Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump typescript from 5.4.2 to 5.4.3 #803

Merged
merged 2 commits into from
Apr 7, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 21, 2024

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 21, 2024
@dependabot dependabot bot requested a review from tiagobcx March 21, 2024 17:48
@pedrompflopes pedrompflopes enabled auto-merge March 21, 2024 17:49
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/typescript-5.4.3 branch from 6883b53 to b5a6cc6 Compare March 24, 2024 08:49
Bumps [typescript](https://github.com/Microsoft/TypeScript) from 5.4.2 to 5.4.3.
- [Release notes](https://github.com/Microsoft/TypeScript/releases)
- [Changelog](https://github.com/microsoft/TypeScript/blob/main/azure-pipelines.release.yml)
- [Commits](microsoft/TypeScript@v5.4.2...v5.4.3)

---
updated-dependencies:
- dependency-name: typescript
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/typescript-5.4.3 branch from b5a6cc6 to b9edf74 Compare March 27, 2024 11:02
@OrShamirCM OrShamirCM disabled auto-merge March 31, 2024 08:57
@OrShamirCM OrShamirCM enabled auto-merge (squash) March 31, 2024 08:57
Copy link
Contributor

Logo
Checkmarx One – Scan Summary & Details106796a3-3d3c-4135-b0f3-bf603bd63c33

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
MEDIUM Missing_HSTS_Header /src/resources/testProj/insecure.php: 24 Attack Vector

Fixed Issues

Severity Issue Source File / Package
MEDIUM Absolute_Path_Traversal /node_modules/node-addon-api/tools/conversion.js: 8
MEDIUM Absolute_Path_Traversal /node_modules/node-addon-api/tools/conversion.js: 8
MEDIUM Absolute_Path_Traversal /node_modules/acorn/dist/bin.js: 37
MEDIUM Absolute_Path_Traversal /node_modules/acorn/dist/bin.js: 40
MEDIUM Absolute_Path_Traversal /node_modules/flat/cli.js: 9
MEDIUM Absolute_Path_Traversal /node_modules/mocha/lib/cli/init.js: 23
MEDIUM Absolute_Path_Traversal /node_modules/mocha/lib/cli/init.js: 23
MEDIUM Absolute_Path_Traversal /node_modules/mocha/lib/cli/init.js: 23
MEDIUM Absolute_Path_Traversal /node_modules/mocha/lib/cli/init.js: 23
MEDIUM Absolute_Path_Traversal /node_modules/mocha/lib/cli/init.js: 23
MEDIUM Absolute_Path_Traversal /node_modules/node-addon-api/tools/check-napi.js: 100
MEDIUM Missing_Encryption_of_Sensitive_Data /node_modules/browserslist/cli.js: 85
MEDIUM Missing_HSTS_Header /node_modules/hpagent/test/got.test.js: 18
MEDIUM SSL_Verification_Bypass /node_modules/typed-rest-client/HttpClient.js: 446
MEDIUM Unpinned Actions Full Length Commit SHA /release-please.yml: 10
MEDIUM Unpinned Actions Full Length Commit SHA /lint-pr.yaml: 15
MEDIUM Unpinned Actions Full Length Commit SHA /pr.yaml: 49
MEDIUM Unpinned Actions Full Length Commit SHA /node.js.yml: 29
MEDIUM Unpinned Actions Full Length Commit SHA /needs-more-info-closer.yaml: 21
LOW Client_DOM_Open_Redirect /node_modules/mocha/mocha.js: 11257
LOW Client_DOM_Open_Redirect /node_modules/mocha/lib/utils.js: 444
LOW Client_DOM_Open_Redirect /node_modules/got/dist/source/core/options.js: 699
LOW Client_JQuery_Deprecated_Symbols /node_modules/ajv/dist/ajv.min.js: 292
LOW Client_JQuery_Deprecated_Symbols /node_modules/neo-async/async.min.js: 1005
LOW Client_Password_In_Comment /node_modules/webpack-cli/node_modules/commander/lib/command.js: 2055
LOW Client_Password_In_Comment /node_modules/webpack-cli/node_modules/commander/lib/command.js: 1997
LOW Client_Password_In_Comment /node_modules/webpack-cli/node_modules/commander/lib/command.js: 1962
LOW Client_Password_In_Comment /node_modules/vscode-extension-tester/node_modules/commander/lib/command.js: 2189
LOW Client_Password_In_Comment /node_modules/vscode-extension-tester/node_modules/commander/lib/command.js: 2095
LOW Client_Password_In_Comment /node_modules/vscode-extension-tester/node_modules/commander/lib/command.js: 2060
LOW Client_Password_In_Comment /node_modules/chai/lib/chai/interface/assert.js: 107
LOW Client_Password_In_Comment /node_modules/chai/chai.js: 4333
LOW Client_Password_In_Comment /node_modules/@types/node/url.d.ts: 538
LOW Client_Password_In_Comment /node_modules/@types/node/tls.d.ts: 619
LOW Client_Password_In_Comment /node_modules/@types/node/tls.d.ts: 568
LOW Client_Password_In_Comment /node_modules/@types/node/tls.d.ts: 262
LOW Client_Password_In_Comment /node_modules/@types/node/process.d.ts: 507
LOW Client_Password_In_Comment /node_modules/@types/node/http2.d.ts: 1581
LOW Client_Password_In_Comment /node_modules/@types/node/http.d.ts: 1323
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 2865
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 2693
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 2158
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 2111
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 1828
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 1785
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 1153
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 1129
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 1086
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 941
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 895
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 885
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 863
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 853
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 820
LOW Client_Password_In_Comment /node_modules/@types/node/crypto.d.ts: 809
LOW Client_Password_In_Comment /node_modules/@types/node/assert.d.ts: 951
LOW Client_Password_In_Comment /node_modules/@types/node/assert.d.ts: 928
LOW Client_Weak_Cryptographic_Hash /node_modules/cacheable-request/dist/index.js: 60
LOW Client_Weak_Cryptographic_Hash /node_modules/prebuild-install/node_modules/bl/test/test.js: 512
LOW Client_Weak_Cryptographic_Hash /node_modules/ws/lib/websocket.js: 920
LOW Client_Weak_Cryptographic_Hash /node_modules/file-entry-cache/cache.js: 47
LOW Client_Weak_Cryptographic_Hash /node_modules/ws/lib/websocket-server.js: 367
LOW Client_Weak_Cryptographic_Hash /node_modules/prebuild-install/node_modules/bl/test/test.js: 511
LOW Client_Weak_Cryptographic_Hash /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 373
LOW Client_Weak_Cryptographic_Hash /node_modules/bl/test/test.js: 403
LOW Client_Weak_Cryptographic_Hash /node_modules/prebuild-install/util.js: 77
LOW Heap_Inspection /node_modules/keytar/src/keytar_posix.cc: 164
LOW Heap_Inspection /node_modules/keytar/src/keytar_posix.cc: 107
LOW Heap_Inspection /node_modules/keytar/src/keytar_posix.cc: 55
LOW Heap_Inspection /node_modules/keytar/src/keytar_mac.cc: 226
LOW Heap_Inspection /node_modules/keytar/src/keytar_mac.cc: 223
LOW Heap_Inspection /node_modules/keytar/src/main.cc: 31
LOW Heap_Inspection /node_modules/keytar/src/async.cc: 216
LOW Heap_Inspection /node_modules/keytar/src/async.h: 24
LOW Log_Forging /node_modules/eslint-config-prettier/bin/cli.js: 34
LOW Log_Forging /node_modules/eslint-config-prettier/bin/cli.js: 34
LOW Log_Forging /node_modules/ajv/scripts/bundle.js: 8
LOW Log_Forging /node_modules/node-addon-api/tools/check-napi.js: 100
LOW Log_Forging /node_modules/semver/bin/semver.js: 6
LOW Log_Forging /node_modules/eslint-plugin-node/node_modules/semver/bin/semver.js: 6
LOW Log_Forging /node_modules/acorn/dist/bin.js: 37
LOW Log_Forging /node_modules/acorn/dist/bin.js: 40
LOW Log_Forging /node_modules/rimraf/bin.js: 21
LOW Log_Forging /node_modules/mkdirp/bin/cmd.js: 30
LOW Log_Forging /node_modules/minimist/example/parse.js: 1
LOW Log_Forging /node_modules/rc/cli.js: 4
LOW Missing_CSP_Header /node_modules/hpagent/test/got.test.js: 18
LOW Unprotected_Cookie /node_modules/selenium-webdriver/lib/webdriver.js: 2030
LOW Unprotected_Cookie /node_modules/got/dist/source/core/index.js: 934
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 318
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 317
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 316
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 315
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 314
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 313
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 318
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 317
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 316
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 315
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 314
LOW Use_Of_Hardcoded_Password /node_modules/azure-devops-node-api/opensource/node-http-ntlm/ntlm.js: 313
LOW Use_Of_Hardcoded_Password /node_modules/webpack/lib/sharing/utils.js: 260
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 201
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 212
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 151
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 140
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 48
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 201
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 212
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 151
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 140
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 48
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 201
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 212
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 151
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 140
LOW Use_Of_Hardcoded_Password /node_modules/hosted-git-info/index.js: 48
LOW Use_Of_Hardcoded_Password /node_modules/@vscode/vsce/out/store.js: 90
LOW Use_Of_Hardcoded_Password /node_modules/vsce/out/store.js: 86
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1986
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1986
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1986
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-esm.js: 1971
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 16
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1871
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1871
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1871
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password /node_modules/underscore/underscore-umd.js: 1856
LOW Use_Of_Hardcoded_Password

More results are available on AST platform

Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 5, 2024

A newer version of typescript exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.

@OrShamirCM OrShamirCM merged commit c7b8d0c into main Apr 7, 2024
4 of 5 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/typescript-5.4.3 branch April 7, 2024 13:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants