Skip to content

Update dependency node-notifier to v8 [SECURITY] #58

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
renovate wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Update dependency node-notifier to v8 [SECURITY] #58

renovate wants to merge 1 commit into from

Conversation

@renovate
Copy link

@renovate renovate bot commented Jan 5, 2021 •
edited
Loading

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
node-notifier ^5.3.0 -> ^8.0.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2020-7789

This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.

Release Notes

mikaelbr/node-notifier

v8.0.1

Compare Source

v8.0.0

Compare Source

Breaking changes:

  • Expire time for notify-send is made to match macOS and Windows with default time of 10 seconds. The API is changed to take seconds as input and converting it to milliseconds before passing it on to notify-send. See #​341.

v7.0.2

Compare Source

  • Updates dependencies
  • Fixes issue with haning Windows notifications when disabled (#​335)

v7.0.1

Compare Source

  • Fixes import of uuid, removes deprecation warnings

v7.0.0

Compare Source

Features
  • NotifySend support for app-name (#​299, see docs)
Breaking Changes
  • All notify messages now have auto bound context to make it easier to pass as variables/arguments (#​306)
  • Updated snoreToast to version 0.7.0 with new input features (#​293)
  • Breaking snoreToast: Sanitizing data now changes "timedout" to "timeout"

v6.0.0

Compare Source

Breaking Changes
  • Dropped support for node v6. As of v6 we currently support node versions 8, 10, and 12 (latest).
  • Updated to the latest version of SnoreToast. This removes support for the wait option in that environment as it is now always on. Prepares the way for other new features added to the WindowsToaster.
Other
  • Update to latest version of dependencies.

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from d8fc157 to 6c903c4 Compare May 15, 2021 22:45
@renovate renovate bot changed the title Update dependency node-notifier to v9 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 15, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 6c903c4 to c187e2a Compare May 21, 2021 09:59
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v9 [SECURITY] May 21, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from c187e2a to 62937dd Compare May 21, 2021 14:10
@renovate renovate bot changed the title Update dependency node-notifier to v9 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 21, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 62937dd to abc35fe Compare May 22, 2021 13:19
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v9 [SECURITY] May 22, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from abc35fe to a4878d5 Compare May 22, 2021 15:02
@renovate renovate bot changed the title Update dependency node-notifier to v9 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 22, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from a4878d5 to 6904d79 Compare May 26, 2021 08:45
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v10 [SECURITY] May 26, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 6904d79 to eaca0da Compare May 26, 2021 10:47
@renovate renovate bot changed the title Update dependency node-notifier to v10 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 26, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from eaca0da to 52f5c23 Compare May 29, 2021 19:33
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v10 [SECURITY] May 29, 2021
@renovate renovate bot changed the title Update dependency node-notifier to v10 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 29, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch 2 times, most recently from 8e1950a to e67fdf6 Compare May 30, 2021 04:52
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v10 [SECURITY] May 30, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from e67fdf6 to 799f6b2 Compare May 30, 2021 07:03
@renovate renovate bot changed the title Update dependency node-notifier to v10 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 30, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 799f6b2 to 3d9bd3d Compare May 31, 2021 07:52
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v10 [SECURITY] May 31, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 3d9bd3d to ce84353 Compare May 31, 2021 09:28
@renovate renovate bot changed the title Update dependency node-notifier to v10 [SECURITY] Update dependency node-notifier to v8 [SECURITY] May 31, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from ce84353 to cbfe01e Compare June 1, 2021 20:14
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v10 [SECURITY] Jun 1, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from cbfe01e to 828cd3f Compare June 1, 2021 22:13
@renovate renovate bot changed the title Update dependency node-notifier to v10 [SECURITY] Update dependency node-notifier to v8 [SECURITY] Jun 1, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 828cd3f to 227be89 Compare June 2, 2021 13:50
@renovate renovate bot changed the title Update dependency node-notifier to v8 [SECURITY] Update dependency node-notifier to v10 [SECURITY] Jun 2, 2021
@renovate renovate bot changed the title Update dependency node-notifier to v10 [SECURITY] Update dependency node-notifier to 8.0.1 [SECURITY] Jun 2, 2021
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 227be89 to 9530e0d Compare March 7, 2022 14:22
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 9530e0d to 53b7b5e Compare April 24, 2022 22:50
@renovate renovate bot force-pushed the renovate/npm-node-notifier-vulnerability branch from 53b7b5e to b80e5e7 Compare November 20, 2022 12:20
@renovate renovate bot changed the title Update dependency node-notifier to 8.0.1 [SECURITY] Update dependency node-notifier to v8 [SECURITY] Mar 24, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant