[Snyk] Upgrade pmx from 1.5.5 to 1.6.7 #4

snyk-bot · 2020-05-05T06:30:39Z

Snyk has created this PR to upgrade pmx from 1.5.5 to 1.6.7.

✨What is Merge Advice?

We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. 🙏

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 9 versions ahead of your current version.
The recommended version was released 2 years ago, on 2018-06-14.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Prototype Pollution npm:extend:20180424	No Known Exploit
	Prototype Pollution SNYK-JS-LODASHMERGE-173732	No Known Exploit
	Prototype Pollution SNYK-JS-LODASHMERGE-173733	No Known Exploit

Release notes

Package name: pmx

1.6.7 - 2018-06-14
No content.
1.6.4 - 2018-02-19
No content.
1.6.3 - 2018-02-19
1.6.3-rc2 - 2018-02-16
1.6.3-next - 2018-02-06
1.6.2-next - 2018-02-03
1.6.1-next - 2018-02-02
1.6.0-next - 2018-02-02
1.5.6 - 2018-01-22
1.5.5 - 2017-11-22

from pmx GitHub release notes

Commit messages

Package name: pmx

fbb910f Merge remote-tracking branch 'origin/development'
948ff61 chore: update version to 1.6.7
36fd6c4 test: fix test about dependencies
6006fe5 Merge remote-tracking branch 'origin/development'
0617428 chore: update version to 1.6.6
d0fb0df hotfix: By default, how much resource does it use on visitors' devices? cazala/coin-hive-stratum#121 set collectDependencies to false by default
b2b26a2 Merge remote-tracking branch 'origin/development'
2c64479 chore: update version to 1.6.5
d25d294 Merge pull request Failed to install cazala/coin-hive-stratum#124 from keymetrics/collect_dependencies
bf5e568 fix: By default, how much resource does it use on visitors' devices? cazala/coin-hive-stratum#121 allow user to disable dependencies collection
7837627 hotfix: set semver into dependencies
b546c0e Merge remote-tracking branch 'origin/development'
b3749e8 Merge branch 'development' of github.com:keymetrics/pmx into development
2ca0432 chore: update changelog and version
4d9ede8 Merge branch 'development' into 'master'
0e5bf89 Merge pull request Last Proxy version issue cazala/coin-hive-stratum#116 from keymetrics/create_probe_when_receiving_data
3e43dad feat: create deep metrics probes when receiving first data.
d2994da Merge pull request pool.electroneum.space cazala/coin-hive-stratum#115 from keymetrics/protect_V8_require
7913695 refacto: change try/catch to semver
28de86a fix: protect v8 module require, for old node versions
4ef48c2 1.6.3-next
c4884f1 feat: implement deep metrics retrieval
d6b210a deps: add deep metrics
7382789 chore: 1.6.2-next