Skip to content

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade vm2 from 3.6.4 to 3.9.5.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 19 versions ahead of your current version.
  • The recommended version was released 2 months ago, on 2021-10-17.
Release notes
Package name: vm2
  • 3.9.5 - 2021-10-17

    New Features

    d9af94c: Added editor config

    Fixes

    4f0db94: Fix Promise.then not working
    4198060: Fix for missing CallSite properties

  • 3.9.4 - 2021-10-12

    New Features

    4ead241: Added strict option

    Fixes

    b4f6e2b: Fix breakouts in VM.
    e95165b: Fix for bound function causes TypeError
    42c7b83: Allow extending of frozen objects

  • 3.9.3 - 2021-04-05

    Fixes

    • ff894fc: Fix breakouts in VM.
    • d12bdbd: Fix problems when Promise object is deleted.
    • 77a7681: Fix oversight that write ability can change on non configurable properties.
    • 8a76a08: Support shebang as node does.
    • 3f05f98: Fix property typos.
  • 3.9.2 - 2020-04-29

    New Features

    • 1330a7e: Added NodeVM options to pass argv and env to the process object.

    Fixes

    • 6f1e2c1: Fix breakouts in NodeVM.
    • 58b2482: Made async check more robust.
  • 3.9.1 - 2020-03-29

    Fixes

    • 2049e4d: Require helpers statically in main.
    • d267a32: Fix for non-configurable property access.
  • 3.9.0 - 2020-03-21

    New Features

    • 5c2d117: Added vm.Script lineOffset and columnOffset options.
    • 78f8be5: Allow to specify a compiler per VMScript.
    • ed7215f: Add option to disable async.
    • d71d647: Added jsdoc to main.js.

    Fixes

    • 3ba34db: Fix access to frozen or unconfigurable properties.
    • fe2bdf3: Double wrap Objects to prevent breakout via inspect.
    • 8d5a8dd: Compile now compiles VM code how it should.
  • 3.8.4 - 2019-09-13
  • 3.8.3 - 2019-07-31
  • 3.8.2 - 2019-06-12
  • 3.8.1 - 2019-05-02
  • 3.8.0 - 2019-04-21
  • 3.7.0 - 2019-04-15
  • 3.6.11 - 2019-04-07
  • 3.6.10 - 2019-01-28
  • 3.6.9 - 2019-01-26
  • 3.6.8 - 2019-01-26
  • 3.6.7 - 2019-01-26
  • 3.6.6 - 2019-01-02
  • 3.6.5 - 2018-12-31
  • 3.6.4 - 2018-10-17
from vm2 GitHub release notes
Commit messages
Package name: vm2
  • 05e5e65 Update to 3.9.5
  • 4198060 Merge pull request #372 from XmiliaH/fix-371
  • 469958d Fix if CallSite does not have all properties
  • 4f0db94 Merge pull request #369 from XmiliaH/fix-368
  • d9af94c Merge pull request #361 from aubelsb2/editorconfig
  • 5d6b462 More settings for editors
  • 4675e51 Fix problem with promise
  • 5122769 Update CHANGELOG.md
  • 1eabc2a Update Version
  • 6820f56 Merge pull request #367 from XmiliaH/security-fix
  • b4f6e2b Security Fixes
  • a2bdc13 Some editors obey these rules - Creates fewer conflicts with eslint
  • 82caa5b Merge pull request #346 from XmiliaH/fix-330
  • 12e721b Fix formatting
  • 4ead241 Merge pull request #313 from XmiliaH/fix-strict-modules
  • 6fee336 Merge pull request #319 from XmiliaH/fix-318
  • cc63160 Merge pull request #347 from XmiliaH/updates
  • 72152d2 Update readme
  • 807e2b2 Bring files up to date
  • 7ecf9c7 Merge pull request #320 from contra/patch-1
  • b5e2bb0 Node 13 is EOL.
  • 42c7b83 Frozen object tries to create property on receiver
  • e95165b Use bound functions instead of anonymous ones
  • a4c5b17 Fix tests

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant