[Snyk] Security upgrade typeorm from 0.2.24 to 0.2.32 - #105
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-JSYAML-17342520
|
This is a minor version upgrade for TypeORM within the 0.2.x series. While no specific, officially documented breaking changes were found for the exact range of 0.2.24 to 0.2.32, the TypeORM project has stated that prior to version 1.0.0, breaking changes could be introduced in minor Recommendation: Due to the lack of a detailed changelog for this specific version span and the potential for undocumented changes, this upgrade carries a medium risk. It is highly recommended to perform thorough regression testing on all database interactions, including CRUD operations, entity relationships, and migrations.
|
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.
Snyk changed the following file(s):
package.jsonpackage-lock.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-JSYAML-17342520
Breaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.