[Snyk] Upgrade dayjs from 1.9.4 to 1.11.4 #11

snyk-bot · 2022-08-21T23:05:54Z

Snyk has created this PR to upgrade dayjs from 1.9.4 to 1.11.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 18 versions ahead of your current version.
The recommended version was released a month ago, on 2022-07-19.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579155	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579152	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Write SNYK-JS-TAR-1579147	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536531	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary File Overwrite SNYK-JS-TAR-1536528	425/1000 Why? CVSS 8.5	No Known Exploit
Information Exposure SNYK-JS-SIMPLEGET-2361683	425/1000 Why? CVSS 8.5	Proof of Concept
Information Exposure SNYK-JS-SIMPLEGET-2361683	425/1000 Why? CVSS 8.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	425/1000 Why? CVSS 8.5	Proof of Concept
Directory Traversal SNYK-JS-MOMENT-2440688	425/1000 Why? CVSS 8.5	No Known Exploit
Command Injection SNYK-JS-LODASH-1040724	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	425/1000 Why? CVSS 8.5	No Known Exploit
Denial of Service (DoS) SNYK-JS-JPEGJS-2859218	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-INI-1048974	425/1000 Why? CVSS 8.5	Proof of Concept
Remote Code Execution (RCE) SNYK-JS-EJS-2803307	425/1000 Why? CVSS 8.5	Proof of Concept
Prototype Pollution SNYK-JS-CACHEDPATHRELATIVE-2342653	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	425/1000 Why? CVSS 8.5	Proof of Concept
Arbitrary Code Injection SNYK-JS-UNDERSCORE-1080984	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	425/1000 Why? CVSS 8.5	Proof of Concept
Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	425/1000 Why? CVSS 8.5	No Known Exploit
Information Exposure SNYK-JS-NODEFETCH-2342118	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	425/1000 Why? CVSS 8.5	Proof of Concept
Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	425/1000 Why? CVSS 8.5	No Known Exploit
Arbitrary Code Injection SNYK-JS-EJS-1049328	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-COLORSTRING-1082939	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	425/1000 Why? CVSS 8.5	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit
Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	425/1000 Why? CVSS 8.5	No Known Exploit
Cross-site Scripting (XSS) SNYK-JS-STRIPTAGS-1312310	425/1000 Why? CVSS 8.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: dayjs

1.11.4 - 2022-07-19
1.11.4 (2022-07-19)

Bug Fixes
- correct past property in ku (kurdish) locale (#1916) (74e82b9)
- fix French [fr] local ordinal (#1932) (8f09834)
- fix objectSupport plugin ConfigTypeMap type (#1441) (#1990) (fd51fe4)
- fix type error to add ordianl property in InstanceLocaleDataReturn and GlobalLocaleDataReturn types (#1931) (526f0ae)
- update locale ar-* meridiem function (#1954) (3d31611)
- zh-tw / zh-hk locale ordinal error (#1976) (0a1bd08)
1.11.3 - 2022-06-06
1.11.3 (2022-06-06)

Bug Fixes
- customParseFormat plugin to parse comma as a separator character (#1913) (41b1405)
- update Dutch [nl] locale ordinal (#1908) (5da98f8)
1.11.2 - 2022-05-06
1.11.2 (2022-05-06)

Bug Fixes
- add OpUnitType (week) to quarterOfYear startOf/endOf types (#1865) (400bc3e)
- Fix type issue with ManipulateType (#1864) (d033dfc)
- fix UTC plugin .valueOf not taking DST into account (#1448) (27d1c50)
1.11.1 - 2022-04-15
1.11.1 (2022-04-15)

Bug Fixes
- add Bengali (Bangladesh) [bn-bd] locale (#1806) (840ed76)
- refactor replace deprecated String.prototype.substr() (#1836) (627fa39)
- Update German [de] locale, adds the abbreviations for month including a . in the end, as in September -> Sept. (#1831) (4e2802c)
- update Italian (Switzerland) [it-ch] locale relativeTime (#1829) (8e6d11d)
- update Kurdish [ku] locale strings and formatted output contains non-standard kurdish characters (#1848) (a597d0b)
- update locale bo [Tibetan]: corrected the orders in formats (#1823) (e790516)
1.11.0 - 2022-03-14
1.11.0 (2022-03-14)

Bug Fixes
- Add Kirundi (rn) locale (#1793) (74e5247)
- add missing date shorthand D type definition (#1752) (b045baf)
- Add relative time to Galician (gl) and fix ordinals (#1800) (dcbf170)
- update German locales (de-at, de-ch) (#1775) (f9055a7)
- update Icelandic [is] locale relativeTime config (#1796) (76f9e17)
- Update index.d.ts note (#1716) (5a108ff)
- Update locale German [de] monthsShort (#1746) (4a7b7d0)
- update meridiem function to Kurdish (ku) locale (#1725) (efd3904)
- update updateLocal plugin typescript types (#1692) (c7a3f73)
Features
- Fallback to language only locale + support uppercase locales (#1524) (9138dc2)
1.10.8 - 2022-02-28
1.10.8 (2022-02-28)

Bug Fixes
- set locale pt, pt-br correct weekdays and months (#1697) (e019301)
1.10.7 - 2021-09-10
1.10.7 (2021-09-10)

Bug Fixes
- Add Spanish (Mexico) [es-mx] locale (#1614) (3393f2a)
- Add Arabic (Iraq) [ar-iq] locale (#1627) (b5a1391)
- add format object type to type file (#1572) (5a79cc6)
- duration plugin when parsing duration from ISO string, set missing components to 0 instead of NaN (#1611) (252585b)
- narrow type for add and subtract (#1576) (1686962)
- update customParseFormat plugin strict x X parsing (#1571) (08adda5)
- update Lithuanian [lt] locale spelling for single month (#1609) (255dc54)
- Update Norwegian Bokmål [nb] local yearStart 4 (#1608) (7a8467c)
- update plugin advancedFormat isValid validation (#1566) (755fc8b)
- update Sinhalese [si] locale month name (#1475) (63de2a8)
- update utcOffset plugin type file (#1604) (f68e4b1)
1.10.6 - 2021-07-06
1.10.6 (2021-07-06)

Bug Fixes
- add invalid date string override (#1465) (#1470) (06f88f4)
- add sv-fi Finland Swedish locale (#1522) (8e32164)
- customParseFormat support parsing X x timestamp (#1567) (eb087f5)
- dayjs ConfigTypeMap add null & undefined (#1560) (b5e40e6)
- Fix DayOfYear plugin when using BadMutable plugin (#1511) (0b0c6a3)
- Implement ordinal in Bulgarian translation (fixes #1501) (#1502) (b728da5)
- more strict delimiter in REGEX_PARSE (#1555) (bfdab5c)
- parameter type (#1549) (f369844)
- update customParseFormat plugin to custom two-digit year parse function (#1421) (bb5df55)
- update names of weekdays and months in Bulgarian [bg] to lowercase (#1438) (b246210)
- update type file .diff (#1505) (6508494)
- update UTC plugin type file for strict parsing (#1443) (b4f28df)
1.10.5 - 2021-05-26
1.10.5 (2021-05-26)

Bug Fixes
- add meridiem in ar locales (#1375) (319f616)
- Added Zulu support to customParseFormat (#1359) (1138a3f)
- fix Bengali [bn] locale monthsShort error (a0e6c0c)
- fix missing types for ArraySupport plugin (#1401) (b1abdc4)
- fix Ukrainian [uk] locale (#1463) (0fdac93)
- hotfix for Duration types (#1357) (855b7b3), closes #1354
- timezone plugin DST error (#1352) (71bed15)
- Update duration plugin change string to number (#1394) (e1546d1)
- update Duration plugin to support no-argument (#1400) (8d9a5ae)
- Update Finnish [fi] locale to set yearStart (#1378) (f3370bd)
- update Russian [ru] locale meridiem and unit tests (#1403) (f10f39d)
- update Russian [ru] locale yearStart config (#1372) (5052515)
- update Slovenian [sl] locale to set correct ordinal (#1386) (cb4f746)
- update Spanish [es] locale to change month names to lowercase (#1414) (9c20e77)
- update Swedish [sv] locale to set correct yearStart (#1385) (66c5935)
- update UTC plugin to support string argument like +HH:mm (#1395) (656127c)
1.10.4 - 2021-01-22
Read more
1.10.3 - 2021-01-09
1.10.2 - 2021-01-05
1.10.1 - 2021-01-03
1.10.0 - 2021-01-03
1.9.8 - 2020-12-27
1.9.7 - 2020-12-05
1.9.6 - 2020-11-10
1.9.5 - 2020-11-05
1.9.4 - 2020-10-23

from dayjs GitHub release notes

Commit messages

Package name: dayjs

fdf648b chore(release): 1.11.4 [skip ci]
c004fe6 Merge pull request #1993 from iamkun/dev
7151139 ci: fix node 18 travis issue
d02ec4b Merge pull request #1992 from iamkun/dev
79a3c19 ci: fix node 18 travis issue
5585cc0 test: update test case
9276274 Merge branch 'master' into dev
0a1bd08 fix: zh-tw / zh-hk locale ordinal error (#1976)
fd51fe4 fix: fix objectSupport plugin ConfigTypeMap type (#1441) (#1990)
22cbeab chore: update avatar
3d31611 fix: update locale ar-* meridiem function (#1954)
36662dc Add & update Sinhala README (#1958)
74e82b9 fix: correct past property in ku (kurdish) locale (#1916)
47f5b69 chore(release): 1.11.3 [skip ci]
526f0ae fix: fix type error to add ordianl property in InstanceLocaleDataReturn and GlobalLocaleDataReturn types (#1931)
8f09834 fix: fix French [fr] local ordinal (#1932)
7b4a99c chore: add action lint & test (#1939)
c0e8e6c chore(release): 1.11.3 [skip ci]
29a5c40 Merge pull request #1928 from iamkun/dev
fff66d1 Merge branch 'master' into dev
40e4e2f chore: fix lint issue
5da98f8 fix: update Dutch [nl] locale ordinal (#1908)
41b1405 fix: customParseFormat plugin to parse comma as a separator character (#1913)
12ab114 chore(release): 1.11.2 [skip ci]

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @babel/core from 7.12.3 to 7.18.9. See this package in npm: https://www.npmjs.com/package/@babel/core - @babel/plugin-proposal-class-properties from 7.12.1 to 7.18.6. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-class-properties - @babel/plugin-proposal-object-rest-spread from 7.12.1 to 7.18.9. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-object-rest-spread - @babel/plugin-proposal-optional-catch-binding from 7.12.1 to 7.18.6. See this package in npm: https://www.npmjs.com/package/@babel/plugin-proposal-optional-catch-binding - @babel/plugin-transform-modules-commonjs from 7.12.1 to 7.18.6. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-modules-commonjs - @babel/plugin-transform-react-jsx from 7.12.1 to 7.18.6. See this package in npm: https://www.npmjs.com/package/@babel/plugin-transform-react-jsx - @babel/register from 7.12.1 to 7.18.9. See this package in npm: https://www.npmjs.com/package/@babel/register See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/59a45eb9-d8a8-45b4-b115-b672fc80f23a?utm_source=github&utm_medium=referral&page=upgrade-pr

…95bde4b770c

Snyk has created this PR to upgrade dayjs from 1.9.4 to 1.11.4. See this package in npm: https://www.npmjs.com/package/dayjs See this project in Snyk: https://app.snyk.io/org/marcelraschke/project/59a45eb9-d8a8-45b4-b115-b672fc80f23a?utm_source=github&utm_medium=referral&page=upgrade-pr

snyk-bot and others added 3 commits August 20, 2022 23:30

Merge pull request #6 from meonBot/snyk-upgrade-2ea37f63897998f126f08…

b95bc81

…95bde4b770c

pull bot force-pushed the master branch from b95bc81 to 6ba4113 Compare December 31, 2024 04:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade dayjs from 1.9.4 to 1.11.4 #11

[Snyk] Upgrade dayjs from 1.9.4 to 1.11.4 #11

snyk-bot commented Aug 21, 2022

1.11.4 (2022-07-19)

Bug Fixes

1.11.3 (2022-06-06)

Bug Fixes

1.11.2 (2022-05-06)

Bug Fixes

1.11.1 (2022-04-15)

Bug Fixes

1.11.0 (2022-03-14)

Bug Fixes

Features

1.10.8 (2022-02-28)

Bug Fixes

1.10.7 (2021-09-10)

Bug Fixes

1.10.6 (2021-07-06)

Bug Fixes

1.10.5 (2021-05-26)

Bug Fixes

[Snyk] Upgrade dayjs from 1.9.4 to 1.11.4 #11

Are you sure you want to change the base?

[Snyk] Upgrade dayjs from 1.9.4 to 1.11.4 #11

Conversation

snyk-bot commented Aug 21, 2022

Snyk has created this PR to upgrade dayjs from 1.9.4 to 1.11.4.

1.11.4 (2022-07-19)

Bug Fixes

1.11.3 (2022-06-06)

Bug Fixes

1.11.2 (2022-05-06)

Bug Fixes

1.11.1 (2022-04-15)

Bug Fixes

1.11.0 (2022-03-14)

Bug Fixes

Features

1.10.8 (2022-02-28)

Bug Fixes

1.10.7 (2021-09-10)

Bug Fixes

1.10.6 (2021-07-06)

Bug Fixes

1.10.5 (2021-05-26)

Bug Fixes