fix(deps): update dependency knex to v2 [security]#351
Open
renovate[bot] wants to merge 1 commit intomasterfrom
Open
fix(deps): update dependency knex to v2 [security]#351renovate[bot] wants to merge 1 commit intomasterfrom
renovate[bot] wants to merge 1 commit intomasterfrom
Conversation
Author
Branch automerge failureThis PR was configured for branch automerge, however this is not possible so it has been raised as a PR instead.
|
22273f1 to
44b677f
Compare
44b677f to
0293f32
Compare
0293f32 to
ed0252e
Compare
ed0252e to
33be19d
Compare
33be19d to
e0b62ce
Compare
e0b62ce to
7bb815a
Compare
7bb815a to
c80c02e
Compare
c80c02e to
a9227ab
Compare
a9227ab to
1c465f4
Compare
1c465f4 to
be2e7da
Compare
be2e7da to
abad956
Compare
abad956 to
23d7dcc
Compare
23d7dcc to
f50edd0
Compare
f50edd0 to
5f95bfe
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^0.19.0→^2.0.0GitHub Vulnerability Alerts
CVE-2019-10757
knex.js versions before 0.19.5 are vulnerable to SQL Injection attack. Identifiers are escaped incorrectly as part of the MSSQL dialect, allowing attackers to craft a malicious query to the host DB.
CVE-2016-20018
Knex Knex.js through 2.3.0 has a limited SQL injection vulnerability that can be exploited to ignore the WHERE clause of a SQL query. This vulnerability has been fixed in version 2.4.0.
Release Notes
knex/knex (knex)
v2.4.0Compare Source
New features:
Bug fixes
Typings:
v2.3.0Compare Source
New features:
Typings:
v2.2.0Compare Source
New features:
Bug fixes:
Typings:
v2.1.0Compare Source
New features:
Bug fixes:
Typings:
v2.0.0Compare Source
Breaking changes
Test / internal changes:
v1.0.7Compare Source
Bug fixes:
v1.0.6Compare Source
Bug fixes:
v1.0.5Compare Source
New features:
Bug fixes:
Typings:
Knexmatch the generic parameter types ofknex#5021v1.0.4Compare Source
New features:
Bug fixes:
Typings:
Documentation:
v1.0.3Compare Source
Bug fixes:
Typings:
Improvements:
Documentation:
v1.0.2Compare Source
New features:
Bug fixes:
Typings:
v1.0.1Compare Source
Bug fixes:
v1.0.0Compare Source
Breaking changes
sqlite3driver with@vscode/sqlite3;RETURNINGoperation to be consistent withSELECT;New features:
Bug fixes:
Typings:
v0.95.15Compare Source
Bug fixes:
v0.95.14Compare Source
Bug fixes:
v0.95.13Compare Source
Bug fixes:
Typings:
v0.95.12Compare Source
New features:
Bug fixes:
Typings:
v0.95.11Compare Source
New features:
Bug fixes:
Improvements:
v0.95.10Compare Source
Improvements:
Typings:
v0.95.9Compare Source
New features:
Typings:
v0.95.8Compare Source
New features:
Bug fixes:
Typings:
v0.95.7Compare Source
New features:
Typings:
v0.95.6Compare Source
Typings:
v0.95.5Compare Source
New features:
Bug fixes:
Typings:
v0.95.4Compare Source
Typings:
v0.95.3Compare Source
New features:
Bug fixes:
Typings:
v0.95.2Compare Source
New features:
Bug fixes:
Typings:
Test / internal changes:
v0.95.1Compare Source
Bug fixes:
v0.95.0Compare Source
Note: there are many breaking changes in this version, particularly in TypeScript support. Please see
UPGRADING.mdfor details.New features:
Bug fixes:
typewas set to'module'inpackage.json#4295Typings:
Test / internal changes:
v0.21.21Compare Source
v0.21.20Compare Source
v0.21.19Compare Source
v0.21.18Compare Source
v0.21.17Compare Source
Bug fixes:
New features:
v0.21.16Compare Source
Bug fixes:
v0.21.15Compare Source
New features:
Typings:
Test / internal changes:
v0.21.14Compare Source
New features:
Bug fixes:
Test / internal changes:
v0.21.13Compare Source
New features:
dropForeign#4092Bug fixes:
Typings:
Test / internal changes:
v0.21.12Compare Source
Typings:
v0.21.11Compare Source
Typings:
v0.21.10Compare Source
New features:
Bug fixes:
Typings:
v0.21.9Compare Source
New features:
Bug fixes:
v0.21.8Compare Source
Bug fixes:
v0.21.7Compare Source
New features:
Bug fixes:
Typings:
Test / internal changes:
v0.21.6Compare Source
New features:
Bug fixes:
Typings:
v0.21.5Compare Source
New features:
Test / internal changes:
v0.21.4Compare Source
New features:
Bug fixes:
v0.21.3Compare Source
New features:
Bug fixes:
Typings:
nullas valid binding type #3946Test / internal changes:
v0.21.2Compare Source
New features:
voidas return type on migration generator ts stub #3865Typings:
Test / internal changes:
v0.21.1Compare Source
v0.21.0Compare Source
Improvements
Breaking changes
pg-query-stream:Changed stream.close to stream.destroy which is the official way to terminate a readable stream. This is a breaking change if you rely on the stream.close method on pg-query-stream...though should be just a find/replace type operation to upgrade as the semantics remain very similar (not exactly the same, since internals are rewritten, but more in line with how streams are "supposed" to behave).Test / internal changes:
v0.20.15Compare Source
Bug fixes:
.finally(..)on knex's Promise-alikes #3800Typings:
.distinctOn#3784v0.20.14Compare Source
New features:
Typings:
interface Knexandfunction Knexshould have the same types #3787Test / internal changes:
v0.20.13Compare Source
Bug fixes:
Typings:
v0.20.12Compare Source
Bug fixes:
Typings:
Test / internal changes:
v0.20.11Compare Source
Breaking changes:
map,spreadandreduceon QueryBuilder instance.New features:
Bug fixes:
Typings:
Test / internal changes:
v0.20.10Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.