[Snyk] Fix for 149 vulnerabilities

[MarcelRaschke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	804/1000 Why? Mature exploit, Has a fix available, CVSS 7.5	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1021884	No	Mature
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1041745	No	Mature
	794/1000 Why? Mature exploit, Has a fix available, CVSS 7.3	Improper Validation SNYK-JS-ELECTRON-1047306	No	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1048693	No	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Improper Access Control SNYK-JS-ELECTRON-1049321	No	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Improper Input Validation SNYK-JS-ELECTRON-1049323	No	No Known Exploit
	665/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1049547	No	No Known Exploit
	624/1000 Why? Has a fix available, CVSS 8.2	Use After Free SNYK-JS-ELECTRON-1050424	No	No Known Exploit
	550/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-ELECTRON-1050427	No	No Known Exploit
	751/1000 Why? Mature exploit, Has a fix available, CVSS 7.3	Insufficient Validation SNYK-JS-ELECTRON-1050882	No	Mature
	704/1000 Why? Has a fix available, CVSS 9.8	Use After Free SNYK-JS-ELECTRON-1050999	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Out-of-bounds Read SNYK-JS-ELECTRON-1051000	No	No Known Exploit
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Improper Input Validation SNYK-JS-ELECTRON-1064555	No	Proof of Concept
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1064558	No	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1064561	No	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Information Exposure SNYK-JS-ELECTRON-1065981	No	No Known Exploit
	704/1000 Why? Has a fix available, CVSS 9.8	Use After Free SNYK-JS-ELECTRON-1070013	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Insufficient Validation SNYK-JS-ELECTRON-1070014	No	No Known Exploit
	464/1000 Why? Has a fix available, CVSS 5	Use After Free SNYK-JS-ELECTRON-1070015	No	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Heap Buffer Overflow SNYK-JS-ELECTRON-1085647	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1085705	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1085994	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Out-of-Bounds SNYK-JS-ELECTRON-1085996	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Information Exposure SNYK-JS-ELECTRON-1085998	Yes	No Known Exploit
	655/1000 Why? Has a fix available, CVSS 8.6	Out-of-Bounds SNYK-JS-ELECTRON-1086693	Yes	No Known Exploit
	550/1000 Why? Has a fix available, CVSS 6.5	Access Restriction Bypass SNYK-JS-ELECTRON-1086694	Yes	No Known Exploit
	655/1000 Why? Has a fix available, CVSS 8.6	Improper Input Validation SNYK-JS-ELECTRON-1086695	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1087442	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Out-of-bounds Write SNYK-JS-ELECTRON-1088600	Yes	Mature
	619/1000 Why? Has a fix available, CVSS 8.1	Insecure Defaults SNYK-JS-ELECTRON-1088602	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1252279	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1252280	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1253279	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1253281	Yes	No Known Exploit
	876/1000 Why? Mature exploit, Has a fix available, CVSS 9.8	Out-of-bounds SNYK-JS-ELECTRON-1257943	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1258207	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1259349	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Integer Overflow or Wraparound SNYK-JS-ELECTRON-1260586	Yes	No Known Exploit
	584/1000 Why? Has a fix available, CVSS 7.4	Out-of-bounds Read SNYK-JS-ELECTRON-1261111	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1277203	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Integer Overflow SNYK-JS-ELECTRON-1277205	Yes	No Known Exploit
	465/1000 Why? Has a fix available, CVSS 4.8	Improper Input Validation SNYK-JS-ELECTRON-1277526	Yes	No Known Exploit
	399/1000 Why? Has a fix available, CVSS 3.7	Out Of Bounds Read SNYK-JS-ELECTRON-1278596	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1296553	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1296555	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1296557	Yes	No Known Exploit
	761/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-1296559	Yes	Proof of Concept
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1296561	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Race Condition SNYK-JS-ELECTRON-1296563	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1296565	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1312313	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Access of Resource Using Incompatible Type ('Type Confusion') SNYK-JS-ELECTRON-1312314	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1312315	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1313765	Yes	Mature
	529/1000 Why? Has a fix available, CVSS 6.3	Use After Free SNYK-JS-ELECTRON-1313767	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1314896	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1315151	Yes	No Known Exploit
	704/1000 Why? Has a fix available, CVSS 9.8	Out-of-bounds Write SNYK-JS-ELECTRON-1315668	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1533614	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1534881	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1534882	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-1534883	Yes	Mature
	550/1000 Why? Has a fix available, CVSS 6.5	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1534884	Yes	No Known Exploit
	529/1000 Why? Has a fix available, CVSS 6.3	Use After Free SNYK-JS-ELECTRON-1536579	Yes	No Known Exploit
	761/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1536581	Yes	Proof of Concept
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1536587	Yes	No Known Exploit
	694/1000 Why? Mature exploit, Has a fix available, CVSS 5.3	Out-of-Bounds SNYK-JS-ELECTRON-1585619	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-1586050	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Buffer Overflow SNYK-JS-ELECTRON-1656742	Yes	No Known Exploit
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1656743	Yes	Mature
	590/1000 Why? Has a fix available, CVSS 7.3	Out-of-Bounds SNYK-JS-ELECTRON-1656745	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Access Restriction Bypass SNYK-JS-ELECTRON-1656746	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-1656752	Yes	No Known Exploit
	550/1000 Why? Has a fix available, CVSS 6.5	Improper Input Validation SNYK-JS-ELECTRON-1727342	Yes	No Known Exploit
	694/1000 Why? Mature exploit, Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-ELECTRON-1727344	Yes	Mature
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Sandbox Bypass SNYK-JS-ELECTRON-1731315	Yes	Proof of Concept
	869/1000 Why? Mature exploit, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1910985	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1910987	Yes	No Known Exploit
	429/1000 Why? Has a fix available, CVSS 4.3	Exposure of Resource to Wrong Sphere SNYK-JS-ELECTRON-1910988	Yes	No Known Exploit
	429/1000 Why? Has a fix available, CVSS 4.3	Improper Access Control SNYK-JS-ELECTRON-1910991	Yes	No Known Exploit
	811/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.8	Type Confusion SNYK-JS-ELECTRON-1911949	Yes	Proof of Concept
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1912074	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1912075	Yes	No Known Exploit
	579/1000 Why? Has a fix available, CVSS 7.3	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1912082	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Heap-based Buffer Overflow SNYK-JS-ELECTRON-1912084	Yes	No Known Exploit
	754/1000 Why? Mature exploit, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-ELECTRON-1912085	Yes	Mature
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1924893	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Inappropriate Implementation SNYK-JS-ELECTRON-1924894	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Inappropriate Implementation SNYK-JS-ELECTRON-1924895	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-1930826	Yes	No Known Exploit
	794/1000 Why? Mature exploit, Has a fix available, CVSS 7.3	Use After Free SNYK-JS-ELECTRON-2322001	Yes	Mature
	539/1000 Why? Has a fix available, CVSS 6.5	Domain Spoofing SNYK-JS-ELECTRON-2329155	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2329162	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-2329257	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2330890	Yes	No Known Exploit
	704/1000 Why? Has a fix available, CVSS 9.8	Improper Input Validation SNYK-JS-ELECTRON-2332173	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Improper Control of a Resource Through its Lifetime SNYK-JS-ELECTRON-2332176	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2338684	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-2339883	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Interger Underflow SNYK-JS-ELECTRON-2351961	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2404183	Yes	No Known Exploit
	/1000 Why?	Improper Check or Handling of Exceptional Conditions SNYK-JS-ELECTRON-2404184	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2414027	Yes	Mature
	/1000 Why?	Integer Overflow or Wraparound SNYK-JS-ELECTRON-2420972	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2420994	Yes	No Known Exploit
	/1000 Why?	Information Exposure SNYK-JS-ELECTRON-2422385	Yes	No Known Exploit
	/1000 Why?	Improper Access Control SNYK-JS-ELECTRON-2431353	Yes	No Known Exploit
	/1000 Why?	Type Confusion SNYK-JS-ELECTRON-2434822	Yes	Mature
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2434824	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2774694	Yes	No Known Exploit
	/1000 Why?	Type Confusion SNYK-JS-ELECTRON-2803052	Yes	No Known Exploit
	/1000 Why?	Improper implementation SNYK-JS-ELECTRON-2803053	Yes	No Known Exploit
	/1000 Why?	Type Confusion SNYK-JS-ELECTRON-2806357	Yes	No Known Exploit
	/1000 Why?	Heap-based Buffer Overflow SNYK-JS-ELECTRON-2806730	Yes	No Known Exploit
	/1000 Why?	Inappropriate implementation SNYK-JS-ELECTRON-2807802	Yes	No Known Exploit
	/1000 Why?	Improper Input Validation SNYK-JS-ELECTRON-2807803	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2807804	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2807809	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2808872	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2808873	Yes	No Known Exploit
	/1000 Why?	Inappropriate implementation SNYK-JS-ELECTRON-2808874	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2812497	Yes	No Known Exploit
	/1000 Why?	Inappropriate implementation SNYK-JS-ELECTRON-2812499	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2824110	Yes	No Known Exploit
	/1000 Why?	Heap-based Buffer Overflow SNYK-JS-ELECTRON-2838863	Yes	No Known Exploit
	/1000 Why?	Improper Input Validation SNYK-JS-ELECTRON-2869408	Yes	No Known Exploit
	/1000 Why?	Exposure of Resource to Wrong Sphere SNYK-JS-ELECTRON-2869410	Yes	No Known Exploit
	/1000 Why?	Use After Free SNYK-JS-ELECTRON-2870632	Yes	No Known Exploit
	/1000 Why?	Improper Input Validation SNYK-JS-ELECTRON-2932172	Yes	No Known Exploit
	/1000 Why?	Protection Mechanism Failure SNYK-JS-ELECTRON-2934721	Yes	No Known Exploit
	/1000 Why?	Heap-based Buffer Overflow SNYK-JS-ELECTRON-2946881	Yes	Mature
	/1000 Why?	Type Confusion SNYK-JS-ELECTRON-2946891	Yes	No Known Exploit
	/1000 Why?	Denial of Service (DoS) SNYK-JS-ELECTRON-2961655	Yes	No Known Exploit
	/1000 Why?	Information Exposure SNYK-JS-ELECTRON-2977510	Yes	No Known Exploit
	/1000 Why?	Improper Input Validation SNYK-JS-ELECTRON-2977512	Yes	No Known Exploit
	/1000 Why?	Buffer Overflow SNYK-JS-ELECTRON-2978483	Yes	No Known Exploit
	/1000 Why?	Access Control Bypass SNYK-JS-ELECTRON-2978519	Yes	No Known Exploit
	/1000 Why?	Open Redirect SNYK-JS-GOT-2932019	No	No Known Exploit
	/1000 Why?	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	Yes	Proof of Concept
	/1000 Why?	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	No	Proof of Concept
	/1000 Why?	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	No	No Known Exploit
	/1000 Why?	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	No	Proof of Concept
	/1000 Why?	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	No	Proof of Concept
	/1000 Why?	Arbitrary File Overwrite SNYK-JS-TAR-1536528	No	No Known Exploit
	/1000 Why?	Arbitrary File Overwrite SNYK-JS-TAR-1536531	No	No Known Exploit
	/1000 Why?	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	No	No Known Exploit
	/1000 Why?	Arbitrary File Write SNYK-JS-TAR-1579147	No	No Known Exploit
	/1000 Why?	Arbitrary File Write SNYK-JS-TAR-1579152	No	No Known Exploit
	/1000 Why?	Arbitrary File Write SNYK-JS-TAR-1579155	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @svgr/cli

The new version differs by 93 commits.

• af9a6cb v6.0.0
• e9469c3 Merge pull request feat: move files for backwards compatibility ipfs/ipfs-desktop#629 from gregberge/rewriting-docs
• eb3282b docs: rewriting
• 6f832f0 Merge pull request fix: remove api file (fixes a bug when there are unexpected shutdowns) ipfs/ipfs-desktop#627 from gregberge/support-css-variables
• cbdb47f fix: support CSS variables
• 985444d chore: fix package-lock.json
• a5effba v6.0.0-alpha.4
• 3f071d6 Merge pull request fix: remove api file if daemon not running ipfs/ipfs-desktop#626 from gregberge/upgrade-deps
• daf6a08 chore(deps): upgrade
• 1c5f163 Merge pull request Small desktop ipfs/ipfs-desktop#625 from gregberge/icon-size
• 483560d chore: fix package-lock.json
• 3c0b779 feat: allow to specify icon size
• 6ba16a3 Merge pull request fix: upload directory with subdirectories [WIP] ipfs/ipfs-desktop#624 from gregberge/various-things
• f61c8ba chore: fix ref following refactoring
• 261e1b5 v6.0.0-alpha.3
• fe5c117 Merge pull request feat: connect already running daemon ipfs/ipfs-desktop#623 from gregberge/webpack
• 9a4cbce docs(examples): update examples
• 1a8cc98 fix(webpack): fix webpack 5 behaviour with url-loader
• a857bb1 feat: support mask-type property (feat: default profile as dhtclient ipfs/ipfs-desktop#621)
• 5966714 fix(template): make it possible to use type in template (Minimize DHT bandwidth usage: switch node to dhtclient profile ipfs/ipfs-desktop#619)
• 9ea5da4 refactor(core): use exportName transform (Better Error Messages ipfs/ipfs-desktop#616)
• 8a1b0aa docs(readme): Fixing CRA link (Mount MFS ipfs/ipfs-desktop#618)
• 00a1d4b chore: fix package-lock.json
• f729efa v6.0.0-alpha.2

See the full diff

Package name: got

The new version differs by 37 commits.

• 5e17bb7 11.8.5
• bce8ce7 Backport 861ccd9ac2237df762a9e2beed7edd88c60782dc
• 8ced192 Fix build
• 670eb04 11.8.4
• 20f29fe Backport Program crashed when WIFI network is switched. ipfs/ipfs-desktop#1543: Initialize globalResponse in case of ignored HTTPError ([0.20.1] Repo conversion fails -> Restart hangs at "IPFS is Starting" with no GUI ipfs/ipfs-desktop#2017)
• 0da732f 11.8.3
• 9463bb6 Bump cacheable-request dependency ([gui error report] ipfs/ipfs-desktop#1921)
• 0e167b8 HTTPError code set to 'HTTPError' Failure loading XKCD example  ipfs/ipfs-desktop#1711 (feat: enable ipns over pubsub via settings menu ipfs/ipfs-desktop#1739)
• f896aa5 11.8.2
• 3bd245f Instantiate CacheableLookup only when needed (eror npm via ipfs ipfs/ipfs-desktop#1529)
• a72ed84 11.8.1
• 4c815c3 Do not throw on custom stack traces (chore(deps): bump ipfs-http-client from 44.0.1 to 44.0.2 ipfs/ipfs-desktop#1491)
• e0cb820 11.8.0
• f65c9ef Upgrade dependencies
• 7acd380 Fix for sending files with size `0` on `stat` (Improve UX when updating ipfs/ipfs-desktop#1488)
• 6aa86f2 Fix indentation in the readme
• 3dd2273 `beforeRetry` allows stream body if different from original (chore: update dependencies ipfs/ipfs-desktop#1501)
• b1afa2b Fix readme example comment (chore(deps): bump ipfsd-ctl from 4.1.0 to 4.1.1 ipfs/ipfs-desktop#1505)
• 390b145 Set default value for an options object (chore(deps-dev): bump got from 11.0.2 to 11.1.2 ipfs/ipfs-desktop#1495)
• 87dadd5 Fixed documentation example for `responseType` (chore(deps): bump ipfs-http-client from 44.0.1 to 44.0.3 ipfs/ipfs-desktop#1494)
• 3bf3e3b Add `lookup` option documentation (chore(deps-dev): bump electron from 8.2.4 to 8.2.5 ipfs/ipfs-desktop#1483)
• c31366b Add a test for fix: repo fsck is deprecated ipfs/ipfs-desktop#1438 (chore(deps): bump sudo-prompt from 9.1.1 to 9.2.1 ipfs/ipfs-desktop#1469)
• 5d62958 11.7.0
• 88b32ea Fix a regression where body was sent after redirect

See the full diff

Package name: semver-regex

The new version differs by 7 commits.

• 906cf40 3.1.4
• 7712ba5 Fix ReDoS vulnerability backport
• a0203db Fix ReDoS vulnerability backport
• ca0ee67 3.1.2
• 626c0c2 Move to GitHub Actions
• 6baf2cc Fix regex catastrophic backtracking
• bf2f4c2 Meta tweaks

See the full diff

Package name: tar

The new version differs by 54 commits.

• 4f1f4a2 6.1.9
• 875a37e fix: prevent path escape using drive-relative paths
• b6162c7 fix: reserve paths properly for unicode, windows
• 3aaf19b fix: prune dirCache properly for unicode, windows
• 6a9c51d 6.1.8
• dfc5923 fix: skip extract if linkpath is stripped entirely
• 575a511 fix: reserve paths case-insensitively
• d61628c 6.1.7
• 9e018cf tests: run (and pass) on windows
• c2a0948 fix: refactoring to pass tests on Windows
• d0ce670 update deps
• 5360266 fix: normalize paths on Windows systems
• 9bc1729 6.1.6
• bdf4f51 fix: properly prefix hard links
• 94b2a74 chore: remove benchmarks from git repo
• ecaafb4 update deps
• bd4691c 6.1.5
• d694c4f ci: test on node 16
• 84acbd3 fix(unpack): fix hang on large file on open() fail
• 97c46fc fix(unpack): always resume parsing after an entry error
• 488ab8c chore: WriteEntry cleaner write() handling
• be89aaf WriteEntry backpressure
• ba73f5e chore: track fs state on WriteEntry class, not in arguments
• bf69383 6.1.4

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[//]: # (snyk:metadata:{"prId":"0247ae7a-463d-45dd-9f5e-4aba1cadbf0e","prPublicId":"0247ae7a-463d-45dd-9f5e-4aba1cadbf0e","dependencies":[{"name":"@svgr/cli","from":"5.4.0","to":"6.0.0"},{"name":"electron","from":"9.3.2","to":"18.3.9"},{"name":"got","from":"11.6.2","to":"11.8.5"},{"name":"semver-regex","from":"3.1.1","to":"3.1.4"},{"name":"tar","from":"6.0.2","to":"6.1.9"}],"packageManager":"npm","projectPublicId":"c43862e2-04e0-46c7-9027-49ad8d871d46","projectUrl":"https://app.snyk.io/org/marcelraschke/project/c43862e2-04e0-46c7-9027-49ad8d871d46?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-ELECTRON-1021884","SNYK-JS-ELECTRON-1041745","SNYK-JS-ELECTRON-1047306","SNYK-JS-ELECTRON-1048693","SNYK-JS-ELECTRON-1049321","SNYK-JS-ELECTRON-1049323","SNYK-JS-ELECTRON-1049547","SNYK-JS-ELECTRON-1050424","SNYK-JS-ELECTRON-1050427","SNYK-JS-ELECTRON-1050882","SNYK-JS-ELECTRON-1050999","SNYK-JS-ELECTRON-1051000","SNYK-JS-ELECTRON-1064555","SNYK-JS-ELECTRON-1064558","SNYK-JS-ELECTRON-1064561","SNYK-JS-ELECTRON-1065981","SNYK-JS-ELECTRON-1070013","SNYK-JS-ELECTRON-1070014","SNYK-JS-ELECTRON-1070015","SNYK-JS-ELECTRON-1085647","SNYK-JS-ELECTRON-1085705","SNYK-JS-ELECTRON-1085994","SNYK-JS-ELECTRON-1085996","SNYK-JS-ELECTRON-1085998","SNYK-JS-ELECTRON-1086693","SNYK-JS-ELECTRON-1086694","SNYK-JS-ELECTRON-1086695","SNYK-JS-ELECTRON-1087442","SNYK-JS-ELECTRON-1088600","SNYK-JS-ELECTRON-1088602","SNYK-JS-ELECTRON-1252279","SNYK-JS-ELECTRON-1252280","SNYK-JS-ELECTRON-1253279","SNYK-JS-ELECTRON-1253281","SNYK-JS-ELECTRON-1257943","SNYK-JS-ELECTRON-1258207","SNYK-JS-ELECTRON-1259349","SNYK-JS-ELECTRON-1260586","SNYK-JS-ELECTRON-1261111","SNYK-JS-ELECTRON-1277203","SNYK-JS-ELECTRON-1277205","SNYK-JS-ELECTRON-1277526","SNYK-JS-ELECTRON-1278596","SNYK-JS-ELECTRON-1296553","SNYK-JS-ELECTRON-1296555","SNYK-JS-ELECTRON-1296557","SNYK-JS-ELECTRON-1296559","SNYK-JS-ELECTRON-1296561","SNYK-JS-ELECTRON-1296563","SNYK-JS-ELECTRON-1296565","SNYK-JS-ELECTRON-1312313","SNYK-JS-ELECTRON-1312314","SNYK-JS-ELECTRON-1312315","SNYK-JS-ELECTRON-1313765","SNYK-JS-ELECTRON-1313767","SNYK-JS-ELECTRON-1314896","SNYK-JS-ELECTRON-1315151","SNYK-JS-ELECTRON-1315668","SNYK-JS-ELECTRON-1533614","SNYK-JS-ELECTRON-1534881","SNYK-JS-ELECTRON-1534882","SNYK-JS-ELECTRON-1534883","SNYK-JS-ELECTRON-1534884","SNYK-JS-ELECTRON-1536579","SNYK-JS-ELECTRON-1536581","SNYK-JS-ELECTRON-1536587","SNYK-JS-ELECTRON-1585619","SNYK-JS-ELECTRON-1586050","SNYK-JS-ELECTRON-1656742","SNYK-JS-ELECTRON-1656743","SNYK-JS-ELECTRON-1656745","SNYK-JS-ELECTRON-1656746","SNYK-JS-ELECTRON-1656752","SNYK-JS-ELECTRON-1727342","SNYK-JS-ELECTRON-1727344","SNYK-JS-ELECTRON-1731315","SNYK-JS-ELECTRON-1910985","SNYK-JS-ELECTRON-1910987","SNYK-JS-ELECTRON-1910988","SNYK-JS-ELECTRON-1910991","SNYK-JS-ELECTRON-1911949","SNYK-JS-ELECTRON-1912074","SNYK-JS-ELECTRON-1912075","SNYK-JS-ELECTRON-1912082","SNYK-JS-ELECTRON-1912084","SNYK-JS-ELECTRON-1912085","SNYK-JS-ELECTRON-1924893","SNYK-JS-ELECTRON-1924894","SNYK-JS-ELECTRON-1924895","SNYK-JS-ELECTRON-1930826","SNYK-JS-ELECTRON-2322001","SNYK-JS-ELECTRON-2329155","SNYK-JS-ELECTRON-2329162","SNYK-JS-ELECTRON-2329257","SNYK-JS-ELECTRON-2330890","SNYK-JS-ELECTRON-2332173","SNYK-JS-ELECTRON-2332176","SNYK-JS-ELECTRON-2338684","SNYK-JS-ELECTRON-2339883","SNYK-JS-ELECTRON-2351961","SNYK-JS-ELECTRON-2404183","SNYK-JS-ELECTRON-2404184","SNYK-JS-ELECTRON-2414027","SNYK-JS-ELECTRON-2420972","SNYK-JS-ELECTRON-2420994","SNYK-JS-ELECTRON-2422385","SNYK-JS-ELECTRON-2431353","SNYK-JS-ELECTRON-2434822","SNYK-JS-ELECTRON-2434824","SNYK-JS-ELECTRON-2774694","SNYK-JS-ELECTRON-2803052","SNYK-JS-ELECTRON-2803053","SNYK-JS-ELECTRON-2806357","SNYK-JS-ELECTRON-2806730","SNYK-JS-ELECTRON-2807802","SNYK-JS-ELECTRON-2807803","SNYK-JS-ELECTRON-2807804","SNYK-JS-ELECTRON-2807809","SNYK-JS-ELECTRON-2808872","SNYK-JS-ELECTRON-2808873","SNYK-JS-ELECTRON-2808874","SNYK-JS-ELECTRON-2812497","SNYK-JS-ELECTRON-2812499","SNYK-JS-ELECTRON-2824110","SNYK-JS-ELECTRON-2838863","SNYK-JS-ELECTRON-2869408","SNYK-JS-ELECTRON-2869410","SNYK-JS-ELECTRON-2870632","SNYK-JS-ELECTRON-2932172","SNYK-JS-ELECTRON-2934721","SNYK-JS-ELECTRON-2946881","SNYK-JS-ELECTRON-2946891","SNYK-JS-ELECTRON-2961655","SNYK-JS-ELECTRON-2977510","SNYK-JS-ELECTRON-2977512","SNYK-JS-ELECTRON-2978483","SNYK-JS-ELECTRON-2978519","SNYK-JS-GOT-2932019","SNYK-JS-NTHCHECK-1586032","SNYK-JS-SEMVERREGEX-1047770","SNYK-JS-SEMVERREGEX-1584358","SNYK-JS-SEMVERREGEX-1585624","SNYK-JS-SEMVERREGEX-2824151","SNYK-JS-TAR-1536528","SNYK-JS-TAR-1536531","SNYK-JS-TAR-1536758","SNYK-JS-TAR-1579147","SNYK-JS-TAR-1579152...