[Snyk] Security upgrade rollup from 3.29.5 to 3.30.0#19
Conversation
The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-ROLLUP-15340920
|
This minor version upgrade introduces a new validation check that could affect existing build configurations. Key Change:
This change prevents potentially insecure or incorrect file writes. While most configurations will be unaffected, any build that inadvertently configured an output path to traverse up from the destination directory (e.g., using Verification required: It is recommended to verify that your Rollup configuration does not attempt to write files outside of the intended output directory. Source: Release Notes
|
⛔ Snyk checks have failed. 32 issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Snyk has created this PR to fix 1 vulnerabilities in the pnpm dependencies of this project.
Snyk changed the following file(s):
packages/backend/package.jsonVulnerabilities that will be fixed with an upgrade:
SNYK-JS-ROLLUP-15340920
Breaking Change Risk
Important
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Directory Traversal