Skip to content

[Snyk] Upgrade typeorm from 0.2.24 to 0.2.42 - #2

Open
snyk-bot wants to merge 1 commit into
masterfrom
snyk-upgrade-c323280a7f9aad3f7a4f59a852c2763f
Open

[Snyk] Upgrade typeorm from 0.2.24 to 0.2.42#2
snyk-bot wants to merge 1 commit into
masterfrom
snyk-upgrade-c323280a7f9aad3f7a4f59a852c2763f

Conversation

@snyk-bot

Copy link
Copy Markdown

Snyk has created this PR to upgrade typeorm from 0.2.24 to 0.2.42.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 149 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2022-02-16.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Prototype Pollution
SNYK-JS-TYPEORM-590152
801/1000
Why? Mature exploit, Has a fix available, CVSS 8.3
Mature
Regular Expression Denial of Service (ReDoS)
SNYK-JS-HIGHLIGHTJS-1048676
801/1000
Why? Mature exploit, Has a fix available, CVSS 8.3
No Known Exploit
Prototype Pollution
SNYK-JS-HIGHLIGHTJS-1045326
801/1000
Why? Mature exploit, Has a fix available, CVSS 8.3
No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: typeorm
  • 0.2.42 - 2022-02-16

    0.2.42 (2022-02-16)

    Bug Fixes

    • proper column comment mapping from database to metadata in aurora-data-api (baa5880)
    • add referencedSchema to PostgresQueryRunner (#8566) (c490319)
    • adding/removing @ generated() will now generate a migration to add/remove the DEFAULT value (#8274) (4208393), closes #5898
    • adds entity-schema support for createForeignKeyConstraints (#8606) (f224f24), closes #8489
    • allow special keyword as column name for simple-enum type on sqlite (#8645) (93bf96e)
    • correctly handle multiple-row insert for SAP HANA driver (#7957) (8f2ae71)
    • disable SQLite FK checks in synchronize / migrations (#7922) (f24822e)
    • find descendants of a non-existing tree parent (#8557) (cbb61eb), closes #8556
    • For MS SQL Server use lowercase "sys"."columns" reference. (#8400) (#8401) (e8a0f92)
    • improve DeepPartial type (#8187) (b93416d)
    • Lock peer dependencies versions (#8597) (600bd4e)
    • make EntityMetadataValidator comply with entitySkipConstructor, cover with test (#8445) (3d6c5da), closes #8444
    • materialized path being computed as "undefined1." (#8526) (09f54e0)
    • MongoConnectionOptions sslCA type mismatch (#8628) (02400da)
    • mongodb repository.find filters soft deleted rows (#8581) (f7c1f7d), closes #7113
    • mongodb@4 compatibility support (#8412) (531013b)
    • must invoke key pragma before any other interaction if SEE setted (#8478) (546b3ed), closes #8475
    • nested eager relations in a lazy-loaded entity are not loaded (#8564) (1cfd7b9)
    • QueryFailedError when tree entity with JoinColumn (#8443) (#8447) (a11c50d)
    • relation id and afterAll hook performance fixes (#8169) (31f0b55)
    • replaced custom uuid generator with uuid library (#8642) (8898a71)
    • single table inheritance returns the same discriminator value error for unrelated tables where their parents extend from the same entity (#8525) (6523fcc), closes #8522
    • updating with only update: false columns shouldn't trigger @ UpdateDateColumn column updation (2834729), closes #8394 #8394 #8394
    • upsert should find unique index created by one-to-one relation (#8618) (c8c00ba)

    Features

    Reverts

    • migration:show command must exist with zero status code (Fixes #7349) (#8185) (e0adeee)

    BREAKING CHANGES

    • update listeners and subscriber no longer triggered by soft-remove and recover
  • 0.2.42-dev.f8154eb - 2022-01-31
  • 0.2.42-dev.f7c1f7d - 2022-02-15
  • 0.2.42-dev.f3e2b0e - 2021-11-23
  • 0.2.42-dev.f224f24 - 2022-02-12
  • 0.2.42-dev.ece0da0 - 2022-01-31
  • 0.2.42-dev.e52b26c - 2021-12-11
  • 0.2.42-dev.e0adeee - 2022-02-15
  • 0.2.42-dev.d6043b7 - 2022-02-14
  • 0.2.42-dev.d10484e - 2022-01-31
  • 0.2.42-dev.d0f32b3 - 2022-02-16
  • 0.2.42-dev.cefddd9 - 2021-12-11
  • 0.2.42-dev.ce69228 - 2022-01-15
  • 0.2.42-dev.cbb61eb - 2022-01-31
  • 0.2.42-dev.bd22dc3 - 2021-12-10
  • 0.2.42-dev.baa5880 - 2022-02-15
  • 0.2.42-dev.b93416d - 2022-02-16
  • 0.2.42-dev.a855b90 - 2022-01-15
  • 0.2.42-dev.a11c50d - 2022-02-15
  • 0.2.42-dev.a0f09de - 2021-11-23
  • 0.2.42-dev.9e844d9 - 2022-02-16
  • 0.2.42-dev.93bf96e - 2022-02-16
  • 0.2.42-dev.93383bd - 2022-02-15
  • 0.2.42-dev.92c3e79 - 2022-02-12
  • 0.2.42-dev.90a8deb - 2021-12-11
  • 0.2.42-dev.8f2ae71 - 2022-02-16
  • 0.2.42-dev.8898a71 - 2022-02-15
  • 0.2.42-dev.6523fcc - 2022-01-15
  • 0.2.42-dev.6316e26 - 2022-02-12
  • 0.2.42-dev.600bd4e - 2022-02-15
  • 0.2.42-dev.54cf660 - 2021-12-06
  • 0.2.42-dev.4a7f242 - 2022-01-31
  • 0.2.42-dev.2bf93d4 - 2021-12-10
  • 0.2.42-dev.26815c6 - 2022-01-31
  • 0.2.42-dev.26581d0 - 2022-01-15
  • 0.2.42-dev.1cfd7b9 - 2022-01-31
  • 0.2.42-dev.1446e02 - 2022-02-01
  • 0.2.42-dev.0626ed1 - 2021-12-10
  • 0.2.42-dev.02400da - 2022-02-14
  • 0.2.42-dev.3286519 - 2021-11-18
  • 0.2.42-dev.3284808 - 2022-02-12
  • 0.2.42-dev.2834729 - 2021-12-11
  • 0.2.41 - 2021-11-18

    Bug Fixes

    • add retryWrites to MongoConnectionOptions (#8354) (c895680), closes #7869
    • create typeorm_metadata table when running migrations (#4956) (b2c8168)
    • db caching won't work with replication enabled (#7694) (2d0abe7), closes #5919
    • incorrect composite UNIQUE constraints detection (#8364) (29cb891), closes #8158
    • Postgres enum generates unnecessary queries on schema sync (#8268) (98d5f39)
    • resolve issue delete column null on after update event subscriber (#8318) (8a5e671), closes #6327

    Features

  • 0.2.41-dev.d494fcc - 2021-11-18
  • 0.2.41-dev.c895680 - 2021-11-13
  • 0.2.41-dev.c59ef29 - 2021-11-17
  • 0.2.41-dev.b2c8168 - 2021-11-14
  • 0.2.41-dev.98d5f39 - 2021-11-13
  • 0.2.41-dev.91080be - 2021-11-14
  • 0.2.41-dev.8a5e671 - 2021-11-18
  • 0.2.41-dev.7b8a1e3 - 2021-11-18
  • 0.2.41-dev.4e7d32f - 2021-11-17
  • 0.2.41-dev.32bf6c0 - 2021-11-17
  • 0.2.41-dev.2d0abe7 - 2021-11-16
  • 0.2.41-dev.29cb891 - 2021-11-14
  • 0.2.41-dev.1f558b1 - 2021-11-11
  • 0.2.41-dev.15ad5ac - 2021-11-17
  • 0.2.40 - 2021-11-11

    Bug Fixes

    • BaseEntity finder methods to properly type-check lazy relations conditions (#5710) (0665ff5)

    Features

    • add depth limiter optional parameter when loading nested trees using TreeRepository's findTrees() and findDescendantsTree() (#7926) (0c44629), closes #3909
    • add upsert methods for the drivers that support onUpdate (#8104) (3f98197), closes #2363
    • Postgres IDENTITY Column support (#7741) (969af95)

    Reverts

  • 0.2.40-dev.e80f97d - 2021-11-11
  • 0.2.40-dev.d039319 - 2021-11-10
  • 0.2.40-dev.ae858ad - 2021-11-09
  • 0.2.40-dev.a92120a - 2021-11-10
  • 0.2.40-dev.969af95 - 2021-11-09
  • 0.2.40-dev.41ee95c - 2021-11-09
  • 0.2.40-dev.3f98197 - 2021-11-09
  • 0.2.40-dev.1588c58 - 2021-11-09
  • 0.2.40-dev.0cc8fbb - 2021-11-10
  • 0.2.40-dev.0334d10 - 2021-11-11
  • 0.2.39 - 2021-11-09
    Read more
  • 0.2.39-dev.f79ae58 - 2021-11-09
  • 0.2.39-dev.ef33cf4 - 2021-10-28
  • 0.2.39-dev.e4d4636 - 2021-11-08
  • 0.2.39-dev.dd94c9d - 2021-10-04
  • 0.2.39-dev.d8c5812 - 2021-10-03
  • 0.2.39-dev.d7d19e9 - 2021-10-02
  • 0.2.39-dev.cf281ef - 2021-10-22
  • 0.2.39-dev.bc55836 - 2021-10-28
  • 0.2.39-dev.b6c828c - 2021-10-18
  • 0.2.39-dev.b678807 - 2021-10-02
  • 0.2.39-dev.6929ae3 - 2021-11-06
  • 0.2.39-dev.503d1dc - 2021-10-20
  • 0.2.39-dev.4ad3a61 - 2021-10-21
  • 0.2.39-dev.4aaafdf - 2021-11-09
  • 0.2.39-dev.4638dea - 2021-11-04
  • 0.2.39-dev.2c861af - 2021-10-26
  • 0.2.39-dev.28c183e - 2021-11-04
  • 0.2.39-dev.25271d7 - 2021-11-02
  • 0.2.39-dev.2133ffe - 2021-10-22
  • 0.2.39-dev.179ae75 - 2021-10-26
  • 0.2.39-dev.1197f88 - 2021-10-29
  • 0.2.39-dev.0bc194c - 2021-10-03
  • 0.2.39-dev.0adad88 - 2021-10-27
  • 0.2.39-dev.9692930 - 2021-11-08
  • 0.2.39-dev.8615733 - 2021-10-06
  • 0.2.39-dev.6558295 - 2021-11-05
  • 0.2.39-dev.1649882 - 2021-11-05
  • 0.2.38 - 2021-10-02
    Read more
  • 0.2.38-dev.e9366b3 - 2021-08-18
  • 0.2.38-dev.d8f6037 - 2021-10-02
  • 0.2.38-dev.d4111ce - 2021-10-02
  • 0.2.38-dev.b858f84 - 2021-08-17
  • 0.2.38-dev.a868078 - 2021-08-28
  • 0.2.38-dev.749511d - 2021-08-25
  • 0.2.38-dev.324f1d8 - 2021-10-02
  • 0.2.38-dev.22676a0 - 2021-08-24
  • 0.2.38-dev.02f0bce - 2021-08-13
  • 0.2.37 - 2021-08-13
    Read more
  • 0.2.37-dev.fe78bee - 2021-08-08
  • 0.2.37-dev.fbd1ef7 - 2021-08-11
  • 0.2.37-dev.fbbac93 - 2021-08-03
  • 0.2.37-dev.f7eb46d - 2021-07-31
  • 0.2.37-dev.f0e40f6 - 2021-08-06
  • 0.2.37-dev.cd71f62 - 2021-07-31
  • 0.2.37-dev.ca26297 - 2021-08-04
  • 0.2.37-dev.ba366f2 - 2021-08-08
  • 0.2.37-dev.ab39066 - 2021-08-06
  • 0.2.37-dev.a5e4ce7 - 2021-08-05
  • 0.2.37-dev.a3a3284 - 2021-08-10
  • 0.2.37-dev.91d5b2f - 2021-07-31
  • 0.2.37-dev.80cdf8f - 2021-08-11
  • 0.2.37-dev.768b4fe - 2021-08-05
  • 0.2.37-dev.69fabaf - 2021-07-31
  • 0.2.37-dev.65cbcc7 - 2021-08-10
  • 0.2.37-dev.5a3767f - 2021-08-08
  • 0.2.37-dev.5714e8d - 2021-08-11
  • 0.2.37-dev.37c40a6 - 2021-08-11
  • 0.2.37-dev.37bd012 - 2021-08-04
  • 0.2.37-dev.36398db - 2021-08-12
  • 0.2.37-dev.2344db6 - 2021-08-04
  • 0.2.37-dev.01a038c - 2021-08-13
  • 0.2.37-dev.4201938 - 2021-08-05
  • 0.2.36 - 2021-07-31
    Read more
  • 0.2.36-dev.d365acc - 2021-07-30
  • 0.2.36-dev.b797781 - 2021-07-30
  • 0.2.36-dev.76e7ed94 - 2021-07-30
  • 0.2.36-dev.62d7976 - 2021-07-31
  • 0.2.36-dev.0d90bcd - 2021-07-30
  • 0.2.35 - 2021-07-29
  • 0.2.35-rc.0 - 2021-07-28
  • 0.2.34 - 2021-06-03
  • 0.2.33 - 2021-06-01
  • 0.2.32 - 2021-03-30
  • 0.2.31 - 2021-02-08
  • 0.2.30 - 2021-01-12
  • 0.2.29 - 2020-11-02
  • 0.2.28 - 2020-09-30
  • 0.2.27 - 2020-09-29
  • 0.2.26 - 2020-09-10
  • 0.2.25 - 2020-05-19
  • 0.2.24 - 2020-02-28
from typeorm GitHub release notes

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant