Update dependency ajv to v8.20.0 by renovate[bot] · Pull Request #505 · tfelder-deloitte/OpenSourceSoftwareSecurityScans

renovate · 2021-09-12T20:40:01Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ajv (source)	`8.6.2` → `8.20.0`

Release Notes

ajv-validator/ajv (ajv)

`v8.20.0`

Compare Source

What's Changed

fix: add support for node 22/24, drop node 16/21 by @jasoniangreen in #2580
fix: add ES2022.RegExp for RegExpIndicesArray by @SignpostMarv in #2604

Full Changelog: ajv-validator/ajv@v8.19.0...v8.20.0

`v8.18.0`

Compare Source

What's Changed

feat: allow tree-shaking by adding "sideEffects": false to package.json by @josdejong in #2480
fix: #2482 Infinity and NaN serialise to null by @jasoniangreen in #2487
fix: small grammatical error in managing-schemas.md by @monteiro-renato in #2508
fix: typos in schema-language.md by @monteiro-renato in #2507
fix(pattern): use configured RegExp engine with $data keyword to mitigate ReDoS attacks (CVE-2025-69873) by @epoberezkin in #2586

New Contributors

@josdejong made their first contribution in #2480
@monteiro-renato made their first contribution in #2508

Full Changelog: ajv-validator/ajv@v8.17.1...v8.18.0

`v8.17.1`

Compare Source

What's Changed

bump version to 8.17.1 by @jasoniangreen in #2472

Full Changelog: ajv-validator/ajv@v8.17.0...v8.17.1

Plus everything in 8.17.0 which failed to release

The only functional change is to switch from uri-js (which is no longer supported), to fast-uri. This is the second attempt and the team on fast-uri have been really helpful addressing the issues we found last time.

Revert "Revert fast-uri change (#2444)" by @gurgunday in #2448
fix: ignore new eslint error for @typescript-eslint/no-extraneous-class by @jasoniangreen in #2455
docs: clarify behaviour of addVocabulary by @jasoniangreen in #2454
docs: refactor to improve legibility by @blottn in #2432
Fix grammatical typo in managing-schemas.md by @wetneb in #2305
docs: Fix broken strict-mode link by @alexanderjsx in #2459
feat: add test for encoded refs and bump fast-uri by @jasoniangreen in #2449
fix: changes for @typescript-eslint/array-type rule by @jasoniangreen in #2467
fixes #2217 - clarify custom keyword naming by @jasoniangreen in #2457

`v8.16.0`

Compare Source

What's Changed

Revert fast-uri change by @jasoniangreen in #2444

Full Changelog: ajv-validator/ajv@v8.15.0...v8.16.0

`v8.15.0`

Compare Source

What's Changed

Replace uri-js with fast-uri by @vixalien in #2415
Bump to 8.15.0 by @jasoniangreen in #2442

New Contributors

@vixalien made their first contribution in #2415

Full Changelog: ajv-validator/ajv@v8.14.0...v8.15.0

`v8.14.0`

Compare Source

What's Changed

readme: build badge by @epoberezkin in #2424
Update workflows by @rotu in #2410
docs: add warning to maxLength / minLength by @jasoniangreen in #2428
fix: broken link in docs warning by @jasoniangreen in #2431
compileAsync a schema with discriminator and $ref, fixes #2427 by @jasoniangreen in #2433
bump version to 8.14.0 for publishing by @jasoniangreen in #2440

New Contributors

@rotu made their first contribution in #2410

Full Changelog: ajv-validator/ajv@v8.13.0...v8.14.0

`v8.13.0`

Compare Source

add named exports
update dependencies
update node.js

`v8.12.0`

Compare Source

fix JTD serialisation (remove leading comma in objects with only optional properties) (#2190, @piliugin-anton)
empty JTD "values" schema (#2191)
empty object to work with JTD utility type (#2158, @erikbrinkman)
fix JTD "discriminator" schema for objects with more than 8 properties (#2194)
correctly narrow "number" type to "integer" (#2192, @JacobLey)
update Node.js versions in CI to 14, 16, 18 and 19

`v8.11.2`

Compare Source

Update dependencies

Export ValidationError and MissingRefError (#1840, @dannyb648)

`v8.11.1`

Compare Source

Update dependencies

Export ValidationError and MissingRefError (#1840, @dannyb648)

`v8.11.0`

Compare Source

Use root schemaEnv when resolving references in oneOf (#1901, @asprouse)

Only use equal function in generated code when it is used (#1922, @bhvngt)

`v8.10.0`

Compare Source

uriResolver option (@zekth, #1862)

`v8.9.0`

Compare Source

Option code.esm to generate ESM exports for standalone validation functions (@rehanvdm, #1861)
Support discriminator keyword with $ref in oneOf subschemas (@dfeufel, #1815)

`v8.8.2`

Compare Source

Use full RegExp string (with flags) as cache key, related to ajv-validator/ajv-keywords#220

`v8.8.1`

Compare Source

Fix minContains: 0 (#1819)

`v8.8.0`

Compare Source

Fix browser bundles in cdnjs
regExp option allowing to specify alternative RegExp engine, e.g. re2 (@efebarlas)

`v8.7.1`

Compare Source

Publish Ajv bundle for JSON Schema 2020-12 to cdnjs.com

`v8.7.0`

Compare Source

Update JSON Schema Test Suite.
Change minContains: 0 now correctly allows empty array.

`v8.6.3`

Compare Source

Fix $ref resolution for schemas without $id (@rbuckton, #1725)
Support standalone module import from ESM modules without using .default property (@bhvngt, #1757)
Update code for breaking TS change - error in catch has type unknown (#1760)

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2021-09-12T20:40:07Z

⚠ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: search-parts/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: pnp-modern-search@3.14.2
npm ERR! Found: @types/react@17.0.18
npm ERR! node_modules/@types/react
npm ERR!   dev @types/react@"17.0.18" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @types/react@">=16.8.0 <17.0.0" from @uifabric/file-type-icons@7.6.30
npm ERR! node_modules/@uifabric/file-type-icons
npm ERR!   @uifabric/file-type-icons@"7.6.30" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-04-30T01_11_05_396Z-debug-0.log

File name: search-extensibility-library/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: pnp-modern-search-extensibility-demo@0.0.1
npm ERR! Found: @types/react@17.0.18
npm ERR! node_modules/@types/react
npm ERR!   dev @types/react@"17.0.18" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @types/react@">=16.8.0 <17.0.0" from office-ui-fabric-react@7.174.0
npm ERR! node_modules/office-ui-fabric-react
npm ERR!   office-ui-fabric-react@"7.174.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-04-30T01_11_17_170Z-debug-0.log

File name: search-custom-renderer/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: react-search-refiners-renderer@1.0.1
npm ERR! Found: @types/react@17.0.18
npm ERR! node_modules/@types/react
npm ERR!   @types/react@"17.0.18" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @types/react@">=16.8.0 <17.0.0" from office-ui-fabric-react@7.174.0
npm ERR! node_modules/office-ui-fabric-react
npm ERR!   office-ui-fabric-react@"7.174.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2024-04-30T01_11_21_158Z-debug-0.log

github-actions

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (nodejs)	15	37	27	3	❌
Secrets Audit	0	1	0	0	❌
Security Audit for Infrastructure	0	0	0	0	✅

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

github-actions

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	11	28	24	1	❌
Secrets Audit	0	1	0	0	❌

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

github-advanced-security · 2023-03-23T21:46:41Z

You have successfully added a new Secrets Audit configuration .github/workflows/shiftleft-analysis.yml:Scan-Build. As part of the setup process, we have scanned this repository and found 1 existing alert. Please check the repository Security tab to see all alerts.

github-actions

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	14	31	24	1	❌
Secrets Audit	0	1	0	0	❌

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

renovate · 2024-05-26T00:44:42Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: search-parts/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: pnp-modern-search@3.14.2
npm ERR! Found: @types/react@17.0.18
npm ERR! node_modules/@types/react
npm ERR!   dev @types/react@"17.0.18" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @types/react@">=16.8.0 <17.0.0" from @uifabric/file-type-icons@7.6.30
npm ERR! node_modules/@uifabric/file-type-icons
npm ERR!   @uifabric/file-type-icons@"7.6.30" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /runner/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /runner/cache/others/npm/_logs/2026-04-29T19_43_32_652Z-debug-0.log

File name: search-extensibility-library/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: pnp-modern-search-extensibility-demo@0.0.1
npm ERR! Found: @types/react@17.0.18
npm ERR! node_modules/@types/react
npm ERR!   dev @types/react@"17.0.18" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @types/react@">=16.8.0 <17.0.0" from office-ui-fabric-react@7.174.0
npm ERR! node_modules/office-ui-fabric-react
npm ERR!   office-ui-fabric-react@"7.174.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /runner/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /runner/cache/others/npm/_logs/2026-04-29T19_43_39_412Z-debug-0.log

File name: search-custom-renderer/package-lock.json

npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: react-search-refiners-renderer@1.0.1
npm ERR! Found: @types/react@17.0.18
npm ERR! node_modules/@types/react
npm ERR!   @types/react@"17.0.18" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer @types/react@">=16.8.0 <17.0.0" from office-ui-fabric-react@7.174.0
npm ERR! node_modules/office-ui-fabric-react
npm ERR!   office-ui-fabric-react@"7.174.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /runner/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /runner/cache/others/npm/_logs/2026-04-29T19_43_45_615Z-debug-0.log

github-actions

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	1	0	1	0	❌
Secrets Audit	0	1	0	0	❌

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

github-actions

Scan Summary

Tool	Critical	High	Medium	Low	Status
Dependency Scan (universal)	1	0	1	1	❌
Secrets Audit	0	1	0	0	❌

Recommendation

Please review the findings from Code scanning alerts before approving this pull request. You can also configure the build rules or add suppressions to customize this bot 👍

renovate Bot force-pushed the renovate/ajv-8.x branch 12 times, most recently from b2dcff7 to 86526cf Compare October 21, 2021 02:19

renovate Bot force-pushed the renovate/ajv-8.x branch 2 times, most recently from cbebbf1 to bf8e2ab Compare October 26, 2021 03:23

renovate Bot force-pushed the renovate/ajv-8.x branch 3 times, most recently from 0c06e16 to 485adef Compare November 8, 2021 20:44

renovate Bot changed the title ~~Update dependency ajv to v8.6.3~~ Update dependency ajv to v8.7.0 Nov 8, 2021

renovate Bot force-pushed the renovate/ajv-8.x branch 2 times, most recently from eadfeb7 to 2cadf04 Compare November 8, 2021 23:07

renovate Bot changed the title ~~Update dependency ajv to v8.7.0~~ Update dependency ajv to v8.7.1 Nov 8, 2021

renovate Bot force-pushed the renovate/ajv-8.x branch 2 times, most recently from 2305a4f to 026180b Compare November 13, 2021 19:13

renovate Bot changed the title ~~Update dependency ajv to v8.7.1~~ Update dependency ajv to v8.8.0 Nov 13, 2021

renovate Bot force-pushed the renovate/ajv-8.x branch 2 times, most recently from bdd72c7 to bfe37c7 Compare November 16, 2021 21:06

renovate Bot changed the title ~~Update dependency ajv to v8.8.0~~ Update dependency ajv to v8.8.1 Nov 16, 2021

renovate Bot force-pushed the renovate/ajv-8.x branch 2 times, most recently from f11e63b to a76ae25 Compare November 18, 2021 22:33

renovate Bot force-pushed the renovate/ajv-8.x branch 4 times, most recently from 08178c7 to 67dae4e Compare January 21, 2022 00:39

renovate Bot force-pushed the renovate/ajv-8.x branch 7 times, most recently from a2680a5 to 1001d15 Compare February 3, 2022 12:19

renovate Bot force-pushed the renovate/ajv-8.x branch from 1001d15 to b7610a2 Compare February 4, 2022 18:57

renovate Bot changed the title ~~Update dependency ajv to v8.9.0~~ Update dependency ajv to v8.10.0 Feb 4, 2022

renovate Bot force-pushed the renovate/ajv-8.x branch 3 times, most recently from 12e8983 to 4b61d2a Compare February 8, 2022 12:42

renovate Bot force-pushed the renovate/ajv-8.x branch 5 times, most recently from ec6110e to a8711af Compare March 1, 2022 22:26

renovate Bot force-pushed the renovate/ajv-8.x branch from a8711af to 26803db Compare March 7, 2022 23:12

github-actions Bot reviewed Nov 20, 2022

View reviewed changes

github-actions Bot reviewed Mar 23, 2023

View reviewed changes

github-actions Bot reviewed Apr 30, 2024

View reviewed changes

github-actions Bot reviewed Feb 14, 2026

View reviewed changes

Update dependency ajv to v8.20.0

541cb31

github-actions Bot reviewed Apr 24, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency ajv to v8.20.0#505

Update dependency ajv to v8.20.0#505
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/ajv-8.x

renovate Bot commented Sep 12, 2021 •

edited

Loading

Uh oh!

renovate Bot commented Sep 12, 2021 •

edited

Loading

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot left a comment

Uh oh!

github-advanced-security AI commented Mar 23, 2023

Uh oh!

github-actions Bot left a comment

Uh oh!

renovate Bot commented May 26, 2024 •

edited

Loading

Uh oh!

github-actions Bot left a comment

Uh oh!

github-actions Bot left a comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Sep 12, 2021 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

Plus everything in 8.17.0 which failed to release

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

renovate Bot commented Sep 12, 2021 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠ Artifact update problem

File name: search-parts/package-lock.json

File name: search-extensibility-library/package-lock.json

File name: search-custom-renderer/package-lock.json

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Scan Summary

Recommendation

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Scan Summary

Recommendation

Uh oh!

github-advanced-security AI commented Mar 23, 2023

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Scan Summary

Recommendation

Uh oh!

renovate Bot commented May 26, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: search-parts/package-lock.json

File name: search-extensibility-library/package-lock.json

File name: search-custom-renderer/package-lock.json

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Scan Summary

Recommendation

Uh oh!

github-actions Bot left a comment

Choose a reason for hiding this comment

Scan Summary

Recommendation

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Sep 12, 2021 •

edited

Loading

renovate Bot commented Sep 12, 2021 •

edited

Loading

renovate Bot commented May 26, 2024 •

edited

Loading