[Snyk] Upgrade sirv-cli from 1.0.12 to 1.0.14 #2
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade sirv-cli from 1.0.12 to 1.0.14. See this package in npm: https://www.npmjs.com/package/sirv-cli See this project in Snyk: https://app.snyk.io/org/brand-new/project/28572b98-0e80-4548-99c9-3e7413eaea20?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade sirv-cli from 1.0.12 to 1.0.14.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: sirv-cli
-
1.0.14 - 2021-08-14
- (
-
1.0.13 - 2021-08-13
-
-
1.0.12 - 2021-05-24
- (sirv-cli): Ensure
- (sirv): Bump
- Adjust GitHub Action env setup (#109): f2ae0f5
- Update Github Action image(s) and Node versions: 9334dfc, cf2de81, c7e0a20
- Add test for filename with space (#102): ede9189
from sirv-cli GitHub release notesChores
sirv): Bump@ polka/urlto take advantage of this fixPatches
(
sirv) Only usereq.pathif hasreq._decodedflag exists (#82):The
req._decodedcheck was added & should have always been in there, since this wassirv's way of preventing duplicatedecodeURIComponentcalls. However, this was only true when it received a request from apolka@nextapp, since Polka was previously writing the decoded value toreq.path– this changed with[email protected]Now that the latest
polka@next(and Express) doesn't decode automatically anymore,req.pathisn't trustworthy on its own. It needsreq._decodedto be there too in order to trust it.This combo-check is backwards compatible for
polka@nextusers who don't upgrade and will unblock Express users for the first time, who have always had a "raw"req.pathvalue set.Patches
booleanoptions are parsed as booleans (#97): 8ebca7c@ polka/urldependency version: 7c5162aChores
Thank you @ samccone!
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs