The .59-node from 9renpoto

Action Required: Fix Renovate Configuration

There is an error with this repository's Renovate configuration that needs to be fixed. As a precaution, Renovate will stop PRs until it is resolved.

Error type: undefined. Note: this is a nested preset so please contact the preset author if you are unable to fix it yourself.

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.set:4.3.2

Vulnerabilities

DepShield reports that this application's usage of lodash.set:4.3.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.set:4.3.2 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/version:3.18.3
              └─ @lerna/github-client:3.16.5
                    └─ @octokit/rest:16.34.1
                          └─ lodash.set:4.3.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash._reinterpolate:3.0.0

Vulnerabilities

DepShield reports that this application's usage of lodash._reinterpolate:3.0.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash._reinterpolate:3.0.0 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/version:3.18.3
              └─ @lerna/conventional-commits:3.16.4
                    └─ lodash.template:4.5.0
                          └─ lodash._reinterpolate:3.0.0
                          └─ lodash.templatesettings:4.2.0
                                └─ lodash._reinterpolate:3.0.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Dependency Dashboard

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.

Open

These updates have all been created already. Click a checkbox below to force a retry/rebase of any.

chore(deps): update dependency vite to v5

Detected dependencies

cargo

apps/desktop/src-tauri/Cargo.toml

tauri 1.5

serde 1.0

serde_json 1.0

tauri-build 1.5

github-actions

.github/workflows/actionlint.yml

actions/checkout v4

reviewdog/action-actionlint v1

.github/workflows/bump.yml

actions/checkout v4

actions/github-script v7

peter-evans/create-pull-request v5.0.2

.github/workflows/cspell.yml

actions/checkout v4

streetsidesoftware/cspell-action v5

.github/workflows/deno.yml

actions/checkout v4@b4ffde65f46336ab88eb53be808477a3936bae11

denoland/setup-deno v1

.github/workflows/node.js.yml

actions/checkout v4

actions/setup-node v4

bahmutov/npm-install v1

codecov/codecov-action v3

actions/checkout v4

bahmutov/npm-install v1

chromaui/action v1

.github/workflows/size.yml

actions/checkout v4

preactjs/compressed-size-action 2.5.0

.github/workflows/tauri.yaml

actions/checkout v4

actions/setup-node v4

Swatinem/rust-cache v2

bahmutov/npm-install v1

tauri-apps/tauri-action v0

npm

apps/desktop/package.json

preact ^10.16.0

@tauri-apps/api ^1.4.0

@preact/preset-vite ^2.5.0

vite ^5.0.0

@tauri-apps/cli ^1.4.0

apps/web/package.json

next 12.3.4

next-plugin-preact 3.0.7

react 17.1.2

react-dom 17.1.2

react-ssr-prepass 1.2.1

@playwright/test ^1.38.1

@types/gtag.js ^0.0.18

package.json

@9renpoto/eslint-config-typescript ^7.0.0

@9renpoto/tsconfig ^7.0.0

@types/rosie ^0.0.45

husky ^8.0.3

lint-staged ^15.0.0

rosie ^2.1.0

turbo ^1.9.3

packages/ui/package.json

@twind/core ^1.1.3

lucide-preact ^0.293.0

@storybook/addon-coverage ^1.0.0

@storybook/addon-essentials ^7.0.9

@storybook/addon-interactions ^7.0.9

@storybook/addon-links ^7.0.9

@storybook/blocks ^7.0.9

@storybook/preact ^7.0.9

@storybook/preact-vite ^7.0.9

@storybook/test-runner ^0.15.0

@storybook/testing-library ^0.2.0

@testing-library/preact ^3.2.3

@twind/preset-autoprefix ^1.0.7

@twind/preset-tailwind ^1.1.4

storybook ^7.0.9

Check this box to trigger a request for Renovate to run again on this repository

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.uniq:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.uniq:4.5.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.uniq:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/version:3.18.3
              └─ @lerna/github-client:3.16.5
                    └─ @octokit/rest:16.34.1
                          └─ lodash.uniq:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.clonedeep:4.5.0

Vulnerabilities

DepShield reports that this application's usage of lodash.clonedeep:4.5.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.clonedeep:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/publish:3.18.3
              └─ @lerna/npm-publish:3.16.2
                    └─ @evocateur/libnpmpublish:1.2.2
                          └─ lodash.clonedeep:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.sortby:4.7.0

Vulnerabilities

DepShield reports that this application's usage of lodash.sortby:4.7.0 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

Occurrences

lodash.sortby:4.7.0 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/create:3.18.0
              └─ whatwg-url:7.1.0
                    └─ lodash.sortby:4.7.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.memoize:4.1.2

Vulnerabilities

DepShield reports that this application's usage of lodash.memoize:4.1.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.memoize:4.1.2 is a transitive dependency introduced by the following direct dependency(s):

• prettier-eslint-cli:5.0.0
└─ lodash.memoize:4.1.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of lodash.get:4.4.2

Vulnerabilities

DepShield reports that this application's usage of lodash.get:4.4.2 results in the following vulnerability(s):

(CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)
(CVSS 6.5) [CVE-2018-3721] lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutabl...

Occurrences

lodash.get:4.4.2 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/version:3.18.3
              └─ @lerna/github-client:3.16.5
                    └─ @octokit/rest:16.34.1
                          └─ lodash.get:4.4.2

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of q:1.5.1

Vulnerabilities

DepShield reports that this application's usage of q:1.5.1 results in the following vulnerability(s):

(CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Occurrences

q:1.5.1 is a transitive dependency introduced by the following direct dependency(s):

• lerna:3.18.3
        └─ @lerna/version:3.18.3
              └─ @lerna/conventional-commits:3.16.4
                    └─ conventional-changelog-angular:5.0.5
                          └─ q:1.5.1
                    └─ conventional-changelog-core:3.2.3
                          └─ q:1.5.1
                    └─ conventional-recommended-bump:5.0.1
                          └─ q:1.5.1

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.5) Vulnerability due to usage of debug:2.6.9

Vulnerabilities

DepShield reports that this application's usage of debug:2.6.9 results in the following vulnerability(s):

(CVSS 7.5) CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')

Occurrences

debug:2.6.9 is a transitive dependency introduced by the following direct dependency(s):

• @9renpoto/eslint-config-typescript:5.3.0
        └─ @9renpoto/eslint-config:5.3.0
              └─ eslint-plugin-import:2.18.2
                    └─ eslint-import-resolver-node:0.3.2
                          └─ debug:2.6.9
                    └─ eslint-module-utils:2.4.1
                          └─ debug:2.6.9
                    └─ debug:2.6.9

• lerna:3.18.3
        └─ @lerna/create:3.18.0
              └─ globby:9.2.0
                    └─ fast-glob:2.2.7
                          └─ micromatch:3.1.10
                                └─ extglob:2.0.4
                                      └─ expand-brackets:2.1.4
                                            └─ debug:2.6.9
                                └─ snapdragon:0.8.2
                                      └─ debug:2.6.9

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

9renpoto / .59-node Goto Github PK

.59-node's Introduction

Hi 👋, Im Keisuke Umeno.

Blogs posts

Activity

.59-node's People

Contributors

Stargazers

Watchers

Forkers

.59-node's Issues

Open

Detected dependencies

Recommend Projects

Recommend Topics

Recommend Org