Skip to content
This repository was archived by the owner on Dec 20, 2021. It is now read-only.

[Snyk] Security upgrade codecov from 3.6.5 to 3.7.1#17

Open
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-b353b0b2cb85fcbc3f7e15aa8cb7594e
Open

[Snyk] Security upgrade codecov from 3.6.5 to 3.7.1#17
snyk-bot wants to merge 1 commit intomasterfrom
snyk-fix-b353b0b2cb85fcbc3f7e15aa8cb7594e

Conversation

@snyk-bot
Copy link
Contributor

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json
    • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Command Injection
SNYK-JS-CODECOV-585979
No No Known Exploit
Commit messages
Package name: codecov The new version differs by 15 commits.
  • 29dd5b6 3.7.1
  • c0711c6 Switch from execSync to execFileSync (#180)
  • 5f6cc62 Bump lodash from 4.17.15 to 4.17.19 (#183)
  • 0c4d7f3 Merge pull request #182 from codecov/update-readme-badges
  • cc5e121 Update depstat image and urls
  • b44b44e Update readme with 400 error info (#181)
  • bb79335 V3.7.0 (#179)
  • 0d7b9b0 Remove `'x-amz-acl': 'public-read'` header (#178)
  • eeff4e1 Bump acorn from 5.7.3 to 5.7.4 (#174)
  • eb8a527 Merge pull request #172 from RoboCafaz/bugfix/codebuild-pr-parser
  • 55d69cd Merge pull request #159 from SaferNodeJS/master
  • ef348ec Verify source version before parsing PR
  • e138efe Merge lastest changes
  • 36bbef4 Merge branch 'master' of https://github.com/codecov/codecov-node
  • 5885958 Fixing windows test and security

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

@codecov
Copy link

codecov bot commented Jul 22, 2020

Codecov Report

Merging #17 into master will decrease coverage by 4.73%.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff             @@
##           master      #17      +/-   ##
==========================================
- Coverage   94.73%   90.00%   -4.74%     
==========================================
  Files           4        5       +1     
  Lines          57       60       +3     
  Branches        4        4              
==========================================
  Hits           54       54              
- Misses          3        6       +3     
Impacted Files Coverage Δ
build/src/index.js 0.00% <0.00%> (ø)

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update c02ec97...4dababd. Read the comment docs.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant