Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade serverless from 3.33.0 to 3.38.0 #142

Closed
wants to merge 1 commit into from

Conversation

noqcks
Copy link
Owner

@noqcks noqcks commented Jan 30, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade serverless from 3.33.0 to 3.38.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 48 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2023-11-22.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept
Prototype Pollution
SNYK-JS-AXIOS-6144788
462/1000
Why? Proof of Concept exploit, CVSS 7.1
No Known Exploit
Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857
462/1000
Why? Proof of Concept exploit, CVSS 7.1
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: serverless from serverless GitHub release notes
Commit messages
Package name: serverless
  • ee7fe48 chore: Release 3.38.0 (#12268)
  • 6cdf14e feat: Add support for provided.al2023 runtime (#12263)
  • cd031b9 chore: Release 3.37.0 (#12262)
  • b21afaf fix: Update pkg config to include axios cjs (#12261)
  • 10980b9 fix: bump platform-client version for axios (#12260)
  • f3f0af8 feat: Add support for nodejs20.x runtime (#12251)
  • bf04146 chore: Release v3.36.0 (#12223)
  • 77a689a docs: Add Dashboard docs on source maps (#12220)
  • 3fc7f4e chore: Bump @ serverless/dashboard-plugin (#12222)
  • f22354e docs: Add details on trace sampling (#12184)
  • ad8bbf1 fix: Improve dashboard documentation
  • 8f266af fix: Fix menu for dashboard documentation
  • f67df7f fix: Improve dashboard documentation
  • bb4d7c8 fix: Dashboard documentation improvements
  • f1fa19c fix: Minor dashboard doc improvements (#12177)
  • eb462ed feat: Improved dashboard documentation and gitignore (#12176)
  • c5b6e41 docs: Minor updates for Dashboard V.2 (#12170)
  • 8292d7c chore: Remove Console related display methods (#12168)
  • b1def20 chore: Release v3.35.2 (#12164)
  • 7f5736c chore: Bump @ serverless/dashboard-plugin (#12163)
  • 101ce53 fix: Adjust copy for clarity (#12162)
  • ee89ebe chore: Release v3.35.1 (#12161)
  • 1f8d786 fix: Do not use isDashboard in onboarding flow (#12160)
  • 737bc1e chore: Release v3.35.0 (#12159)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Copy link

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/[email protected] environment, filesystem, network, shell, unsafe Transitive: eval +476 130 MB serverless-main

🚮 Removed packages: npm/[email protected]

View full report↗︎

Copy link

codecov bot commented Jan 30, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Comparison is base (4bea779) 88.67% compared to head (6270c9a) 88.67%.

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #142   +/-   ##
=======================================
  Coverage   88.67%   88.67%           
=======================================
  Files           8        8           
  Lines         256      256           
  Branches       33       33           
=======================================
  Hits          227      227           
  Misses         27       27           
  Partials        2        2           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@noqcks noqcks closed this Apr 3, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants