New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update dependency ejs to v3 (main) #9

Open

mend-for-github-com wants to merge 1 commit into main from whitesource-remediate/main-ejs-3.x

mend-for-github-com bot commented Apr 29, 2024 •

edited

Loading

This PR contains the following updates:

Package	Type	Update	Change
ejs	dependencies	major	`^2.6.1` -> `^3.0.0`

By merging this PR, the issue #1 will be automatically resolved and closed:

Severity	CVSS Score	CVE	Reachability
Critical	9.8	CVE-2022-29078
Critical	9.8	WS-2021-0153
High	8.8	CVE-2024-33883

Release Notes

mde/ejs (ejs)

`v3.1.10`

Version 3.1.10

`v3.1.9`

Version 3.1.9

`v3.1.8`

Version 3.1.8

`v3.1.7`

Version 3.1.7

`v3.1.6`

Version 3.1.6

`v3.1.5`

Version 3.1.5

`v3.1.3`

`v3.1.2`

`v3.0.2`

`v3.0.1`

`v2.7.4`

Bug fixes

Fixed Node 4 support, which broke in v2.7.3 (mde/ejs@5e42d6c, @mde)

`v2.7.3`

Bug fixes

Made the post-install message more discreet by following the example of opencollective-postinstall (mde/ejs@228d8e4, @mde)

`v2.7.2`

Features

Added support for destructuring locals (#452, @ExE-Boss)
Added support for disabling legacy include directives (#458, #459, @ExE-Boss)
Compiled functions are now shown in the debugger (#456, @S2-)
function.name is now set to the file base name in environments that support this (#466, @ExE-Boss)

Bug Fixes

The error message when async != true now correctly mention the existence of the async option (#460, @ExE-Boss)
Improved performance of HTML output generation (#470, @nwoltman)

`v2.7.1`

Deprecated:

Added deprecation notice for use of require.extensions (@mde)

`v2.6.2`

Correctly pass custom escape function to includes (@alecgibson)
- Fixes for rmWhitespace (@nwoltman)
- Examples for client-side EJS compiled with Express middleware (@mjgs)
- Make Template constructor public (@ThisNameWasTaken)
- Added remove function to cache (@S2-)
- Recognize both 'Nix and Windows absolute paths (@mde)

If you want to rebase/retry this PR, check this box


          Update dependency ejs to v3

mend-for-github-com bot added the security fix label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels