4.3.0 - 2024-05-21
-
4.2.0 - 2024-04-02
-
4.1.0 - 2024-02-13
-
4.0.1 - 2023-09-06
-
4.0.0 - 2023-08-07
-
3.3.1 - 2023-04-14
from @google-cloud/scheduler GitHub release notesPackage name: uuid
-
10.0.0 - 2024-06-09
-
9.0.1 - 2023-09-12
-
9.0.0 - 2022-09-05
-
9.0.0-beta.0 - 2022-08-05
-
8.3.2 - 2020-12-08
from uuid GitHub release noteschore: typo in CHANGELOG
chore(release): 9.0.1
chore(release): 9.0.0
chore(release): 8.3.2
Package name: @google-cloud/spanner
-
7.14.0 - 2024-08-14
- spanner: Add resource reference annotation to backup schedules (#2093) (df539e6)
- deps: Update dependency google-gax to v4.3.9 (#2094) (487efc0)
-
7.13.0 - 2024-08-09
- spanner: Add support for Cloud Spanner Incremental Backups (#2085) (33b9645)
- Unhandled exception error catch (#2091) (e277752)
-
7.12.0 - 2024-08-02
- Grpc keep alive settings (#2086) (7712c35)
-
7.11.0 - 2024-07-29
- Add support for blind writes (#2065) (62fc0a4)
- spanner: Add samples for instance partitions (#2083) (b91e284)
-
7.10.0 - 2024-07-19
- Add field lock_hint in spanner.proto (47520e9)
- Add field order_by in spanner.proto (47520e9)
- Add QueryCancellationAction message in executor protos (47520e9)
- Add support for change streams transaction exclusion option for Batch Write (#2070) (2a9e443)
- spanner: Add support for Cloud Spanner Scheduled Backups (#2045) (47520e9)
- Update Nodejs generator to send API versions in headers for GAPICs (47520e9)
- Callback in getDatabaseDialect (#2078) (7e4a8e9)
- deps: Update dependency google-gax to v4.3.8 (#2077) (e927880)
-
7.9.1 - 2024-06-26
- Retry with timeout (#2071) (a943257)
-
7.9.0 - 2024-06-24
- spanner: Add support for batchWrite (#2054) (06aab6e)
- deps: Update dependency google-gax to v4.3.4 (#2051) (80abf06)
- deps: Update dependency google-gax to v4.3.5 (#2055) (702c9b0)
- deps: Update dependency google-gax to v4.3.6 (#2057) (74ebf1e)
- deps: Update dependency google-gax to v4.3.7 (#2068) (28fec6c)
-
7.8.0 - 2024-05-27
- Add
- Add support for multi region encryption config (81fa610)
- Add support for Proto columns (#1991) (ae59c7f)
- spanner: Add support for change streams transaction exclusion option (#2049) (d95cab5)
- deps: Update dependency google-gax to v4.3.3 (#2038) (d86c1b0)
- Drop table statement (#2036) (f31d7b2)
-
7.7.0 - 2024-04-22
- OptimisticLock option for getTransaction method (#2028) (dacf869)
- spanner: Adding
- deps: Update dependency google-gax to v4.3.2 (#2026) (0ee9831)
-
7.6.0 - 2024-03-26
- Add instance partition support to spanner instance proto (#2001) (4381047)
- Managed Autoscaler (#2015) (547ca1b)
- spanner: Add a sample for max commit delays (#1993) (91c7204)
- spanner: Add support for float32 (#2020) (99e2c1d)
-
7.5.0 - 2024-03-04
-
7.4.0 - 2024-02-23
-
7.3.0 - 2024-02-08
-
7.2.0 - 2024-01-11
-
7.1.0 - 2023-11-16
-
7.0.0 - 2023-08-30
-
6.16.0 - 2023-08-07
-
6.15.0 - 2023-08-04
-
6.14.0 - 2023-07-22
-
6.13.0 - 2023-07-21
-
6.12.0 - 2023-06-22
-
6.11.0 - 2023-06-07
-
6.10.1 - 2023-05-30
-
6.10.0 - 2023-05-19
-
6.9.0 - 2023-04-26
-
6.8.0 - 2023-04-06
-
6.7.2 - 2023-02-17
-
6.7.1 - 2023-01-31
-
6.7.0 - 2023-01-18
-
6.6.0 - 2022-12-16
-
6.5.0 - 2022-12-05
-
6.4.0 - 2022-10-31
-
6.3.0 - 2022-10-17
-
6.2.0 - 2022-09-21
-
6.1.4 - 2022-09-07
-
6.1.3 - 2022-07-18
-
6.1.2 - 2022-07-07
-
6.1.1 - 2022-07-07
-
6.1.0 - 2022-07-05
-
6.0.0 - 2022-06-20
-
5.18.0 - 2022-04-03
from @google-cloud/spanner GitHub release notes7.14.0 (2024-08-14)
Features
Bug Fixes
7.13.0 (2024-08-09)
Features
Bug Fixes
7.12.0 (2024-08-02)
Features
7.11.0 (2024-07-29)
Features
7.10.0 (2024-07-19)
Features
Bug Fixes
7.9.1 (2024-06-26)
Bug Fixes
7.9.0 (2024-06-21)
Features
Bug Fixes
7.8.0 (2024-05-24)
Features
RESOURCE_EXHAUSTEDto the list of retryable error codes (#2032) (a4623c5)Bug Fixes
7.7.0 (2024-04-17)
Features
EXPECTED_FULFILLMENT_PERIODto the indicate instance creation times (withFULFILLMENT_PERIOD_NORMALorFULFILLMENT_PERIOD_EXTENDEDENUM) with the extended instance creation time triggered by On-Demand Capacity Feature (#2024) (5292e03)Bug Fixes
7.6.0 (2024-03-26)
Features
Package name: @google-cloud/trace-agent
8.0.0 (2024-02-07)
⚠ BREAKING CHANGES
Features
Bug Fixes
Miscellaneous Chores
7.1.2 (2022-09-08)
Bug Fixes
7.1.1 (2022-08-29)
Bug Fixes
7.1.0 (2022-08-10)
Features
7.0.0 (2022-08-10)
⚠ BREAKING CHANGES
clsMechanism: 'none', callingTracer#createChildSpanwill potentially result in a warning, as these spans are considered to be uncorrelated. To ensure that warnings do not occur, disable any plugins that patch modules that create outgoing RPCs (gRPC, HTTP client and database calls). (Use of the custom span APITracer#createChildSpanis not recommended in this configuration -- useRootSpan#createChildSpaninstead.)getResponseTraceContext(input/output has changed from string to TraceContext),createRootSpan(input RootSpanOptions now accepts a TraceContext instead of a string in the traceContext field), andSpan#getTraceContext(output has changed from string to TraceContext).TraceAgenthas been renamed toTracer. In plugins,Patchhas been renamedMonkeypatch, andPatchis nowMonkeypatch|Intercept(this is a rename ofInstrumentation). There are no user-visible JS changes.Features
Bug Fixes