Skip to content

Conversation

@snyk-bot
Copy link

@snyk-bot snyk-bot commented Apr 3, 2021

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

merge advice

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Priority Score (*) Issue Breaking Change Exploit Maturity
high severity 796/1000
Why? Mature exploit, Has a fix available, CVSS 8.2
Uninitialized Memory Exposure
npm:https-proxy-agent:20180402
Yes Mature

(*) Note that the real score may have changed since the PR was raised.

Commit messages
Package name: protractor The new version differs by 196 commits.
  • a044359 chore(release): version bump and changelog for 5.3.2
  • 8dd019b fix(test): fix async tests (#4806)
  • 948c7f2 fix(deps): Update saucelabs for security issue. (#4805)
  • c6703a5 fix(doc): Spelling updates to comments in plugin.ts(#4797)
  • 76324b8 fix(cli): add more verbose warning if '_debugger' module cannot be found. (#4800)
  • f8f490a updated CHANGELOG based on sauceSeleniumAddress and sauceSeleniumUseHttp (#4793)
  • 6290f27 fix(generate-docs): fix generate-docs.sh. (#4765)
  • 2aa507f chore(release): version bump and change log for 5.3.1 (#4758)
  • c63b99e fix(grep): change excluded tests to disabled instead of pending (#4673)
  • 9348ccf docs(page_objects): Remove unnecessary "await" and "async" (#4732)
  • 4898db0 docs(plugins) add protractor-cucumber-steps plugin to plugins.md (#4721)
  • a5dbe25 Revert "Changes "Angular" to "Angular 2" (#4683)" (#4705)
  • cc2234c feat(logger): Add log level configuration (#1451) (#4068)
  • 9027274 Changes "Angular" to "Angular 2" (#4683)
  • a7411b6 docs(page_objects): Add async / await example (#4675)
  • d116f5d Minor format fix for CHANGELOG.md
  • 65c6921 chore(release): version bump and change log for 5.3.0 (#4668)
  • a62a154 fix(script): fix compile-to-es5 script (#4676)
  • 964baba fix(clientsidescript): avoid returning the value of test callback in waitForAngular (#4667)
  • 335680f fix(circleCI): lock the currect version of all dependencies (#4669)
  • 6ba30e0 feat(driverProviders): Add TestObject and Kobiton as driverProviders
  • 83e2ba8 fix(website): Locator by.name('field_name') (#4653)
  • 02746dd fix(browser): Add space after full stop in error message. (#4594)
  • 7f968e0 fix(direct): Use config's geckoDriver when specified (#4554)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants