[Snyk] Upgrade jscodeshift from 0.6.4 to 0.13.0

[snyk-bot]

Snyk has created this PR to upgrade jscodeshift from 0.6.4 to 0.13.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2021-06-26.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: jscodeshift

• 0.13.0 - 2021-06-26
  No content.
• 0.12.0 - 2021-04-21
  No content.
• 0.11.0 - 2020-09-02
  

  0.11.0

• 0.10.0 - 2020-06-03
  

  version 0.10.0

• 0.9.0 - 2020-05-03
• 0.8.0 - 2020-05-03
• 0.7.1 - 2020-05-02
• 0.7.0 - 2019-12-11
  

  Added

  • Added jest snapshot utils (#297, @ dogoku)

  Changed

  • Moved from BSD to MIT license

  Fixed

  • No longer throw an error when calling jscodeshift on a non-existent path (#334, @ threepointone)
  • Preserve the original file extension in remote files (#317, @ samselikoff)
• 0.6.4 - 2019-04-30
  

  Changed

  • Allow writing tests in TypeScript (#308)
  • Better handling of .gitingore files: Ignore comments and support \r\n line breaks (#306)

from jscodeshift GitHub release notes

Commit messages

Package name: jscodeshift

• 2fd5e11 0.13.0
• 31bab3a feat: create template.asyncExpression
• 3f30cdc Document using ES modules for transforms and tests
• 973bc2f Bump hosted-git-info from 2.7.1 to 2.8.9
• c87ebba Remove lodash dependency from tsx parser
• 1ebebcf Make dependency on temp version slightly stricter
• f6ec09f Merge pull request [Snyk] Security upgrade url-parse from 1.5.3 to 1.5.9 #416 from atlassian-forks/addAFailOnErrorFlag
• 57a9d9c Bump y18n from 3.2.1 to 3.2.2
• 0893029 Bump lodash from 4.17.15 to 4.17.21
• 711a2eb 0.12.0
• 788d6e1 Support newer TypeScript syntax (Node warnings with more readable Node versions #410)
• d8fb5ec Allow transform to be a promise. Resolves Add git2gus config #210.
• 64bb8e7 Update package.json
• e3be4f4 Reset package.json
• 74156e2 Filestats => fileCounters
• e4871e3 Remove list from the new option
• 3bdf58f Set flag to true on the option
• 1d9623c Move the options ordering a round
• 706a56c Add a flag to make jscodeshift return a 1 code when errors were found
• 5910a4d Merge pull request [BUG] Uncaught exception when adding a number of items to cart larger than the available stock #388 from facebook/dependabot/npm_and_yarn/handlebars-4.7.6
• ae306e8 Merge pull request [Snyk] Security upgrade url-parse from 1.5.1 to 1.5.6 #404 from facebook/dependabot/npm_and_yarn/ini-1.3.7
• 62089ff Merge pull request [Snyk] Security upgrade url-parse from 1.5.3 to 1.5.6 #407 from lpoulter/bump-recast
• ecb9350 chore: update recast to allow ChainExpression types
• d2835fe Bump ini from 1.3.5 to 1.3.7

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs