• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

1.169.0 (2019-05-29)

Features

• Vulns to use exit code 1, errors 2 (2053048)

The new version differs by 4 commits.

• 4a598a5 Merge pull request #531 from snyk/feat/error-exit-code-1
• 636628f chore: refactor analytics to use const
• 812cada chore: refactor analytics test
• 2053048 feat: Vulns to use exit code 1, errors 2

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

Breaking

• Require Node.js 10 818ff4b

Enhancements

• Show registry URL before publishing (#485) 6bf85df
• Allow publishing if availability check fails (#490) ccdb8a5
• Publish non-private subdirectories when root is private (#483) 607e5c1
• Enforce matching engines on npm install (#481) b14dbc9

Fixes

• Fix checking collaborators when publishing to external registry (#491) 4ad4146

Docs

• Document support for GitHub Packages 91ba1ef

v5.2.1...v6.0.0

The new version differs by 8 commits.

• a44f05d 6.0.0
• 6bf85df Show registry URL before publishing (#485)
• ccdb8a5 Allow publishing if availability check fails (#490)
• 607e5c1 Publish non-private subdirectories when root is private (#483)
• 4ad4146 Fix checking collaborators when publishing to external registry (#491)
• b14dbc9 Enforce matching engines on npm install (#481)
• 91ba1ef Document support for GitHub Packages
• 818ff4b Require Node.js 10

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Vulnerable Library - js-yaml-3.12.1.tgz

YAML 1.2 parser and serializer

path: /tmp/git/ever-cli/node_modules/js-yaml/package.json

Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.1.tgz

Dependency Hierarchy:

• codecov-3.2.0.tgz (Root Library)
  • ❌ js-yaml-3.12.1.tgz (Vulnerable Library)

Found in HEAD commit: 03200c684d10ac8d6fc1680ba593da98badd57ae

Vulnerability Details

Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.

Publish Date: 2019-03-31

URL: WS-2019-0034

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://www.npmjs.com/advisories/788

Release Date: 2019-03-31

Fix Resolution: 3.13.0

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

The new version differs by 2 commits.

• f96d145 Added ANSI Regular and updated README
• a17a0e2 updated

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

Fixed

• Downgrade yn due to node engine (#942)

The new version differs by 3 commits.

• 8ac4be5 8.6.2
• 8db216c Downgrade yn due to node engine (#942)
• b90754e Merge process.env in tests for CI

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ✅ ci/circleci: test: Your tests passed on CircleCI! (Details).
• ❌ WhiteSource Security Check: The Security Check found 1 vulnerabilities.

Severity	CVSS Score	CVE	GitHub Issue
Medium	5.0	WS-2019-0032	#26

The new version differs by 22 commits.

• 3727b22 5.0.0
• e7b9426 Update dependencies
• 3601af5 Fix multiple version bumps when publishing using Yarn (#389)
• fed7766 Fix release draft task
• ce7e550 Add --no-release-draft flag to skip opening a GitHub release draft page (#379)
• 45cea18 Fix version prompt and config (#385)
• 9dac7aa Support setting flags globally and locally using cosmiconfig (#354)
• c7d4cd0 Rollback Git operations when publish fails and on termination (#334)
• a02e169 Drop question Will bump from X to Y. Continue? (#377)
• 3c436cf Rename npm-util.js and improve method naming (#374)
• a880f84 Add tip for releasing an update to an old version (#370)
• 537aa8e Verify installed Yarn version is >=1.7.0 (#360)
• 70fd0c1 Add issue and PR templates (#353)
• e8a3a7d Fix name check for private registries (#356)
• 72ebf7d Add external registry support to authentication check (#365)

There are 22 commits in total.

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

AWS Codebuild fixes + package updates

The new version differs by 10 commits.

• 7856231 v3.6.3
• 96e6d96 Merge pull request #166 from codecov/chore/updates
• c8ea169 update deps
• 7c4cdc4 Merge pull request #149 from aiell0/master
• 62389fa Merge pull request #162 from codecov/dependabot/npm_and_yarn/handlebars-4.5.3
• 73ae008 Add dependabot config
• ccf3862 Update README.md
• 467a495 Bump handlebars from 4.1.2 to 4.5.3
• 8acbe96 Retest
• acd92f4 Test when codebuild isn't triggered by webhooks.

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

⚠ BREAKING CHANGES

• deps: [email protected] no longer implicitly creates arrays out of boolean
  arguments when duplicates are provided

Features

• completion: takes negated flags into account when boolean-negation is set (#1509) (7293ad5)
• deps: pull in [email protected] (#1553) (b9409da)
• deprecateOption (#1559) (8aae333)
• display appropriate $0 for electron apps (#1536) (d0e4379)
• introduces strictCommands() subset of strict mode (#1540) (1d4cca3)
• deps: yargs-parser with 'greedy-array' configuration (#1569) (a03a320)

Bug Fixes

• help always displayed for the first command parsed having an async handler (#1535) (d585b30)
• deps: fix enumeration for normalized path arguments (#1567) (0b5b1b0)
• locales: only translate default option group name (acc16de)
• locales: remove extra space in French for 'default' (#1564) (ecfc2c4)
• translations: add French translation for unknown command (#1563) (18b0b75)
• translations: fix pluralization in error messages. (#1557) (94fa38c)
• yargs: correct support of bundled electron apps (#1554) (a0b61ac)

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

The new version differs by 4 commits.

• d709272 3.0.1
• 692915d funding
• d82bc81 changelog
• 3d4af41 update travis.yml

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

The new version differs by 47 commits.

• 960e1c8 Releasing 0.19.1
• 8a9421d Fixing typo in CHANGELOG.md: s/Functionallity/Functionality (#2639)
• ee47120 If this place is false, it will report an error, so you should delete the useless code. (#2458)
• 03e6f4b Fixing invalid agent issue (#1904)
• dc4bc49 fix: fix ignore set withCredentials false (#2582)
• 13c948e Remove 'includes' API, fix CI build failure (#2574)
• fa6cf01 fixing Travis link (#2540)
• a17c70c Fix CI build failure (#2570)
• 1a32ca0 Remove dependency on is-buffer (#1816)
• 0cc22c2 Fix badge, use master branch (#2538)
• 8414664 Fix XSS logic that matched some valid urls (#2529)
• bbfd5b1 Adding options typings (#2341)
• 55aaebc Document fix (#2514)
• 86d7750 Update docs with no_proxy change, issue #2484 (#2513)
• b0afbed Adding Typescript HTTP method definition for LINK and UNLINK. (#2444)

There are 47 commits in total.

See the full diff

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.

Vulnerable Library - js-yaml-3.12.1.tgz

YAML 1.2 parser and serializer

path: /tmp/git/ever-cli/node_modules/js-yaml/package.json

Library home page: https://registry.npmjs.org/js-yaml/-/js-yaml-3.12.1.tgz

Dependency Hierarchy:

• codecov-3.2.0.tgz (Root Library)
  • ❌ js-yaml-3.12.1.tgz (Vulnerable Library)

Found in HEAD commit: ae3d083bbb1c1f26d3145d808b71a93b8a9946f7

Vulnerability Details

Versions js-yaml prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.

Publish Date: 2019-03-26

URL: WS-2019-0032

CVSS 2 Score Details (5.0)

Base Score Metrics not available

Suggested Fix

Type: Upgrade version

Origin: https://www.npmjs.com/advisories/788/versions

Release Date: 2019-03-26

Fix Resolution: 3.13.0

• ❌ ci/circleci: test: Your tests failed on CircleCI (Details).

There is a collection of frequently asked questions. If those don’t help, you can always ask the humans behind Greenkeeper.