[Snyk] Upgrade cspell from 5.2.4 to 5.3.12 #157

snyk-bot · 2021-05-04T04:35:05Z

Snyk has created this PR to upgrade cspell from 5.2.4 to 5.3.12.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 22 versions ahead of your current version.
The recommended version was released a month ago, on 2021-04-06.

Release notes

Package name: cspell

5.3.12 - 2021-04-06
v5.3.12
5.3.11 - 2021-04-03
v5.3.11
5.3.10 - 2021-04-02
v5.3.10
5.3.9 - 2021-03-19
v5.3.9
5.3.8 - 2021-03-17
v5.3.8
5.3.7 - 2021-03-05
v5.3.7
5.3.7-alpha.3 - 2021-03-05
v5.3.7-alpha.3
5.3.7-alpha.2 - 2021-03-05
v5.3.7-alpha.2
5.3.7-alpha.1 - 2021-03-05
v5.3.7-alpha.1
5.3.7-alpha.0 - 2021-03-05
v5.3.7-alpha.0
5.3.6 - 2021-03-05
5.3.5 - 2021-03-05
5.3.4 - 2021-03-01
5.3.3 - 2021-02-26
5.3.2 - 2021-02-26
5.3.1 - 2021-02-25
5.3.0 - 2021-02-25
5.3.0-alpha.4 - 2021-02-25
5.3.0-alpha.3 - 2021-02-23
5.3.0-alpha.2 - 2021-02-22
5.3.0-alpha.1 - 2021-02-19
5.3.0-alpha.0 - 2021-02-18
5.2.4 - 2021-01-28

from cspell GitHub release notes

Commit messages

Package name: cspell

84fd087 v5.3.12
64eba51 fix: Update dictionaries (Covariant Wrapping Types graphql/graphql-js#1136)
267d6bc ci: Workflow Bot -- Update ALL Dependencies (Move schema validation into separate step (type constructors) graphql/graphql-js#1132)
4b31d9e build(deps-dev): bump ts-json-schema-generator from 0.89.1 to 0.89.2 (Fix unhandled error when parsing custom scalar literals. graphql/graphql-js#1126)
49426d6 ci: Workflow Bot -- Update ALL Dependencies (Validate schema root types and directives graphql/graphql-js#1124)
09c3538 ci: Workflow Bot -- Update ALL Dependencies (Read-only AST types graphql/graphql-js#1121)
7609af7 v5.3.11
a1ac45b ci: Workflow Bot -- Update ALL Dependencies (Test that introspection results are always sync. graphql/graphql-js#1120)
c191fc5 fix: Fix command line exclusions (Bad Performance compared to Promise.all([...fetchPromises]) graphql/graphql-js#1119)
d0e3db5 ci: Workflow Bot -- Update ALL Dependencies (Export GraphQLArgs graphql/graphql-js#1118)
316b490 v5.3.10
25c501d fix: file globs listed on the command line override files in the config. (SDL Spec changes graphql/graphql-js#1117)
77ae68a fix: issue GraphQLSchema => IntrospectionSchema utility graphql/graphql-js#1114 (Flow: Readonly errors graphql/graphql-js#1116)
df108a3 ci: Workflow Bot -- Update ALL Dependencies (Prettier graphql/graphql-js#1112)
3c6a3f0 build(deps-dev): bump ajv-cli from 4.2.0 to 5.0.0 (Fix infinite loop on invalid queries in OverlappingFields graphql/graphql-js#1111)
055b2c9 build(deps-dev): bump @ types/configstore from 4.0.0 to 5.0.0 (GraphQL without GraphQL syntax graphql/graphql-js#1099)
30e9ba1 ci: Workflow Bot -- Update ALL Dependencies (how can I import .graphql file directly in react native? graphql/graphql-js#1109)
801ab51 ci: Workflow Bot -- Update ALL Dependencies (How to update complex field values graphql/graphql-js#1097)
a9f2733 ci: Workflow Bot -- Update ALL Dependencies (Uniform parsing of queries with short-hand syntax with regular queries graphql/graphql-js#1094)
d2dfce2 ci: support listing dirty integrations (extendSchema breaks resolution of fragments on interfaces / unions graphql/graphql-js#1093)
2c1ced1 ci: Workflow Bot -- Update ALL Dependencies (More strict typing for Introspection Schema types graphql/graphql-js#1082)
7c31f4d testing: reset the mock between tests (Empty selections work with printer, but throw a parser error graphql/graphql-js#1092)
713ea3f ci: Improve updating Repo Commits (fix elasticsearch errors being mistaken for graphql errors graphql/graphql-js#1090)
83867ed ci: Workflow Bot -- Update ALL Dependencies (Split schema validation from instantiation graphql/graphql-js#1080)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade cspell from 5.2.4 to 5.3.12. See this package in npm: https://www.npmjs.com/package/cspell See this project in Snyk: https://app.snyk.io/org/kadirselcuk/project/6730b42f-524a-403c-94d6-f57fc4dd81ac?utm_source=github&utm_medium=upgrade-pr

mistaken-pull-closer · 2021-05-04T04:35:10Z

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

pull-dog · 2021-05-04T04:35:11Z

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

@pull-dog up to reprovision or provision the server.
@pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
1996fba0-ac92-11eb-85cf-c6801b4ecefc

guardrails · 2021-05-04T04:50:33Z

⚠️ We detected 571 security issues in this pull request:

Mode: paranoid | Total findings: 571 | Considered vulnerability: 1

Hard-Coded Secrets (542)

Docs

Details

💡

Title: Hard-coded Secrets

[Snyk] Upgrade cspell from 5.2.4 to 5.3.12 #157

[Snyk] Upgrade cspell from 5.2.4 to 5.3.12 #157

Uh oh!

Conversation

snyk-bot commented May 4, 2021

Snyk has created this PR to upgrade cspell from 5.2.4 to 5.3.12.

Uh oh!

mistaken-pull-closer bot commented May 4, 2021

Uh oh!

pull-dog bot commented May 4, 2021

Uh oh!

guardrails bot commented May 4, 2021

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants