Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade speech-rule-engine from 3.0.0-beta.10 to 3.3.3 #10

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade speech-rule-engine from 3.0.0-beta.10 to 3.3.3.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 22 versions ahead of your current version.
  • The recommended version was released a month ago, on 2021-06-11.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-Y18N-1021887
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1246392
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-SSRI-1085630
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-608086
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-LODASH-590103
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Command Injection
SNYK-JS-LODASH-1040724
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-INI-1048974
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-571484
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Prototype Pollution
SNYK-JS-AJV-584908
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-PATHPARSE-1077067
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Prototype Pollution
SNYK-JS-LODASH-567746
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-LODASH-1018905
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept
Cryptographic Issues
SNYK-JS-ELLIPTIC-1064899
472/1000
Why? Proof of Concept exploit, CVSS 7.3
No Known Exploit
Regular Expression Denial of Service (ReDoS)
SNYK-JS-BROWSERSLIST-1090194
472/1000
Why? Proof of Concept exploit, CVSS 7.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: speech-rule-engine
  • 3.3.3 - 2021-06-11

    Note that v3.3.2 is faulty and deprecated

    Patch release with fixes and updates. It contains minimal code changes that need to be ported manually to v4.

    Hindi locale

    Improvements on

    • number of symbols and character translations
    • clearspeak rules for matrices and tables
    • prefix and summary rules

    MathJax compatibility for upcoming 3.2

    • Smart preferences

    Bug fixes

    • Firefox explorer bug due to changes in Firefox's handling of XML documents.
  • 3.3.2 - 2021-06-10
  • 3.3.1 - 2021-05-19

    Hindi Localisation

    First non-Latin alphabet localisation made possible thanks a Sparc UKIERI project.

    Other things

    • Some improvements to span handling in Clearspeak rules for SSML_STEP renderer.
    • Nemeth bug fix

    Deprecation warning

    • With the v3.3.0 release we have deprecated direct support for Internet Explorer mappings in the SRE release. There is still a dedicated npm repository for the IE mappings file. Note that this repo will be discontinued in the future

    v3.3.0

    • Note that v3.3.0 encountered a problem during publication and is therefore deprecated!
  • 3.3.0 - 2021-05-19
  • 3.3.0-beta.0 - 2021-04-27

    First beta for the Hindi Localisation (thanks a Sparc UKIERI project).

    Deprecation warning

    • With the v3.3.0 release we will deprecate direct support for Internet Explorer mappings in the SRE release. There will still be a dedicated npm repository for the IE mappings file.
  • 3.2.0 - 2021-04-19

    Italian Localisation

    Includes full Italian localisation of both MathSpeak and ClearSpeak rule sets, thanks to financial support by TextHelp.

    Partial overhaul of the speech rule system.

    A full overhaul of the speech rules will happen after SRE has moved to TypeScript.

    General Improvements

    • Reduces as much as possible disjunctive preconditions. Handling this via the indexing structure speeds up processing.
    • New and improved heuristics for: scripts and accents, juxtaposition handling, named and simple function handling
    • Gets rid of some oddities in the MathSpeak rule sets for English:
      • overtilde, undertilde, overbar, underbar
      • integral is now handled similar to sum and other big operators.
    • Additions to ClearSpeak for handling of crossed out and enclosed expressions

    Dynamic loading of speech rules

    • Speech rule sets are now loaded dynamically together with the locale translations of unicode characters
    • Ensure to wait for rules being loaded using engineReady
    • Adds options to load local rule sets and prune the rule trie:
      * file, prune parameters can be passed to CLI and browser library.

    Nemeth Improvements

    • Improvements to the Nemeth translation
      • English characters with fonts
      • Literal translation of functions and units
    • Many fixes from our PreTeXt project thanks to Michael Cantino
    • Flexible loading of specially transcribed symbols

    Semantic Improvements

    • Clean separation of selectable semantic heuristics
    • New heuristics released into the wild: complex juxtaposition, multioperator combination, prefix function detection
    • Explicit treatment of large spacing
    • Recognition of mglyph elements
    • Surfacing of links and glyphs as images

    Removes caching

    Caching of computed speech has been fully removed. From v1.0.0 to v3.1.1 SRE used caching of speech recursively computed that could be reused when speech is generated recursively. This feature is rarely used in practice,

    Moreover it was error prone and in the way of future plans to employ more parallelisation.

    Note: During recursively enriching large expressions with speech strings (option speech: deep) there can be some

    Experiments with large data sets have shown that while there is some slow down of processing it is linear by a factor of at most 2. However, should you see a more significant slow down, please file an issue.

  • 3.2.0-beta.4 - 2021-04-09
    • Regression bug fixes
    • Some Nemeth updates
  • 3.2.0-beta.3 - 2021-03-28
    • Overhaul of Nemeth Rules
    • Treatment of interesting spaces
    • Bug fixes
  • 3.2.0-beta.2 - 2021-02-26
    • First release where the cache is removed.
    • Fixes a number of issues.
  • 3.2.0-beta.1 - 2021-02-18
  • 3.2.0-beta.0 - 2021-02-08
  • 3.1.1 - 2020-09-12
  • 3.1.0 - 2020-08-15
  • 3.1.0-beta.5 - 2020-08-06
  • 3.1.0-beta.4 - 2020-08-03
  • 3.1.0-beta.2 - 2020-07-10
  • 3.1.0-beta.1 - 2020-05-14
  • 3.1.0-beta.0 - 2020-03-30
  • 3.0.1 - 2020-05-25
  • 3.0.0 - 2020-05-08
  • 3.0.0-beta.12 - 2020-05-05
  • 3.0.0-beta.11 - 2020-04-17
  • 3.0.0-beta.10 - 2020-03-26
from speech-rule-engine GitHub release notes
Commit messages
Package name: speech-rule-engine

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant