[Snyk] Upgrade speech-rule-engine from 3.0.0-beta.10 to 3.3.3 #10
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade speech-rule-engine from 3.0.0-beta.10 to 3.3.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
The recommended version fixes:
SNYK-JS-Y18N-1021887
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SSRI-1246392
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SSRI-1085630
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-608086
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-590103
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-1040724
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-INI-1048974
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ELLIPTIC-571484
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-567746
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-1018905
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ELLIPTIC-1064899
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-BROWSERSLIST-1090194
Why? Proof of Concept exploit, CVSS 7.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: speech-rule-engine
Note that
v3.3.2
is faulty and deprecatedPatch release with fixes and updates. It contains minimal code changes that need to be ported manually to v4.
Hindi locale
Improvements on
MathJax compatibility for upcoming 3.2
Bug fixes
Hindi Localisation
First non-Latin alphabet localisation made possible thanks a Sparc UKIERI project.
Other things
SSML_STEP
renderer.Deprecation warning
npm
repository for the IE mappings file. Note that this repo will be discontinued in the futurev3.3.0
First beta for the Hindi Localisation (thanks a Sparc UKIERI project).
Deprecation warning
npm
repository for the IE mappings file.Italian Localisation
Includes full Italian localisation of both MathSpeak and ClearSpeak rule sets, thanks to financial support by TextHelp.
Partial overhaul of the speech rule system.
A full overhaul of the speech rules will happen after SRE has moved to TypeScript.
General Improvements
Dynamic loading of speech rules
engineReady
*
file
,prune
parameters can be passed to CLI and browser library.Nemeth Improvements
Semantic Improvements
mglyph
elementsRemoves caching
Caching of computed speech has been fully removed. From v1.0.0 to v3.1.1 SRE used caching of speech recursively computed that could be reused when speech is generated recursively. This feature is rarely used in practice,
Moreover it was error prone and in the way of future plans to employ more parallelisation.
Note: During recursively enriching large expressions with speech strings (option
speech: deep
) there can be someExperiments with large data sets have shown that while there is some slow down of processing it is linear by a factor of at most 2. However, should you see a more significant slow down, please file an issue.
Commit messages
Package name: speech-rule-engine
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs