Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade: vue, vue-template-compiler #89

Open
wants to merge 1 commit into
base: 2.x
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name Versions Released on
vue
from 2.6.12 to 2.7.1
24 versions ahead of your current version 22 days ago
on 2022-07-04
vue-template-compiler
from 2.6.12 to 2.7.1
24 versions ahead of your current version 22 days ago
on 2022-07-04
Release notes
Package name: vue
  • 2.7.1 - 2022-07-04
  • 2.7.0 - 2022-07-01
  • 2.7.0-beta.8 - 2022-06-28
  • 2.7.0-beta.7 - 2022-06-27
  • 2.7.0-beta.6 - 2022-06-26
  • 2.7.0-beta.5 - 2022-06-22
  • 2.7.0-beta.4 - 2022-06-21
  • 2.7.0-beta.3 - 2022-06-20
  • 2.7.0-beta.2 - 2022-06-17
  • 2.7.0-beta.1 - 2022-06-17
  • 2.7.0-alpha.12 - 2022-06-16
  • 2.7.0-alpha.11 - 2022-06-16
  • 2.7.0-alpha.10 - 2022-06-16
  • 2.7.0-alpha.9 - 2022-06-16
  • 2.7.0-alpha.8 - 2022-06-14
  • 2.7.0-alpha.7 - 2022-06-14
  • 2.7.0-alpha.6 - 2022-06-09
  • 2.7.0-alpha.5 - 2022-06-06
  • 2.7.0-alpha.4 - 2022-06-01
  • 2.7.0-alpha.3 - 2022-06-01
  • 2.7.0-alpha.2 - 2022-06-01
  • 2.7.0-alpha.1 - 2022-05-31
  • 2.6.14 - 2021-06-07
  • 2.6.13 - 2021-06-01
  • 2.6.12 - 2020-08-20
from vue GitHub release notes
Package name: vue-template-compiler from vue-template-compiler GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade:
  - vue from 2.6.12 to 2.7.1.
    See this package in npm: https://www.npmjs.com/package/vue
  - vue-template-compiler from 2.6.12 to 2.7.1.
    See this package in npm: https://www.npmjs.com/package/vue-template-compiler

See this project in Snyk:
https://app.snyk.io/org/kadirselcuk/project/822dcedf-bf24-4b72-b14f-c50c5f92c68c?utm_source=github&utm_medium=referral&page=upgrade-pr
@pull-dog
Copy link

pull-dog bot commented Jul 26, 2022

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

  • docker-compose.yml
What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands
  • @pull-dog up to reprovision or provision the server.
  • @pull-dog down to delete the provisioned server.
Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
8138e490-0c80-11ed-9d6d-11bbe5af30c7

@guardrails
Copy link

guardrails bot commented Jul 26, 2022

⚠️ We detected 1 security issue in this pull request:

Mode: paranoid | Total findings: 1 | Considered vulnerability: 1

Vulnerable Libraries (1)
Severity Details
Medium postcss@6.0.23 (t) - no patch available

More info on how to fix Vulnerable Libraries in General.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant