Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade @sentry/vue from 7.74.1 to 8.11.0 #23

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

snyk-io[bot]
Copy link

@snyk-io snyk-io bot commented Jul 16, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade @sentry/vue from 7.74.1 to 8.11.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 88 versions ahead of your current version.

  • The recommended version was released on 25 days ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Cross-site Request Forgery (CSRF)
SNYK-JS-AXIOS-6032459
207 Proof of Concept
high severity Prototype Pollution
SNYK-JS-AXIOS-6144788
207 No Known Exploit
high severity Uncontrolled resource consumption
SNYK-JS-BRACES-6838727
207 Proof of Concept
high severity Improper Input Validation
SNYK-JS-FOLLOWREDIRECTS-6141137
207 Proof of Concept
high severity Inefficient Regular Expression Complexity
SNYK-JS-MICROMATCH-6838728
207 No Known Exploit
high severity Access Control Bypass
SNYK-JS-VITE-6182924
207 Proof of Concept
medium severity Improper Access Control
SNYK-JS-VITE-6531286
207 Proof of Concept
medium severity Regular Expression Denial of Service (ReDoS)
SNYK-JS-AXIOS-6124857
207 Proof of Concept
medium severity Template Injection
SNYK-JS-DOMPURIFY-6474511
207 Proof of Concept
medium severity Information Exposure
SNYK-JS-FOLLOWREDIRECTS-6444610
207 Proof of Concept
medium severity Cross-Site Scripting (XSS)
SNYK-JS-VITE-6098386
207 Proof of Concept
Release notes
Package name: @sentry/vue
  • 8.11.0 - 2024-06-21

    Important Changes

    • feat(core): Add parentSpan option to startSpan* APIs (#12567)

    We've made it easier to create a span as a child of a specific span via the startSpan* APIs. This should allow you to
    explicitly manage the parent-child relationship of your spans better.

    Sentry.startSpan({ name: 'root' }, parent => {
    const span = Sentry.startInactiveSpan({ name: 'xxx', parentSpan: parent });

    Sentry.startSpan({ name: 'xxx', parentSpan: parent }, () => {});

    Sentry.startSpanManual({ name: 'xxx', parentSpan: parent }, () => {});
    });

    Other Changes

    • feat(node): Detect release from more providers (#12529)
    • fix(profiling-node): Use correct getGlobalScope import (#12564)
    • fix(profiling-node) sample timestamps need to be in seconds (#12563)
    • ref: Align @ sentry/node exports from framework SDKs. (#12589)

    Bundle size 📦

    Path Size
    @ sentry/browser 22.22 KB
    @ sentry/browser (incl. Tracing) 33.31 KB
    @ sentry/browser (incl. Tracing, Replay) 69.09 KB
    @ sentry/browser (incl. Tracing, Replay) - with treeshaking flags 62.41 KB
    @ sentry/browser (incl. Tracing, Replay with Canvas) 73.14 KB
    @ sentry/browser (incl. Tracing, Replay, Feedback) 85.31 KB
    @ sentry/browser (incl. Tracing, Replay, Feedback, metrics) 87.17 KB
    @ sentry/browser (incl. metrics) 26.5 KB
    @ sentry/browser (incl. Feedback) 38.42 KB
    @ sentry/browser (incl. sendFeedback) 26.85 KB
    @ sentry/browser (incl. FeedbackAsync) 31.42 KB
    @ sentry/react 24.96 KB
    @ sentry/react (incl. Tracing) 36.35 KB
    @ sentry/vue 26.32 KB
    @ sentry/vue (incl. Tracing) 35.16 KB
    @ sentry/svelte 22.35 KB
    CDN Bundle 23.41 KB
    CDN Bundle (incl. Tracing) 35.04 KB
    CDN Bundle (incl. Tracing, Replay) 69.17 KB
    CDN Bundle (incl. Tracing, Replay, Feedback) 74.34 KB
    CDN Bundle - uncompressed 68.76 KB
    CDN Bundle (incl. Tracing) - uncompressed 103.61 KB
    CDN Bundle (incl. Tracing, Replay) - uncompressed 214.08 KB
    CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 226.67 KB
    @ sentry/nextjs (client) 36.23 KB
    @ sentry/sveltekit (client) 33.95 KB
    @ sentry/node 112.99 KB
    @ sentry/node - without tracing 90.4 KB
    @ sentry/aws-serverless 99.48 KB
  • 8.10.0 - 2024-06-19

    Important Changes

    • feat(remix): Migrate to opentelemetry-instrumentation-remix. (#12110)

    You can now simplify your remix instrumentation by opting-in like this:

    const Sentry = require('@ sentry/remix');

    Sentry.init({
    dsn: YOUR_DSN
    // opt-in to new auto instrumentation
    autoInstrumentRemix: true,
    });

    With this setup, you do not need to add e.g. wrapExpressCreateRequestHandler anymore. Additionally, the quality of the
    captured data improves. The old way to use @ sentry/remix continues to work, but it is encouraged to use the new setup.

    Other Changes

    • feat(browser): Export thirdPartyErrorFilterIntegration from @ sentry/browser (#12512)
    • feat(feedback): Allow passing tags field to any feedback config param (#12197)
    • feat(feedback): Improve screenshot quality for retina displays (#12487)
    • feat(feedback): Screenshots don't resize after cropping (#12481)
    • feat(node) add max lineno and colno limits (#12514)
    • feat(profiling) add global profile context while profiler is running (#12394)
    • feat(react): Add React version to events (#12390)
    • feat(replay): Add url to replay hydration error breadcrumb type (#12521)
    • fix(core): Ensure standalone spans respect sampled flag (#12533)
    • fix(core): Use maxValueLength in extra error data integration (#12174)
    • fix(feedback): Fix scrolling after feedback submission (#12499)
    • fix(feedback): Send feedback rejects invalid responses (#12518)
    • fix(nextjs): Update @ rollup/plugin-commonjs (#12527)
    • fix(node): Ensure status is correct for http server span errors (#12477)
    • fix(node): UnifygetDynamicSamplingContextFromSpan (#12522)
    • fix(profiling): continuous profile chunks should be in seconds (#12532)
    • fix(remix): Add nativeFetch support for accessing request headers (#12479)
    • fix(remix): Export no-op as captureRemixServerException from client SDK (#12497)
    • ref(node) refactor contextlines to use readline (#12221)

    Work in this release was contributed by @ AndreyKovanov and @ kiliman. Thank you for your contributions!

    Bundle size 📦

    Path Size
    @ sentry/browser 22.22 KB
    @ sentry/browser (incl. Tracing) 33.27 KB
    @ sentry/browser (incl. Tracing, Replay) 69.05 KB
    @ sentry/browser (incl. Tracing, Replay) - with treeshaking flags 62.37 KB
    @ sentry/browser (incl. Tracing, Replay with Canvas) 73.11 KB
    @ sentry/browser (incl. Tracing, Replay, Feedback) 85.27 KB
    @ sentry/browser (incl. Tracing, Replay, Feedback, metrics) 87.09 KB
    @ sentry/browser (incl. metrics) 26.42 KB
    @ sentry/browser (incl. Feedback) 38.42 KB
    @ sentry/browser (incl. sendFeedback) 26.85 KB
    @ sentry/browser (incl. FeedbackAsync) 31.42 KB
    @ sentry/react 24.96 KB
    @ sentry/react (incl. Tracing) 36.32 KB
    @ sentry/vue 26.23 KB
    @ sentry/vue (incl. Tracing) 35.13 KB
    @ sentry/svelte 22.35 KB
    CDN Bundle 23.41 KB
    CDN Bundle (incl. Tracing) 34.95 KB
    CDN Bundle (incl. Tracing, Replay) 69.08 KB
    CDN Bundle (incl. Tracing, Replay, Feedback) 74.25 KB
    CDN Bundle - uncompressed 68.76 KB
    CDN Bundle (incl. Tracing) - uncompressed 103.41 KB
    CDN Bundle (incl. Tracing, Replay) - uncompressed 213.88 KB
    CDN Bundle (incl. Tracing, Replay, Feedback) - uncompressed 226.47 KB
    @ sentry/nextjs (client) 36.2 KB
    @ sentry/sveltekit (client) 33.9 KB
    @ sentry/node 112.62 KB
    @ sentry/node - without tracing 90.04 KB
    @ sentry/aws-serverless 99.12 KB
  • 8.9.2 - 2024-06-12
  • 8.9.1 - 2024-06-11
  • 8.8.0 - 2024-06-07
  • 8.7.0 - 2024-05-29
  • 8.6.0 - 2024-05-29
  • 8.5.0 - 2024-05-27
  • 8.4.0 - 2024-05-23
  • 8.3.0 - 2024-05-22
  • 8.2.1 - 2024-05-16
  • 8.2.0 - 2024-05-16
  • 8.1.0 - 2024-05-16
  • 8.0.0 - 2024-05-13
  • 8.0.0-rc.3 - 2024-05-10
  • 8.0.0-rc.2 - 2024-05-08
  • 8.0.0-rc.1 - 2024-05-07
  • 8.0.0-rc.0 - 2024-05-06
  • 8.0.0-beta.6 - 2024-05-03
  • 8.0.0-beta.5 - 2024-04-30
  • 8.0.0-beta.4 - 2024-04-24
  • 8.0.0-beta.3 - 2024-04-19
  • 8.0.0-beta.2 - 2024-04-17
  • 8.0.0-beta.1 - 2024-04-15
  • 8.0.0-alpha.9 - 2024-04-08
  • 8.0.0-alpha.8 - 2024-04-08
  • 8.0.0-alpha.7 - 2024-03-27
  • 8.0.0-alpha.5 - 2024-03-22
  • 8.0.0-alpha.4 - 2024-03-14
  • 8.0.0-alpha.3 - 2024-03-14
  • 8.0.0-alpha.2 - 2024-03-05
  • 7.118.0 - 2024-06-21
    • fix(v7/bundle): Ensure CDN bundles do not overwrite window.Sentry (#12579)

    Bundle size 📦

    Path Size
    @ sentry/browser (incl. Tracing, Replay, Feedback) - Webpack (gzipped) 80.83 KB
    @ sentry/browser (incl. Tracing, Replay) - Webpack (gzipped) 71.77 KB
    @ sentry/browser (incl. Tracing, Replay with Canvas) - Webpack (gzipped) 76.02 KB
    @ sentry/browser (incl. Tracing, Replay) - Webpack with treeshaking flags (gzipped) 65.38 KB
    @ sentry/browser (incl. Tracing) - Webpack (gzipped) 35.64 KB
    @ sentry/browser (incl. browserTracingIntegration) - Webpack (gzipped) 35.53 KB
    @ sentry/browser (incl. Feedback) - Webpack (gzipped) 31.6 KB
    @ sentry/browser (incl. sendFeedback) - Webpack (gzipped) 31.61 KB
    @ sentry/browser - Webpack (gzipped) 22.78 KB
    @ sentry/browser (incl. Tracing, Replay, Feedback) - ES6 CDN Bundle (gzipped) 79.05 KB
    @ sentry/browser (incl. Tracing, Replay) - ES6 CDN Bundle (gzipped) 70.38 KB
    @ sentry/browser (incl. Tracing) - ES6 CDN Bundle (gzipped) 36.06 KB
    @ sentry/browser - ES6 CDN Bundle (gzipped) 25.29 KB
    @ sentry/browser (incl. Tracing, Replay) - ES6 CDN Bundle (minified & uncompressed) 221.51 KB
    @ sentry/browser (incl. Tracing) - ES6 CDN Bundle (minified & uncompressed) 109.1 KB
    @ sentry/browser - ES6 CDN Bundle (minified & uncompressed) 75.83 KB
    @ sentry/browser (incl. Tracing) - ES5 CDN Bundle (gzipped) 39.34 KB
    @ sentry/react (incl. Tracing, Replay) - Webpack (gzipped) 72.27 KB
    @ sentry/react - Webpack (gzipped) 22.81 KB
    @ sentry/nextjs Client (incl. Tracing, Replay) - Webpack (gzipped) 90.03 KB
    @ sentry/nextjs Client - Webpack (gzipped) 54.15 KB
    @ sentry-internal/feedback - Webpack (gzipped) 17.34 KB
  • 7.117.0 - 2024-06-10
  • 7.116.0 - 2024-05-17
  • 7.115.0 - 2024-05-16
  • 7.114.0 - 2024-05-08
  • 7.113.0 - 2024-05-02
  • 7.112.2 - 2024-04-24
  • 7.112.1 - 2024-04-23
  • 7.112.0 - 2024-04-23
  • 7.111.0 - 2024-04-18
  • 7.110.1 - 2024-04-15
  • 7.110.0 - 2024-04-11
  • 7.109.0 - 2024-03-28
  • 7.108.0 - 2024-03-22
  • 7.107.0 - 2024-03-14
  • 7.106.1 - 2024-03-11
  • 7.106.0 - 2024-03-08
  • 7.105.0 - 2024-03-04
  • 7.104.0 - 2024-02-29
  • 7.103.0 - 2024-02-27
  • 7.102.1 - 2024-02-22
  • 7.102.0 - 2024-02-20
  • 7.101.1 - 2024-02-15
  • 7.101.0 - 2024-02-13
  • 7.100.1 - 2024-02-07
  • 7.100.0 - 2024-02-06
  • 7.99.0 - 2024-01-30
  • 7.98.0 - 2024-01-25
  • 7.97.0 - 2024-01-25
  • 7.95.0 - 2024-01-23
  • 7.94.1 - 2024-01-19
  • 7.93.0 - 2024-01-10
  • 7.92.0 - 2024-01-04
  • 7.91.0 - 2023-12-22
  • 7.90.0 - 2023-12-20
  • 7.89.0 - 2023-12-19
  • 7.88.0 - 2023-12-14
  • 7.87.0 - 2023-12-13
  • 7.86.0 - 2023-12-07
  • 7.85.0 - 2023-12-04
  • 7.84.0 - 2023-11-30
  • 7.83.0 - 2023-11-28
  • 7.82.0 - 2023-11-27
  • 7.81.1 - 2023-11-21
  • 7.81.0 - 2023-11-20
  • 7.80.2-alpha.1 - 2023-11-15
  • 7.80.2-alpha.0 - 2023-11-14
  • 7.80.1 - 2023-11-14
  • 7.80.0 - 2023-11-09
  • 7.79.0 - 2023-11-08
  • 7.78.0 - 2023-11-08
  • 7.77.0 - 2023-10-31
  • 7.76.0 - 2023-10-27
  • 7.75.1 - 2023-10-25
  • 7.75.0 - 2023-10-24
  • 7.74.2-alpha.1 - 2023-10-23
  • 7.74.2-alpha.0 - 2023-10-19
  • 7.74.1 - 2023-10-17
from @sentry/vue GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade @sentry/vue from 7.74.1 to 8.11.0.

See this package in npm:
@sentry/vue

See this project in Snyk:
https://app.snyk.io/org/cachiman/project/8ac88545-a113-4dfa-95c6-03bb1642e649?utm_source=github-cloud-app&utm_medium=referral&page=upgrade-pr
Copy link

google-cla bot commented Jul 16, 2024

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants