Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(dependency maintenance): update dependency passport to v0.6.0 [security] #787

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jul 7, 2022

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
passport (source) 0.5.3 -> 0.6.0 age adoption passing confidence

GitHub Vulnerability Alerts

CVE-2022-25896

This affects the package passport before 0.6.0. When a user logs in or logs out, the session is regenerated instead of being closed.


Release Notes

jaredhanson/passport (passport)

v0.6.0

Compare Source

Added
  • authenticate(), req#login, and req#logout accept a
    keepSessionInfo: true option to keep session information after regenerating
    the session.
Changed
  • req#login() and req#logout() regenerate the the session and clear session
    information by default.
  • req#logout() is now an asynchronous function and requires a callback
    function as the last argument.
Security
  • Improved robustness against session fixation attacks in cases where there is
    physical access to the same system or the application is susceptible to
    cross-site scripting (XSS).

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Jul 7, 2022

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: @nestjs/passport@8.2.1
npm ERR! Found: passport@0.6.0
npm ERR! node_modules/passport
npm ERR!   passport@"0.6.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer passport@"^0.4.0 || ^0.5.0" from @nestjs/passport@8.2.1
npm ERR! node_modules/@nestjs/passport
npm ERR!   @nestjs/passport@"8.2.1" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: passport@0.5.3
npm ERR! node_modules/passport
npm ERR!   peer passport@"^0.4.0 || ^0.5.0" from @nestjs/passport@8.2.1
npm ERR!   node_modules/@nestjs/passport
npm ERR!     @nestjs/passport@"8.2.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-04-10T11_09_02_936Z-debug-0.log

@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from 922b40e to 94bce2f Compare August 17, 2022 08:33
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from 03accaf to 49dd3f7 Compare September 8, 2022 08:50
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from c14e0a7 to b78010d Compare November 3, 2022 16:25
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch from b78010d to 18f78ac Compare November 14, 2022 15:16
@renovate renovate bot changed the title chore(dependency maintenance): update dependency passport to 0.6.0 [security] fix(dependency maintenance): update dependency passport to v0.6.0 [security] Mar 23, 2023
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 3 times, most recently from fb83e03 to 924171a Compare February 26, 2024 10:55
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from e56bda4 to 93a0981 Compare March 28, 2024 06:28
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 12 times, most recently from 813fb79 to f7bcf5a Compare April 10, 2024 11:09
Copy link
Contributor Author

renovate bot commented May 21, 2024

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE could not resolve
npm ERR! 
npm ERR! While resolving: @nestjs/passport@8.2.1
npm ERR! Found: passport@0.6.0
npm ERR! node_modules/passport
npm ERR!   passport@"0.6.0" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer passport@"^0.4.0 || ^0.5.0" from @nestjs/passport@8.2.1
npm ERR! node_modules/@nestjs/passport
npm ERR!   @nestjs/passport@"8.2.1" from the root project
npm ERR! 
npm ERR! Conflicting peer dependency: passport@0.5.3
npm ERR! node_modules/passport
npm ERR!   peer passport@"^0.4.0 || ^0.5.0" from @nestjs/passport@8.2.1
npm ERR!   node_modules/@nestjs/passport
npm ERR!     @nestjs/passport@"8.2.1" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-10-24T10_11_47_992Z-debug-0.log

@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from 7f37e37 to 15efba5 Compare May 21, 2024 06:34
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch from 15efba5 to 95d9f86 Compare June 3, 2024 08:58
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 4 times, most recently from 5c4e869 to bb754c9 Compare June 4, 2024 11:58
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 4 times, most recently from ee0ab8c to e5bf226 Compare June 26, 2024 12:44
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 3 times, most recently from 9b3f5e4 to b537f07 Compare July 10, 2024 13:06
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 8 times, most recently from 6ddfbd3 to a375671 Compare August 6, 2024 13:22
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 4 times, most recently from 446f944 to 97ecacd Compare August 23, 2024 10:04
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from 85b181a to f441d52 Compare September 16, 2024 10:08
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch 2 times, most recently from 4592f39 to c660f81 Compare September 25, 2024 15:40
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch from c660f81 to 6444c96 Compare October 24, 2024 10:05
@renovate renovate bot force-pushed the renovate/npm-passport-vulnerability branch from 6444c96 to 077939a Compare October 24, 2024 10:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants