Skip to content

[Snyk] Upgrade promise-polyfill from 8.1.3 to 8.3.0 - #85

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-upgrade-dafcbfc9289c61756ed81d6c188718ae
Open

[Snyk] Upgrade promise-polyfill from 8.1.3 to 8.3.0#85
snyk-bot wants to merge 1 commit into
masterfrom
snyk-upgrade-dafcbfc9289c61756ed81d6c188718ae

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to upgrade promise-polyfill from 8.1.3 to 8.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released 25 days ago, on 2023-01-20.
Release notes
Package name: promise-polyfill
  • 8.3.0 - 2023-01-20
  • 8.2.3 - 2022-03-12
  • 8.2.2 - 2022-03-12

    This is the same code as 8.2.0. A bugfix was introduced in 8.2.1 to fix testing issues, but it caused IE11 to fail

  • 8.2.1 - 2021-10-22
  • 8.2.0 - 2020-10-23

    Added Promise.allSettled

  • 8.1.3 - 2019-06-16
    No content.
from promise-polyfill GitHub release notes
Commit messages
Package name: promise-polyfill
  • c9e76c1 8.3.0: Promoise.any
  • 0ddd1c7 Added Promise.any polyfill + tests (#152)
  • e42be4e Bump shell-quote from 1.6.1 to 1.7.4 (#150)
  • 3ce68f2 Bump minimatch and mocha (#149)
  • 3290074 Bump engine.io and socket.io (#144)
  • d531bb4 Bump decode-uri-component from 0.2.0 to 0.2.2 (#146)
  • 7201ea4 Skip tests if finally on Promise
  • e50f72a Bump hosted-git-info from 2.5.0 to 2.8.9 (#139)
  • 6b5686a Bump path-parse from 1.0.6 to 1.0.7 (#138)
  • 6f16f85 Bump cached-path-relative from 1.0.2 to 1.1.0 (#133)
  • 98d7d12 Bump lodash from 4.17.11 to 4.17.21 (#134)
  • 1579bc3 Bump tar from 4.4.8 to 4.4.19 (#135)
  • 5e4585e Bump follow-redirects from 1.7.0 to 1.14.9 (#137)
  • 1cf1b02 Change PR to only run on master
  • 790cf73 Fixed name in action
  • fc9ba62 Add ci-test that doesn't run karma
  • 8965079 Add npm lockfile
  • 0b949df Run npm install on CI builds
  • 0ededfd Fixed bug with finally
  • 03c9a58 Revert "Fix setImmediate bug in fake-timers (#125)"
  • c8b8346 Revert "Revert "Bugfix: `allSettled` is not registered when `finally` is missing (#127)""
  • 4eb2c87 Add github workflow
  • cfc474e Update to version 8.2.2
  • 11df00f Revert "Add new dist"

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Feb 14, 2023

Copy link
Copy Markdown

Deploying with  Cloudflare Pages  Cloudflare Pages

Latest commit: 19d8ed2
Status: ✅  Deploy successful!
Preview URL: https://bd434c51.shell-lab.pages.dev
Branch Preview URL: https://snyk-upgrade-dafcbfc9289c617.shell-lab.pages.dev

View logs

@bridgecrew bridgecrew Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bridgecrew has found errors in this PR ⬇️

Comment thread package.json
"pigeon-marker": "^0.3.4",
"prismjs": "^1.20.0",
"promise-polyfill": "8.1.3",
"promise-polyfill": "8.3.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

postcss-preset-env 6.6.0 / package.json

MEDIUM  Noncompliant License (CC0-1.0)

This package contains a license that is not OSI-approved.

Comment thread package.json
"pigeon-marker": "^0.3.4",
"prismjs": "^1.20.0",
"promise-polyfill": "8.1.3",
"promise-polyfill": "8.3.0",

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

postcss-normalize 7.0.1 / package.json

MEDIUM  Noncompliant License (CC0-1.0)

This package contains a license that is not OSI-approved.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

1 participant