Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade inquirer from 8.0.0 to 8.2.0 #2

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade inquirer from 8.0.0 to 8.2.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 8 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2021-10-05.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Regular Expression Denial of Service (ReDoS)
SNYK-JS-ANSIREGEX-1583908
482/1000
Why? Proof of Concept exploit, CVSS 7.5
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: inquirer
  • 8.2.0 - 2021-10-05
    • checkbox prompt: Update the help message to be more complete. And the help message is now shown until a selection is made.
  • 8.1.5 - 2021-09-15

    Fix older Node version compatibility issue.

  • 8.1.4 - 2021-09-15
    • Fix an error being thrown inside the rawlist prompt
  • 8.1.3 - 2021-09-13

    Bug Fixes

    • Fix password prompt appearing when doing async filtering/validation
    • User being prompted a question even though it was answered when using nested answer object format.
    • Fix extra space appearing when using custom prefix.

    And bump of all dependencies.

  • 8.1.2 - 2021-07-14
    • Fix bug on rawList prompt
    • Bump dependencies
  • 8.1.1 - 2021-06-15

    Fix: Number prompt default behavior.

  • 8.1.0 - 2021-05-21

    New features

    • Now display a loading spinner while asynchronously filtering or validating data.
    • inquirer.prompt() now accept a shorthand object syntax instead of an array with named prompts:
    const { foo, bar } = await inquirer.prompt({
      foo: {
        message: '...',
        default: '...',
      },
      bar: {
        default: '...',
      }
    }):
  • 8.0.1 - 2021-05-21

    Fixes

    • Fix issue with duplicate keys in expand prompt not being caught if casing didn't match
    • Fix rawlist prompt ignoring short option
    • Rollback dependencies migrated to ESM causing issue for some users

    And lastly general dependency upgrade (to non-ESM versions)

  • 8.0.0 - 2021-02-25
    • Drop support for Node 10 (through dependencies)
    • Add postfix option to the editor prompt to allow easily turning on proper syntax highlighting
from inquirer GitHub release notes
Commit messages
Package name: inquirer
  • df10c53 Publish
  • fef4365 feat: checkbox hints now stay on screen until enter is pressed (#1055)
  • ef99bd4 Publish
  • 8648ee8 compatibility fix #1042 (#1048)
  • 47dfcaf Publish
  • 5d47d7e fix of #1042 rawlist throw (#1045)
  • 8e0b3d4 Publish
  • fb17654 Update Travis
  • 77deb7e Bump dependencies
  • aea90fd fixes issue #1024 do not prompt on prefilled nested answers (#1028)
  • 822e98d Add prefix extra space only when not empty (#1033)
  • e0197af do not display password on async filter/validation, fixes #1022 (#1027)
  • 12b6934 Update SECURITY.md
  • c434842 Create SECURITY.md
  • 906e1e5 [Snyk] Security upgrade ora from 5.3.0 to 6.0.0 (#1040)
  • 517252c Create FUNDING.yml
  • bc3d0c9 Notes on defaults improvements (#1036)
  • 9bee59b Publish
  • 7c028f7 Bump dependencies
  • 58de622 fixes #1025 rawlist stops handling arrow keys after bad input (#1026)
  • 44ba021 Update package.json to include the repository key (#1023)
  • 68cf89f Publish
  • 73b6e65 fix: retain number prompt default (#1020)
  • c4a3c23 Publish

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant