Skip to content

Conversation

@snyk-bot
Copy link

Snyk has created this PR to upgrade puppeteer from 5.2.1 to 5.5.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released 9 months ago, on 2020-11-16.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Remote Memory Exposure
SNYK-JS-BL-608877
492/1000
Why? Proof of Concept exploit, CVSS 7.7
Proof of Concept
Regular Expression Denial of Service (ReDoS)
SNYK-JS-WS-1296835
492/1000
Why? Proof of Concept exploit, CVSS 7.7
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: puppeteer
  • 5.5.0 - 2020-11-16

    v5.5.0 (2020-11-16)

    Features

    Bug Fixes

    • common: fix generic type of _isClosedPromise (#6579) (122f074)
    • domworld: fix missing binding for waittasks (#6562) (67da1cf)
  • 5.4.1 - 2020-10-27

    Bug fixes

    • Fixed an issue in 5.4.0 on Node.js v10.17.0 and below where trying to access fs.promises would throw an error. See #6548 for the bug report and #6550 for the fix. We now run a CI build on Node 10.15 to ensure we don't cause similar regressions in the future.

    Raw notes

    520cd90 - chore: mark version 5.4.1
    8f4a79e - docs(troubleshooting): update Alpine Chromium version (#6529)
    e45acce - chore: run unit tests on node 10.15 + fix fs.promises access (#6550)
    a2175c6 - docs(queryhandler): fix link (#6543)
    d787865 - chore: bump version to v5.4.0-post (#6544)

  • 5.4.0 - 2020-10-23
    Read more
  • 5.3.1 - 2020-09-22

    Highlights

    • New API: page.emulateIdleState(...) (#6410)

    Raw notes

    c7d32cb - chore: mark version v5.3.1 (#6439)
    8f3171a - feat(permissions): Add idle-detection permission (#6438)
    083ea41 - test(frame): correct terminology in URL fragment test (#6416)
    bb1c521 - chore: remove mime dependency (#6415)
    17960e5 - feat(page): emulate idle state (#6410)
    03e41da - chore: bump version to v5.3.0-post (#6413)

  • 5.3.0 - 2020-09-11
    Read more
  • 5.2.1 - 2020-07-21

    Highlights

    • Chromium 85.0.4182.0 (r782078)
    • We now allow configuring the browser debug logging behavior via globalThis.__PUPPETEER_DEBUG (#6210)

    Raw notes

    4ee4649 - chore: mark v5.2.1 (#6254)
    e89e264 - feat(chromium): roll Chromium to r782078 (#6250)
    b2f6918 - fix: configure debug logging in browser (#6210)
    040f37e - docs: fix link text (#6245)
    9fdf2ba - chore(docs): migrate page.pdf() docs (#6228)
    2331584 - docs(troubleshooting): install libXss in Dockerfile (#6236)
    042c4a2 - chore: mark 5.2.0-post (#6240)

from puppeteer GitHub release notes
Commit messages
Package name: puppeteer
  • 18143b3 chore(release): mark v5.5.0 (#6604)
  • d8932ca chore: shorter node checker function (#6584)
  • d606b80 docs(troubleshooting): update dumb-init version (#6585)
  • 8690a77 chore: remove redundant npm script for dependency-graph (#6583)
  • 8c98315 chore: clarify node_js versions in Travis config (#6570)
  • 6d4f0a3 docs(contributing): remove npm dist tags requirement (#6571)
  • 122f074 fix(common): fix generic type of `_isClosedPromise` (#6579)
  • 67da1cf fix(domworld): fix missing binding for waittasks (#6562)
  • 659193a chore: mark launcher spec as failing on Windows (#6574)
  • 3bb417b chore: fix typo in test (#6566)
  • f8cd6c4 chore: automate Chromium => Puppeteer version listing (#6558)
  • 8bc8a76 docs(api): expand registerCustomQueryHandler example (#6557)
  • a0d8a27 chore: automate versioning + changelog (#6556)
  • b549256 feat(chromium): roll Chromium to r818858 (#6526)
  • d3d7cb9 chore: mark v5.4.1-post (#6553)
  • 562c9c2 chore: mark version 5.4.1 (#6552)
  • 8f4a79e docs(troubleshooting): update Alpine Chromium version (#6529)
  • e45acce chore: run unit tests on node 10.15 + fix fs.promises access (#6550)
  • a2175c6 docs(queryhandler): fix link (#6543)
  • d787865 chore: bump version to v5.4.0-post (#6544)
  • 729cdfe chore: mark version v5.4.0 (#6542)
  • 8e9970d chore: automate publishing on new Git tags (#6536)
  • 5e5fed1 fix: ignore spurious bindingCalled events (#6538)
  • e6b8c77 chore: fix travis config (#6537)

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

pull bot pushed a commit that referenced this pull request Sep 24, 2021
This avoids the scenario where:

1. The user runs busytown/androidx.sh
2. Gradle builds aar files for group1
3. Gradle builds a .zip file of group1
4. Gradle builds aar files for group2
5. Gradle builds a .zip file of group2
6. busytown/androidx.sh runs Gradle again to confirm that all tasks are UP-TO-DATE
7. Gradle checks whether the .zip of group1 is UP-TO-DATE
8. Gradle finds that because more aar files have been created (#4) since the .zip of group1 was last built (#3), the task must be rerun
9. The build fails because when running the build twice in a row, a task was not UP-TO-DATE

Bug: 200574943
Test: Treehugger runs busytown/androidx.sh

Change-Id: I6c8c4e83dfb251e506d91412cb905a7ef372ab11
pull bot pushed a commit that referenced this pull request Feb 14, 2022
One more try, now handling osx proto binaries.

Test: ./gradlew bOS --dry-run
Change-Id: Ia6f4f7f72b68a38b3e0d9e93e3988e24632eb6e6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants