[Snyk] Upgrade: , , , , , , , moment, , applicationinsights, ffc-messaging, govuk-frontend, joi, hapi-pino #98

beclamide · 2024-09-19T21:38:07Z

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@azure/identity
from 4.3.0 to 4.4.1 | 11 versions ahead of your current version | 2 months ago
on 2024-07-31
@azure/msal-node
from 2.9.2 to 2.13.1 | 9 versions ahead of your current version | 21 days ago
on 2024-08-29
@azure/storage-blob
from 12.13.0 to 12.24.0 | 114 versions ahead of your current version | 2 months ago
on 2024-07-23
@hapi/boom
from 9.1.1 to 9.1.4 | 3 versions ahead of your current version | 3 years ago
on 2021-08-20
@hapi/wreck
from 17.1.0 to 17.2.0 | 1 version ahead of your current version | 2 years ago
on 2022-03-25
@hapi/hapi
from 20.2.1 to 20.3.0 | 2 versions ahead of your current version | 2 years ago
on 2023-02-14
@hapi/inert
from 6.0.3 to 6.0.5 | 2 versions ahead of your current version | 3 years ago
on 2022-01-16
moment
from 2.29.4 to 2.30.1 | 2 versions ahead of your current version | 9 months ago
on 2023-12-27
@joi/date
from 2.1.0 to 2.1.1 | 1 version ahead of your current version | 5 months ago
on 2024-04-22
applicationinsights
from 2.5.1 to 2.9.6 | 13 versions ahead of your current version | a month ago
on 2024-08-15
ffc-messaging
from 2.10.0 to 2.10.1 | 2 versions ahead of your current version | 2 months ago
on 2024-07-30
govuk-frontend
from 4.7.0 to 4.8.0 | 1 version ahead of your current version | 7 months ago
on 2024-02-05
joi
from 17.4.0 to 17.13.3 | 32 versions ahead of your current version | 3 months ago
on 2024-06-19
hapi-pino
from 10.1.0 to 10.2.0 | 1 version ahead of your current version | 2 years ago
on 2022-08-26

Release notes

Package name: @azure/msal-node

2.13.1 - 2024-08-29
2.13.0 - 2024-08-13
2.13.0

Tue, 13 Aug 2024 23:25:05 GMT

Minor changes
- Added file-based detection for Azure Arc ([email protected])
- Bump @ azure/msal-common to v14.14.1 (beachball)
- Bump eslint-config-msal to v0.0.0 (beachball)
Patches
- Send the error template back when theres an error response ([email protected])
- clientSecret can now (once again) be provided as undefined #7209 ([email protected])
2.12.0 - 2024-07-23
2.12.0

Tue, 23 Jul 2024 14:19:34 GMT

Minor changes
- Track MSAL node SKU for broker flows #7213 ([email protected])
- Bump @ azure/msal-common to v14.14.0 (beachball)
- Bump eslint-config-msal to v0.0.0 (beachball)
2.11.1 - 2024-07-16
2.11.0 - 2024-07-12
2.10.0 - 2024-07-01
2.9.3-alpha.2 - 2024-06-25
2.9.3-alpha.1 - 2024-06-19
2.9.3-alpha.0 - 2024-06-19
2.9.2 - 2024-06-10

from @azure/msal-node GitHub release notes

Package name: @hapi/boom

9.1.4 - 2021-08-20
9.1.4
9.1.3 - 2021-07-02
9.1.3
9.1.2 - 2021-03-16
9.1.2
9.1.1 - 2020-12-16
- Clean up typings comments (#278)
- Allow custom properties on error payload property in typings (#279)
- Make isBoom type definition laxer (#275)
- Upgrade lab dependency to v24 and devDependency of typescript (#273)

from @hapi/boom GitHub release notes

Package name: @hapi/wreck

17.2.0 - 2022-03-25
17.2.0
17.1.0 - 2020-11-23
version 17.1.0

from @hapi/wreck GitHub release notes

Package name: @hapi/hapi

20.3.0 - 2023-02-14
20.3.0
20.2.2 - 2022-04-20
20.2.2
20.2.1 - 2021-10-09

from @hapi/hapi GitHub release notes

Package name: @hapi/inert

6.0.5 - 2022-01-16
No content.
6.0.4 - 2021-08-30
No content.
6.0.3 - 2020-09-26
No content.

from @hapi/inert GitHub release notes

Package name: moment

2.30.1 - 2023-12-27
2.30.1
2.30.0 - 2023-12-26
2.30.0
2.29.4 - 2022-07-06
2.29.4

from moment GitHub release notes

Package name: @joi/date

2.1.1 - 2024-04-22
2.1.1
2.1.0 - 2021-03-30
2.1.0

from @joi/date GitHub release notes

Package name: ffc-messaging

2.10.1 - 2024-07-30
Patch vuln in azure library (#32)
2.10.1-alpha.1 - 2024-07-30
2.10.0 - 2024-07-04
Support Workload Identity (#31)

from ffc-messaging GitHub release notes

Package name: govuk-frontend

4.8.0 - 2024-02-05

This release includes the ability to update the crown logo. You must do this between 19 February and 1 March 2024.

We’ll send reminders to our mailing list and cross-government Slack as soon as you can make this change.

New features

Update to the new GOV.UK logo (between 19 February and 1 March 2024)

We’ve updated the GOV.UK logo to reflect the changing of the monarch. King Charles III uses the Tudor Crown, rather than the St Edward’s Crown chosen by Queen Elizabeth II.

If your service uses GOV.UK branding, you must update your service to use the new crown.

These changes were made in the following pull requests:

#4376: Implement the Tudor crown favicons (v4.x)
#4278: Implement the Tudor crown in the Header component (v4.x)
#4677: Adjust the spacing of the new Tudor crown (v4.x) - thanks to @ MartinJJones and @ monicacrusellasfanlo for contributing this change

Include the new logo assets

Multiple new image assets are included in this release. You’ll need to copy these to your service's image assets folder if they are not being used directly from the Frontend package. By default this folder is located at /assets/images.

If you’re using Nunjucks, the asset path may have been changed by the assetPath global variable or assetsPath parameter on the header component.

Copy the following files from /dist/assets/images into your assets folder. Any images with the same name as an existing image can be safely overwritten.

favicon.ico
govuk-apple-touch-icon-152x152.png
govuk-apple-touch-icon-167x167.png
govuk-apple-touch-icon-180x180.png
govuk-apple-touch-icon.png
govuk-logotype-tudor-crown.png
govuk-mask-icon.svg
govuk-opengraph-image.png

Update the logo in the header of your page

If you are using the govukHeader Nunjucks macro in your service, add the useTudorCrown parameter to the macro instantiation.

{{ govukHeader({
  ...
  useTudorCrown: true
}) }}

If you are not using the Nunjucks macro, locate the HTML for the existing crown and replace it with this updated HTML. Make sure the URL for the new PNG fallback image is correct.

<!--[if gt IE 8]><!-->
<svg
  aria-hidden="true"
  focusable="false"
  class="govuk-header__logotype-crown"
  xmlns="http://www.w3.org/2000/svg"
  viewBox="0 0 32 30"
  height="30"
  width="32"
>
  <path
    fill="currentColor" fill-rule="evenodd"
    d="M22.6 10.4c-1 .4-2-.1-2.4-1-.4-.9.1-2 1-2.4.9-.4 2 .1 2.4 1s-.1 2-1 2.4m-5.9 6.7c-.9.4-2-.1-2.4-1-.4-.9.1-2 1-2.4.9-.4 2 .1 2.4 1s-.1 2-1 2.4m10.8-3.7c-1 .4-2-.1-2.4-1-.4-.9.1-2 1-2.4.9-.4 2 .1 2.4 1s0 2-1 2.4m3.3 4.8c-1 .4-2-.1-2.4-1-.4-.9.1-2 1-2.4.9-.4 2 .1 2.4 1s-.1 2-1 2.4M17 4.7l2.3 1.2V2.5l-2.3.7-.2-.2.9-3h-3.4l.9 3-.2.2c-.1.1-2.3-.7-2.3-.7v3.4L15 4.7c.1.1.1.2.2.2l-1.3 4c-.1.2-.1.4-.1.6 0 1.1.8 2 1.9 2.2h.7c1-.2 1.9-1.1 1.9-2.1 0-.2 0-.4-.1-.6l-1.3-4c-.1-.2 0-.2.1-.3m-7.6 5.7c.9.4 2-.1 2.4-1 .4-.9-.1-2-1-2.4-.9-.4-2 .1-2.4 1s0 2 1 2.4m-5 3c.9.4 2-.1 2.4-1 .4-.9-.1-2-1-2.4-.9-.4-2 .1-2.4 1s.1 2 1 2.4m-3.2 4.8c.9.4 2-.1 2.4-1 .4-.9-.1-2-1-2.4-.9-.4-2 .1-2.4 1s0 2 1 2.4m14.8 11c4.4 0 8.6.3 12.3.8 1.1-4.5 2.4-7 3.7-8.8l-2.5-.9c.2 1.3.3 1.9 0 2.7-.4-.4-.8-1.1-1.1-2.3l-1.2 4c.7-.5 1.3-.8 2-.9-1.1 2.5-2.6 3.1-3.5 3-1.1-.2-1.7-1.2-1.5-2.1.3-1.2 1.5-1.5 2.1-.1 1.1-2.3-.8-3-2-2.3 1.9-1.9 2.1-3.5.6-5.6-2.1 1.6-2.1 3.2-1.2 5.5-1.2-1.4-3.2-.6-2.5 1.6.9-1.4 2.1-.5 1.9.8-.2 1.1-1.7 2.1-3.5 1.9-2.7-.2-2.9-2.1-2.9-3.6.7-.1 1.9.5 2.9 1.9l.4-4.3c-1.1 1.1-2.1 1.4-3.2 1.4.4-1.2 2.1-3 2.1-3h-5.4s1.7 1.9 2.1 3c-1.1 0-2.1-.2-3.2-1.4l.4 4.3c1-1.4 2.2-2 2.9-1.9-.1 1.5-.2 3.4-2.9 3.6-1.9.2-3.4-.8-3.5-1.9-.2-1.3 1-2.2 1.9-.8.7-2.3-1.2-3-2.5-1.6.9-2.2.9-3.9-1.2-5.5-1.5 2-1.3 3.7.6 5.6-1.2-.7-3.1 0-2 2.3.6-1.4 1.8-1.1 2.1.1.2.9-.3 1.9-1.5 2.1-.9.2-2.4-.5-3.5-3 .6 0 1.2.3 2 .9l-1.2-4c-.3 1.1-.7 1.9-1.1 2.3-.3-.8-.2-1.4 0-2.7l-2.9.9C1.3 23 2.6 25.5 3.7 30c3.7-.5 7.9-.8 12.3-.8"></path>
</svg>
<!--<![endif]-->
<!--[if IE 8]>
<img src="/assets/images/govuk-logotype-tudor-crown.png" class="govuk-header__logotype-crown-fallback-image" width="32" height="30" alt="">
<![endif]-->

4.7.0 - 2023-07-06
New features

Added the Exit This Page component to help users quickly exit a page or service

You can now choose to use the exit this page component to help users quickly leave a page or service which contains sensitive information.

This was added in pull request #2545: Add exit this page component.

Added inverse modifier for buttons on dark backgrounds

You can now choose to use the govuk-button--inverse class to style buttons on dark backgrounds with a white background colour.

This change was made in pull request #3556: Add inverse button styles.

Added inverse modifier for breadcrumbs on dark backgrounds

You can now choose to use the govuk-breadcrumbs--inverse class to style breadcrumbs on dark backgrounds with white text, links and arrows.

This change was made in pull request #3774: Add inverse breadcrumb and back link modifiers and styles.

Added inverse modifier for back links on dark backgrounds

You can now choose to use the govuk-back-link--inverse class to style back links on dark backgrounds with white links and arrows.

This change was made in pull request #3774: Add inverse breadcrumb and back link modifiers and styles.

Fixes

We’ve made fixes to GOV.UK Frontend in the following pull requests:
- #3817: Fix package resolution in Node.js 17+
- #3836: Announce whitespace in screen reader announcements of visually hidden text

from govuk-frontend GitHub release notes

Package name: joi

from joi GitHub release notes

Package name: hapi-pino

10.2.0 - 2022-08-26
What's Changed
- Add note about deprecated option by @ ghostdevv in #170
- Add tests to validate types extension for logger decorations by @ jonathansamines in #174
- Update wrapSerializers type to be optional by @ jonathansamines in #173
New Contributors
- @ ghostdevv made their first contribution in #170
Full Changelog: v10.1.0...v10.2.0
10.1.0 - 2022-06-10
What's Changed
- Add missing type definitions for custom message properties by @ jonathansamines in #166
- Add support to replace default serialalizers unwrapped by @ jonathansamines in #167
Full Changelog: v10.0.0...v10.1.0

from hapi-pino GitHub release notes

Important

Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade: - @azure/identity from 4.3.0 to 4.4.1. See this package in npm: https://www.npmjs.com/package/@azure/identity - @azure/msal-node from 2.9.2 to 2.13.1. See this package in npm: https://www.npmjs.com/package/@azure/msal-node - @azure/storage-blob from 12.13.0 to 12.24.0. See this package in npm: https://www.npmjs.com/package/@azure/storage-blob - @hapi/boom from 9.1.1 to 9.1.4. See this package in npm: https://www.npmjs.com/package/@hapi/boom - @hapi/wreck from 17.1.0 to 17.2.0. See this package in npm: https://www.npmjs.com/package/@hapi/wreck - @hapi/hapi from 20.2.1 to 20.3.0. See this package in npm: https://www.npmjs.com/package/@hapi/hapi - @hapi/inert from 6.0.3 to 6.0.5. See this package in npm: https://www.npmjs.com/package/@hapi/inert - moment from 2.29.4 to 2.30.1. See this package in npm: https://www.npmjs.com/package/moment - @joi/date from 2.1.0 to 2.1.1. See this package in npm: https://www.npmjs.com/package/@joi/date - applicationinsights from 2.5.1 to 2.9.6. See this package in npm: https://www.npmjs.com/package/applicationinsights - ffc-messaging from 2.10.0 to 2.10.1. See this package in npm: https://www.npmjs.com/package/ffc-messaging - govuk-frontend from 4.7.0 to 4.8.0. See this package in npm: https://www.npmjs.com/package/govuk-frontend - joi from 17.4.0 to 17.13.3. See this package in npm: https://www.npmjs.com/package/joi - hapi-pino from 10.1.0 to 10.2.0. See this package in npm: https://www.npmjs.com/package/hapi-pino See this project in Snyk: https://app.snyk.io/org/defra-ffc/project/883432a4-2940-4bd5-9d14-95cfc6eae335?utm_source=github&utm_medium=referral&page=upgrade-pr

samplackett · 2024-09-26T08:40:54Z

Will be picked up under separate PR, if not already

samplackett closed this Sep 26, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade: , , , , , , , moment, , applicationinsights, ffc-messaging, govuk-frontend, joi, hapi-pino #98

[Snyk] Upgrade: , , , , , , , moment, , applicationinsights, ffc-messaging, govuk-frontend, joi, hapi-pino #98

beclamide commented Sep 19, 2024

2.13.0

Minor changes

Patches

2.12.0

Minor changes

New features

Update to the new GOV.UK logo (between 19 February and 1 March 2024)

Include the new logo assets

Update the logo in the header of your page

New features

Added the Exit This Page component to help users quickly exit a page or service

Added inverse modifier for buttons on dark backgrounds

Added inverse modifier for breadcrumbs on dark backgrounds

Added inverse modifier for back links on dark backgrounds

Fixes

What's Changed

New Contributors

What's Changed

samplackett commented Sep 26, 2024

[Snyk] Upgrade: , , , , , , , moment, , applicationinsights, ffc-messaging, govuk-frontend, joi, hapi-pino #98

[Snyk] Upgrade: , , , , , , , moment, , applicationinsights, ffc-messaging, govuk-frontend, joi, hapi-pino #98

Conversation

beclamide commented Sep 19, 2024

Snyk has created this PR to upgrade multiple dependencies.

2.13.0

Minor changes

Patches

2.12.0

Minor changes

New features

Update to the new GOV.UK logo (between 19 February and 1 March 2024)

Include the new logo assets

Update the logo in the header of your page

New features

Added the Exit This Page component to help users quickly exit a page or service

Added inverse modifier for buttons on dark backgrounds

Added inverse modifier for breadcrumbs on dark backgrounds

Added inverse modifier for back links on dark backgrounds

Fixes

What's Changed

New Contributors

What's Changed

samplackett commented Sep 26, 2024