Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade rimraf from 3.0.2 to 4.3.1 #103

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

twilio-product-security

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • sendgrid-sync-contacts/functions/package.json
    • sendgrid-sync-contacts/functions/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Missing Release of Resource after Effective Lifetime
SNYK-JS-INFLIGHT-6095116
Yes Proof of Concept
Commit messages
Package name: rimraf The new version differs by 90 commits.
  • a1268c9 4.3.1
  • cacc067 changelog 4.3.1
  • cd6fbc6 Only call directory removal method on actual dirs
  • 4937e64 format markdown
  • ba35d77 always return Dirents from readdir
  • f923bb0 4.3.0
  • ed7b2a6 test: chmod ordering is nondeterministic
  • 4cb1d47 changelog about bin interactivity
  • 95e13f2 try to make the interactive test less flaky
  • 38e731f bin: add interactive mode
  • ca28abb let the filter option be async for async methods
  • 3b57687 add --verbose, --no-verbose to bin
  • ed3288e add filter option
  • e828fe2 Update v4 glob support in README
  • 80aef8b 4.2.0
  • 0d19a99 changelog 420
  • f768f26 treat paths as glob patterns when glob option set
  • 5760716 make rimraf cancelable with AbortSignals
  • 417cdc7 4.1.4
  • bdfa60c update deps, export types properly for cjs module
  • 20e3799 use NodeJS.ErrnoException instead of FsError
  • 450e3d2 4.1.3
  • 8d77621 add declarationMap to tsconfig
  • 49a2958 formatting tests

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

…ntacts/functions/package-lock.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants