[Snyk] Upgrade got from 11.6.2 to 12.4.1

[MarcelRaschke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade got from 11.6.2 to 12.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 21 versions ahead of your current version.
• The recommended version was released a month ago, on 2022-09-02.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Improper Privilege Management SNYK-JS-SHELLJS-2332187	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1585624	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1584358	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-MERGEDEEP-1070277	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-ASYNC-2441827	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-ASYNC-2441827	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-2824151	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVERREGEX-1047770	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-PATHVAL-596926	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-FLAT-596927	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: got

• 12.4.1 - 2022-09-02
  

  Fixes

  • Fix options.context being not extensible b671480
  • Don't emit uploadProgress after promise cancelation 693de21

  v12.4.0...v12.4.1

• 12.4.0 - 2022-09-02
  

  Improvements

  • Support FormData without known length (#2120) 850773c

  Fixes

  • Don't call beforeError hooks with HTTPError if the throwHttpErrors option is false (#2104) 3927348

  v12.3.1...v12.4.0

• 12.3.1 - 2022-08-06
  
  • Don't freeze signal when freezing Options (#2100) 43b1467

  v12.3.0...v12.3.1

• 12.3.0 - 2022-07-28
  
  • Add .off() method for events (#2092) 88056be

  v12.2.0...v12.3.0

• 12.2.0 - 2022-07-24
  
  • Support AbortController (#2020) 6a6d2a9
  • Add enableUnixSockets option (#2062) 461b3d4

  v12.1.0...v12.2.0

• 12.1.0 - 2022-05-25
  

  Improvements

  • Add response.ok (#2043) 22d58fb
    • This is only useful if you have {throwHttpErrors: false}

  Fixes

  • Do not redirect to UNIX sockets (#2047) 861ccd9
    • CVE-2022-33987
    • Also back ported to v11

  v12.0.4...v12.1.0

• 12.0.4 - 2022-04-24
  
  • Remove stream lock - unreliable since Node 17.3.0 bb8eca9
• 12.0.3 - 2022-03-26
  
  • Allow more types in the json option (#2015) eb045bf

  v12.0.2...v12.0.3

• 12.0.2 - 2022-03-16
• 12.0.1 - 2022-01-09
• 12.0.0 - 2021-12-10
• 12.0.0-beta.4 - 2021-08-12
• 12.0.0-beta.3 - 2021-08-06
• 12.0.0-beta.2 - 2021-08-04
• 12.0.0-beta.1 - 2021-07-22
• 11.8.5 - 2022-05-25
  
  • Backport security fix 861ccd9
    • CVE-2022-33987

  v11.8.4...v11.8.5

• 11.8.3 - 2021-11-18
• 11.8.2 - 2021-02-26
• 11.8.1 - 2020-12-10
• 11.8.0 - 2020-10-20
• 11.7.0 - 2020-09-18
• 11.6.2 - 2020-09-10

from got GitHub release notes

Commit messages

Package name: got

• 8180a53 Leave uploadProgress so it gets emitted on stream end
• 693de21 Attempt to skip emitting uploadProgress after destroy
• b671480 Fix `options.context` being not extensible
• 231f55d 12.4.0
• 3a1074f Build TS when testing
• 850773c Support FormData without known length (The process cannot access the file because it is being used by another process. ipfs/ipfs-desktop#2120)
• 5c2ff68 Add quick start guide ([gui error report] SyntaxError: Unexpected end of JSON input:  ipfs/ipfs-desktop#2059)
• 3927348 Don't call `beforeError` hooks with `HTTPError` if the `throwHttpErrors` option is `false` ([gui error report] Can't Start up ipfs/ipfs-desktop#2104)
• 9f06060 Upgrade dependencies
• 36cf6a8 Lock `tough-cookie` to `4.0.0`
• c09b985 Fix tough-cookie test
• d24e319 Fix TS compile errors
• 4d12bbd Link to the correct 'Response' heading (failed to build crypto.PrivKey ipfs/ipfs-desktop#2108)
• 0947389 12.3.1
• 5a7a4bd Add note about empty request body (chore: electron 18 ipfs/ipfs-desktop#2098)
• 43b1467 Don't freeze signal when freezing Options (Create Sjenica1 ipfs/ipfs-desktop#2100)
• f21632d Add note about retry behavior in readme
• e032b60 12.3.0
• 88056be Add `.off()` method for events ([gui error report] Error: multiaddr "http://localhost:48084" must start with a "/" ipfs/ipfs-desktop#2092)
• c41a98a Meta tweaks
• 54e00f3 12.2.0
• 6a6d2a9 Support `AbortController` ([gui error report] SyntaxError: Unexpected end of JSON input ipfs/ipfs-desktop#2020)
• 3207061 Fix `ciphers` test
• 461b3d4 Add `enableUnixSockets` option ([gui error report] Error ipfs/ipfs-desktop#2062)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs