Skip to content

[Snyk] Upgrade i18n from 0.11.1 to 0.15.2#20

Closed
grhawkeye wants to merge 1 commit intomasterfrom
snyk-upgrade-3d05c1b94f6559d5c68e108b9f7b2664
Closed

[Snyk] Upgrade i18n from 0.11.1 to 0.15.2#20
grhawkeye wants to merge 1 commit intomasterfrom
snyk-upgrade-3d05c1b94f6559d5c68e108b9f7b2664

Conversation

@grhawkeye
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade i18n from 0.11.1 to 0.15.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 12 versions ahead of your current version.

  • The recommended version was released a month ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-MESSAGEFORMAT-13109646
540 Proof of Concept
Release notes
Package name: i18n
  • 0.15.2 - 2025-09-26

    Changed

    • package updates
    • replaces zombie with supertest
    • replaces npm with pnpm
    • local dev defaults to node 24
    • drops node support in CI <18
    • use codecov.io for coverage reporting
  • 0.15.1 - 2022-09-22
  • 0.15.0 - 2022-05-19

    add YAML support by parser config

  • 0.14.2 - 2022-03-05

    Fixed

    Fixes #493 - using i18n with a combination of retry and sync settings lead to a 'Maximum call stack size exceeded' exception due to an infinite loop while writing phrases to all locale files.

    const i18n = new I18n({
        // [...]
        retryInDefaultLocale: true,
        syncFiles: true,
    })
  • 0.14.1 - 2022-01-30

    Fixed

    • upgrade all dev dependencies without breaking changes
    • upgrade all dependencies without breaking changes

    This also updates to mocha 9.2.0 (mochajs/mocha#4814) which fixes GHSA-qrpm-p2h7-hrv2

  • 0.14.0 - 2022-01-23

    Changed

    • replaces sprintf-js with fast-printf #453
    • replaces deprecated messageformat with @ messageformat/core #472
    • drops node support <10
    • local dev defaults to node 16
  • 0.13.4 - 2021-12-29

    Fixed

    • upgrade all dev dependencies without breaking changes
    • upgrade all dependencies without breaking changes

    see aa60ac7, 3139881 and 4e6963f for details

    Added

    • test directory traversal (#486)
  • 0.13.3 - 2021-05-08

    Fixed

    • upgrade transitive dev dependency of eslint, mocha, zombie to lodash@4.17.21
    • upgrade transitive dev dependency of zombie to url-parse@1.5.1
    • upgrade transitive dev dependency of eslint-plugin-import to hosted-git-info@2.8.9
  • 0.13.2 - 2020-08-21

    Fixed

    • moved devDeps from dependencies to devDependencies #446
    • removed unused packages from all dependencies
  • 0.13.1 - 2020-08-20
  • 0.13.0 - 2020-08-20
  • 0.12.0 - 2020-08-16
  • 0.11.1 - 2020-08-04
from i18n GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade i18n from 0.11.1 to 0.15.2.

See this package in npm:
i18n

See this project in Snyk:
https://app.snyk.io/org/grhawkeye/project/08c08ddb-2c5a-420c-978b-f5fc6fe3624c?utm_source=github&utm_medium=referral&page=upgrade-pr
Copilot AI review requested due to automatic review settings November 7, 2025 21:18
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates the i18n (internationalization) package from version ^0.11.1 to ^0.15.2, bringing the backend internationalization library up to date with newer features and improvements.

  • Updates i18n dependency to version ^0.15.2 for improved TypeScript support and bug fixes

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@github-actions
Copy link

This PR has been automatically marked as stale because it has not had recent activity. 📆 It will be closed automatically in two weeks if no further activity occurs.

@github-actions github-actions bot added the Stale label Nov 22, 2025
@github-actions
Copy link

github-actions bot commented Dec 6, 2025

This PR was closed because it has been stalled for 14 days with no activity.

@github-actions github-actions bot closed this Dec 6, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants