Skip to content

fix(nextjs,shared,astro): Vendor path-to-regexp - #4145

Merged
nikosdouvlis merged 2 commits into
mainfrom
nikos/path-to-regexp-vuln
Sep 11, 2024
Merged

fix(nextjs,shared,astro): Vendor path-to-regexp#4145
nikosdouvlis merged 2 commits into
mainfrom
nikos/path-to-regexp-vuln

Conversation

@nikosdouvlis

Copy link
Copy Markdown
Member

Description

Checklist

  • npm test runs as expected.
  • npm run build runs as expected.
  • (If applicable) JSDoc comments have been added or updated for any package exports
  • (If applicable) Documentation has been updated

Type of change

  • 🐛 Bug fix
  • 🌟 New feature
  • 🔨 Breaking change
  • 📖 Refactoring / dependency upgrade / documentation
  • other:

@changeset-bot

changeset-bot Bot commented Sep 11, 2024

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 8d68ce7

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 15 packages
Name Type
@clerk/nextjs Patch
@clerk/shared Patch
@clerk/astro Patch
@clerk/backend Patch
@clerk/chrome-extension Patch
@clerk/clerk-js Patch
@clerk/elements Patch
@clerk/clerk-expo Patch
@clerk/express Patch
@clerk/fastify Patch
@clerk/clerk-react Patch
@clerk/remix Patch
@clerk/clerk-sdk-node Patch
@clerk/tanstack-start Patch
@clerk/testing Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@nikosdouvlis
nikosdouvlis force-pushed the nikos/path-to-regexp-vuln branch from 4444c35 to 8d68ce7 Compare September 11, 2024 10:49
@anagstef

Copy link
Copy Markdown
Contributor

!snapshot

@clerk-cookie

Copy link
Copy Markdown
Collaborator

Hey @anagstef - the snapshot version command generated the following package versions:

Package Version
@clerk/astro 1.3.2-snapshot.v8d68ce7
@clerk/backend 1.11.1-snapshot.v8d68ce7
@clerk/chrome-extension 1.3.4-snapshot.v8d68ce7
@clerk/clerk-js 5.21.2-snapshot.v8d68ce7
@clerk/elements 0.15.2-snapshot.v8d68ce7
@clerk/clerk-expo 2.2.10-snapshot.v8d68ce7
@clerk/express 0.0.39-snapshot.v8d68ce7
@clerk/fastify 1.0.41-snapshot.v8d68ce7
@clerk/nextjs 5.5.2-snapshot.v8d68ce7
@clerk/clerk-react 5.8.2-snapshot.v8d68ce7
@clerk/remix 4.2.25-snapshot.v8d68ce7
@clerk/clerk-sdk-node 5.0.38-snapshot.v8d68ce7
@clerk/shared 2.7.2-snapshot.v8d68ce7
@clerk/tanstack-start 0.4.1-snapshot.v8d68ce7
@clerk/testing 1.2.21-snapshot.v8d68ce7

Tip: Use the snippet copy button below to quickly install the required packages.
@clerk/astro

npm i @clerk/astro@1.3.2-snapshot.v8d68ce7 --save-exact

@clerk/backend

npm i @clerk/backend@1.11.1-snapshot.v8d68ce7 --save-exact

@clerk/chrome-extension

npm i @clerk/chrome-extension@1.3.4-snapshot.v8d68ce7 --save-exact

@clerk/clerk-js

npm i @clerk/clerk-js@5.21.2-snapshot.v8d68ce7 --save-exact

@clerk/elements

npm i @clerk/elements@0.15.2-snapshot.v8d68ce7 --save-exact

@clerk/clerk-expo

npm i @clerk/clerk-expo@2.2.10-snapshot.v8d68ce7 --save-exact

@clerk/express

npm i @clerk/express@0.0.39-snapshot.v8d68ce7 --save-exact

@clerk/fastify

npm i @clerk/fastify@1.0.41-snapshot.v8d68ce7 --save-exact

@clerk/nextjs

npm i @clerk/nextjs@5.5.2-snapshot.v8d68ce7 --save-exact

@clerk/clerk-react

npm i @clerk/clerk-react@5.8.2-snapshot.v8d68ce7 --save-exact

@clerk/remix

npm i @clerk/remix@4.2.25-snapshot.v8d68ce7 --save-exact

@clerk/clerk-sdk-node

npm i @clerk/clerk-sdk-node@5.0.38-snapshot.v8d68ce7 --save-exact

@clerk/shared

npm i @clerk/shared@2.7.2-snapshot.v8d68ce7 --save-exact

@clerk/tanstack-start

npm i @clerk/tanstack-start@0.4.1-snapshot.v8d68ce7 --save-exact

@clerk/testing

npm i @clerk/testing@1.2.21-snapshot.v8d68ce7 --save-exact

@anagstef anagstef left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! 💯

"@clerk/astro": patch
---

Vendor path-to-regexp

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Vendor path-to-regexp
Vendor the `path-to-regexp` lib.

@nikosdouvlis
nikosdouvlis marked this pull request as ready for review September 11, 2024 14:24
@nikosdouvlis
nikosdouvlis merged commit be3b119 into main Sep 11, 2024
@nikosdouvlis
nikosdouvlis deleted the nikos/path-to-regexp-vuln branch September 11, 2024 14:24
@nikosdouvlis nikosdouvlis mentioned this pull request Sep 12, 2024
9 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants