[Snyk] Upgrade uglify-js from 3.1.9 to 3.17.4 #1

tcotidiane33 · 2024-03-29T02:25:31Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade uglify-js from 3.1.9 to 3.17.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 138 versions ahead of your current version.
The recommended version was released a year ago, on 2022-10-23.

The recommended version fixes:

Issue	PriorityScore (*)	Exploit Maturity
Uninitialized Memory Exposure npm:stringstream:20180511	646/1000 Why? Mature exploit, Has a fix available, CVSS 5.2	Mature
Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	646/1000 Why? Mature exploit, Has a fix available, CVSS 5.2	Proof of Concept
Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	646/1000 Why? Mature exploit, Has a fix available, CVSS 5.2	No Known Exploit
Prototype Pollution SNYK-JS-MINIMIST-559764	646/1000 Why? Mature exploit, Has a fix available, CVSS 5.2	Proof of Concept
Prototype Pollution SNYK-JS-MINIMIST-2429795	646/1000 Why? Mature exploit, Has a fix available, CVSS 5.2	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: uglify-js

3.17.4 - 2022-10-23
Features
- simplify chained boolean & string expressions (a391897, ed7051b)
Bug Fixes
- async generator function (5411360)
- compound assignment operator (19c471c)
- generator function (7edd10e)
- immediately invoked function expression (8319bad)
- logical operator (5a5200d)
- rest parameter (bccb1c3)
- unary arithmetic operator (19c471c)
3.17.3 - 2022-10-05
Features
- improve heuristics for mangle.properties (3fa2086)
- enable domprops to be used under minify() (bd5fc4c)
- improve compression of boolean & conditional expressions (80fc862, dabcc39, 58d997a)
Bug Fixes
- async generator function (8e65413, a570c00)
- class field (e1e3516)
- for await...of loop (140e4e0)
- lexical declaration (be8ccc3)
- switch statement (6cdc035)
3.17.2 - 2022-09-25
Bug Fixes
- assignment operator (9efa02a, 63b04a6)
- if statement (9ac3879)
- return statement (37d3e4f)
- ternary expression (43ec350)
3.17.1 - 2022-09-19
Features
- improve precision of escape analysis (d6d2f5c, 10bc86b)
- improve usability of --mangle-props (9eea3a6, 4653e8a, 5ac6ec5)
- extend glob patterns for --in-situ (535212c)
- support Adobe ExtendScipt on best-effort basis (32bd65a)
- inline immediately invoked arrow function expressions (9dec612)
- improve elimination of lexical declarations (edf1bf1)
Bug Fixes
- arguments object (5b5f6e3)
- arrow function (02d966d)
- assignment operator (1d42e9a)
- async function (15b608f)
- class method (001f6f9)
- compound assignment operator (f63b7b0)
- destructuring syntax (eb22f01)
- export statement (9cdc1ef)
- lexical declaration (88dfc49, e0b302d)
- logical operator (78f354b)
- return statement (887e086)
- ternary expression (78f354b, e4bff31)
- throw statement (4e4a2f8)
- unary arithmetic operator (ac002b6, f63b7b0)
- var statement (887e086, 4db8106)
3.17.0 - 2022-08-16
Features
- merge common tail of if statements (996836b)
- eliminate superfluous Object() wrappers (db6fd6d)
- improve elimination of return statements (08c386f, ab5c7e6, 6667440, e39f33e, 64e3cee, 8076d66, 884842c, a9d9af5)
- improve compression of ternary expressions (672cdfa)
- exclude latest ECMAScript runtime properties from builtin mangling (8a07f12)
- introduce --expression for ease of handling bookmarklets or JSON expressions (f451a7a)
- improve resolution and accuracy of source-maps (2c3c4ec)
- inline function calls with simple assignments (5a4cd09)
Bug Fixes
- async generator function (da930af)
- class property (41b65af, dd90135)
- class static block (41b65af)
- default parameter (c32fe26)
- destructuring syntax (c32fe26)
- function literal (513995f)
- lexical declaration (937a672)
3.16.3 - 2022-07-24
Read more
3.16.2 - 2022-07-04
Read more
3.16.1 - 2022-06-17
Read more
3.16.0 - 2022-06-06
Read more
3.15.5 - 2022-05-10
Read more
3.15.4 - 2022-04-09
3.15.3 - 2022-03-10
3.15.2 - 2022-02-26
3.15.1 - 2022-02-07
3.15.0 - 2022-01-25
3.14.5 - 2021-12-13
3.14.4 - 2021-11-30
3.14.3 - 2021-11-01
3.14.2 - 2021-09-07
3.14.1 - 2021-07-27
3.14.0 - 2021-07-22
3.13.10 - 2021-06-27
3.13.9 - 2021-06-04
3.13.8 - 2021-05-26
3.13.7 - 2021-05-18
3.13.6 - 2021-05-10
3.13.5 - 2021-04-29
3.13.4 - 2021-04-12
3.13.3 - 2021-03-28
3.13.2 - 2021-03-21
3.13.1 - 2021-03-12
3.13.0 - 2021-03-01
3.12.8 - 2021-02-13
3.12.7 - 2021-02-06
3.12.6 - 2021-01-31
3.12.5 - 2021-01-19
3.12.4 - 2021-01-01
3.12.3 - 2020-12-22
3.12.2 - 2020-12-16
3.12.1 - 2020-11-30
3.12.0 - 2020-11-22
3.11.6 - 2020-11-14
3.11.5 - 2020-11-03
3.11.4 - 2020-10-26
3.11.3 - 2020-10-19
3.11.2 - 2020-10-11
3.11.1 - 2020-10-04
3.11.0 - 2020-09-27
3.10.4 - 2020-09-06
3.10.3 - 2020-08-30
3.10.2 - 2020-08-23
3.10.1 - 2020-08-02
3.10.0 - 2020-06-21
3.9.4 - 2020-05-27
3.9.3 - 2020-05-13
3.9.2 - 2020-05-03
3.9.1 - 2020-04-15
3.9.0 - 2020-04-13
3.8.1 - 2020-03-28
3.8.0 - 2020-02-18
3.7.7 - 2020-02-03
3.7.6 - 2020-01-21
3.7.5 - 2020-01-12
3.7.4 - 2020-01-07
3.7.3 - 2019-12-27
3.7.2 - 2019-12-08
3.7.1 - 2019-11-30
3.7.0 - 2019-11-25
3.6.9 - 2019-11-12
3.6.8 - 2019-11-06
3.6.7 - 2019-11-02
3.6.6 - 2019-11-01
3.6.5 - 2019-10-29
3.6.4 - 2019-10-23
3.6.3 - 2019-10-19
3.6.2 - 2019-10-15
3.6.1 - 2019-10-08
3.6.0 - 2019-05-30
3.5.15 - 2019-05-21
3.5.14 - 2019-05-20
3.5.13 - 2019-05-17
3.5.12 - 2019-05-12
3.5.11 - 2019-05-06
3.5.10 - 2019-05-01
3.5.9 - 2019-04-27
3.5.8 - 2019-04-25
3.5.7 - 2019-04-24
3.5.6 - 2019-04-21
3.5.5 - 2019-04-19
3.5.4 - 2019-04-10
3.5.3 - 2019-04-01
3.5.2 - 2019-03-23
3.5.1 - 2019-03-21
3.5.0 - 2019-03-20
3.4.10 - 2019-03-15
3.4.9 - 2018-08-31
3.4.8 - 2018-08-23
3.4.7 - 2018-08-09
3.4.6 - 2018-07-27
3.4.5 - 2018-07-17
3.4.4 - 2018-07-09
3.4.3 - 2018-07-03
3.4.2 - 2018-06-25
3.4.1 - 2018-06-19
3.4.0 - 2018-06-02
3.3.28 - 2018-05-29
3.3.27 - 2018-05-22
3.3.26 - 2018-05-20
3.3.25 - 2018-05-13
3.3.24 - 2018-05-07
3.3.23 - 2018-04-28
3.3.22 - 2018-04-21
3.3.21 - 2018-04-12
3.3.20 - 2018-04-07
3.3.19 - 2018-04-07
3.3.18 - 2018-04-02
3.3.17 - 2018-03-31
3.3.16 - 2018-03-19
3.3.15 - 2018-03-14
3.3.14 - 2018-03-10
3.3.13 - 2018-03-04
3.3.12 - 2018-02-22
3.3.11 - 2018-02-15
3.3.10 - 2018-02-08
3.3.9 - 2018-01-27
3.3.8 - 2018-01-21
3.3.7 - 2018-01-14
3.3.6 - 2018-01-13
3.3.5 - 2018-01-07
3.3.4 - 2017-12-30
3.3.3 - 2017-12-28
3.3.2 - 2017-12-25
3.3.1 - 2017-12-24
3.3.0 - 2017-12-24
3.2.2 - 2017-12-10
3.2.1 - 2017-12-03
3.2.0 - 2017-11-25
3.1.10 - 2017-11-19
3.1.9 - 2017-11-11

from uglify-js GitHub release notes

Commit messages

Package name: uglify-js

fb1bff2 v3.17.4
19c471c fix corner cases in `reduce_vars` (#5717)
8319bad fix corner case in `merge_vars` (#5715)
5a5200d fix corner case in `conditionals` (#5713)
5411360 fix corner case in `if_return` (#5711)
7edd10e fix corner case in `unused` (#5708)
bccb1c3 fix corner case in `unused` (#5706)
ed7051b enhance `side_effects` & `strings` (#5704)
a391897 enhance `conditionals` (#5703)
4a1da49 v3.17.3
94a954c minor clean-ups (#5701)
be8ccc3 fix corner case in `varify` (#5698)
58d997a fix corner case in `booleans` & `conditionals` (#5696)
dabcc39 fix corner cases in `booleans` & `conditionals` (#5695)
140e4e0 fix corner case in `inline` (#5693)
80fc862 enhance `assignments`, `booleans` & `conditionals` (#5691)
6cdc035 fix corner case in `if_return` (#5689)
e1e3516 fix corner case in `reduce_vars` (#5687)
bd5fc4c implement `mangle.properties.domprops` (#5686)
a570c00 fix corner case in `conditionals` & `if_return` (#5685)
3fa2086 improve usability of `mangle.properties` (#5683)
8e65413 fix corner cases in `conditionals` & `if_return` (#5680)
8ca4007 workaround GitHub Actions quirks (#5678)
f9b811c v3.17.2

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade uglify-js from 3.1.9 to 3.17.4. See this package in npm: https://www.npmjs.com/package/uglify-js See this project in Snyk: https://app.snyk.io/org/tcotidiane33/project/0ccd99bd-950b-418c-ae9d-caab4afdfb9b?utm_source=github&utm_medium=referral&page=upgrade-pr

tcotidiane33 mentioned this pull request May 23, 2024

[Snyk] Security upgrade nw-builder from 3.5.1 to 3.5.6 #10

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade uglify-js from 3.1.9 to 3.17.4 #1

[Snyk] Upgrade uglify-js from 3.1.9 to 3.17.4 #1

tcotidiane33 commented Mar 29, 2024

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

[Snyk] Upgrade uglify-js from 3.1.9 to 3.17.4 #1

Are you sure you want to change the base?

[Snyk] Upgrade uglify-js from 3.1.9 to 3.17.4 #1

Conversation

tcotidiane33 commented Mar 29, 2024

Snyk has created this PR to upgrade uglify-js from 3.1.9 to 3.17.4.

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes