Skip to content

[Snyk] Upgrade @google-cloud/functions-framework from 1.3.2 to 1.10.0 #99

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

benjaminhuo
Copy link
Member

snyk-top-banner

Snyk has created this PR to upgrade @google-cloud/functions-framework from 1.3.2 to 1.10.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 9 versions ahead of your current version.

  • The recommended version was released 4 years ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764
506 Proof of Concept
low severity Prototype Pollution
SNYK-JS-MINIMIST-2429795
506 Proof of Concept
Release notes
Package name: @google-cloud/functions-framework
  • 1.10.0 - 2021-09-20

    Features

  • 1.9.0 - 2021-06-25

    Features

    Bug Fixes

  • 1.8.0 - 2021-06-08

    06-04-2021 16:11 PDT

    Features

    • Update event and cloudevent interfaces (#276)
    • Support local development with Pub/Sub emulator (#272)
    • Disable x-powered-by header (#223)

    Bug Fixes

    • Allow killing process with CTRL+C (#264)
    • Do not pass numeric arguments to res.send (#242)
    • Fix cloudevent signature callbacks (#234)
    • Log function signature type (#228)
    • Export the public interfaces (#218)

    Dependencies

    • update lodash to 4.17.21 (#284)
    • update hosted-git-info to 2.8.9 (#282)
    • update googlecloudplatform/functions-framework-conformance action to v0.3.9 (#271)
    • update typescript to v4.2.3 (#269)
    • update mocha to v8.3.2 (#268)
    • update @ types/supertest to v2.0.11 (#267)
    • update @ types/node to v11.15.50 (#266)
    • update supertest to v6 (#251)
    • update gts to v3 (#250)
    • update actions/setup-node action to v2 (#249)
    • update @ types/minimist to v1.2.1 (#245)
    • update @ types/express to v4.17.11 (#244)
    • update ini to 1.3.7 (#240)
    • update @ types/mocha to v8.0.3 (#201)
    • update minimist to 1.2.5 (#259)

    Documentation

    • Add buildpacks/docker quickstart (#212)
    • Mention express as the request/response parameters (#200)

    Internal / Testing Changues

    • Updates to functions-framework-conformance action (#224, #236, #279, #280)
    • Split up invoker tests into separate integration test files (#281)
    • Enable eslint for tests (#275)
    • Add useful npm scripts (#274)
    • CI configuration updates (#219, #217)
    • Refactor: split invoker and router (#213)
    • Update renovate.json schedule (#210)
  • 1.7.1 - 2020-08-10

    08-10-2020 11:13 PDT

    Implementation Changes

    • fix: Don't call function after 404 on /{robots.txt,favicon.ico} (#193)

    New Features

    Dependencies

    • chore(deps): update dependency mocha to v8.1.1 (#194)
    • chore: remove tslint.json (#190)

    Documentation

    Internal / Testing Changes

  • 1.7.0 - 2020-08-06

    08-06-2020 12:01 PDT

    Implementation Changes

    • fix: do not send error when error code is fine (#187)

    New Features

    • fix: add functions-framework-nodejs executable (#152)

    Dependencies

    • chore(deps): use gts v2 (#186)
    • chore(deps): update dependency @ types/express to v4.17.7 (#166)
    • chore(deps): update dependency @ types/node to v11.15.20 (#172)
    • chore(deps): update dependency @ types/supertest to v2.0.10 (#173)
    • chore(deps): update dependency mocha to v8 (#178)
    • chore(deps): update dependency supertest to v4 (#179)
    • chore(deps): automerge all but major updates (#183)
    • chore(deps): update dependency typescript to v3.9.7 (#176)
    • chore: make renovate not update as often (#170)
    • chore(deps): bump lodash from 4.17.14 to 4.17.19 (#156)
    • chore(deps): pin dependencies (#163)
    • chore(deps): add renovate.json (#65)

    Documentation

    • docs: change badge to GitHub Actions (#180)
    • Fix typo: https -> http (#153)

    Internal / Testing Changes

  • 1.6.0 - 2020-06-17

    06-17-2020 14:53 PDT

    Implementation Changes

    • refactor: extract cloudevents functions, privateize file-global identifiers (#138)
    • refactor: Move the logic to load user's function to loader.ts (#136)
    • refactor: split files (#135)

    New Features

    • feat: prototype cloudevent function signature type (#147)

    Dependencies

    Documentation

    • docs: remove incorrect pubsub docs (#145)
    • Fix PubSub Event Example (#141)

    Internal / Testing Changes

    • Use CloudEvents v1.0 in CloudEventsContext and tests (#139)
  • 1.5.1 - 2020-04-06

    03-30-2020 11:05 PDT

    Implementation Changes

    • fix: handle SIGINT in ErrorHandler (#126)

    New Features

    Dependencies

    • chore(deps): bump acorn from 5.7.3 to 5.7.4 (#124)
    • chore(deps): bump minimist from 1.2.0 to 1.2.2 (#123)
    • chore(deps): bump minimist from 1.2.2 to 1.2.3 (#128)

    Documentation

    Internal / Testing Changes

  • 1.5.0 - 2020-03-09

    03-06-2020 08:15 PST

    Implementation Changes

    • Adjust path handling (#121)

    New Features

    Dependencies

    Documentation

    Internal / Testing Changes

  • 1.4.0 - 2020-01-31
    No content.
  • 1.3.2 - 2019-09-14

    09-13-2019 18:06 PDT

    • Revert "fixes #33: Only listen to functionTarget. (#81)"

    Implementation Changes

    New Features

    Dependencies

    Documentation

    Internal / Testing Changes

from @google-cloud/functions-framework GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @google-cloud/functions-framework from 1.3.2 to 1.10.0.

See this package in npm:
@google-cloud/functions-framework

See this project in Snyk:
https://app.snyk.io/org/benjaminhuo/project/9f849e05-b933-48b9-ad73-1d3cc256dafd?utm_source=github&utm_medium=referral&page=upgrade-pr
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants