Argembarger
Argembarger
DIAdiscord.js - Imagine an app
Created by Argembarger on 4/18/2024 in #djs-questions
Roadmap? Any upcoming releases planned?
Ahh sweet, I didn't have that channel visible. Many thanks!
8 replies
DIAdiscord.js - Imagine an app
Created by Argembarger on 4/18/2024 in #djs-questions
Roadmap? Any upcoming releases planned?
This is all a community effort in a chaotic web ecosystem and no one is owed any concrete information about future releases, but, would be reassuring 🙂
8 replies
DIAdiscord.js - Imagine an app
Created by Argembarger on 4/18/2024 in #djs-questions
Roadmap? Any upcoming releases planned?
I'm not gonna downgrade discord.js over a low-severity security warning, but, I'm hoping a new version is in the works that resolves whatever this is
8 replies
DIAdiscord.js - Imagine an app
Created by Argembarger on 4/18/2024 in #djs-questions
Roadmap? Any upcoming releases planned?
Also, when I run npm audit, it seems like it doesn't like 14.14.1 and wants to go back to 14.12.1
undici <=5.28.3
Undici proxy-authorization header not cleared on cross-origin redirect in fetch - https://github.com/advisories/GHSA-3787-6prv-h9w3
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline - https://github.com/advisories/GHSA-m4v8-wqvr-p9f7
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect - https://github.com/advisories/GHSA-9qxr-qj54-h672
fix available via `npm audit fix --force`
Will install discord.js@14.12.1, which is a breaking change
node_modules/undici
@discordjs/rest 2.0.1-dev.1690848847-1af7e5a0b.0 - 2.3.0-dev.1707178154-3755e66d4
Depends on vulnerable versions of undici
node_modules/@discordjs/rest
@discordjs/ws >=1.0.1-dev.1690848792-1af7e5a0b.0
Depends on vulnerable versions of @discordjs/rest
node_modules/@discordjs/ws
discord.js 14.0.0-dev.1640779371.9cdc448 - 14.0.0-dev.1657757514-fe34f48 || 14.12.2-dev.1690891477-7295a3a94.0 - 14.15.0-dev.1713312606-6759f5b9c
Depends on vulnerable versions of @discordjs/rest
Depends on vulnerable versions of @discordjs/ws
Depends on vulnerable versions of undici
node_modules/discord.js
undici <=5.28.3
Undici proxy-authorization header not cleared on cross-origin redirect in fetch - https://github.com/advisories/GHSA-3787-6prv-h9w3
Undici's Proxy-Authorization header not cleared on cross-origin redirect for dispatch, request, stream, pipeline - https://github.com/advisories/GHSA-m4v8-wqvr-p9f7
Undici's fetch with integrity option is too lax when algorithm is specified but hash value is in incorrect - https://github.com/advisories/GHSA-9qxr-qj54-h672
fix available via `npm audit fix --force`
Will install discord.js@14.12.1, which is a breaking change
node_modules/undici
@discordjs/rest 2.0.1-dev.1690848847-1af7e5a0b.0 - 2.3.0-dev.1707178154-3755e66d4
Depends on vulnerable versions of undici
node_modules/@discordjs/rest
@discordjs/ws >=1.0.1-dev.1690848792-1af7e5a0b.0
Depends on vulnerable versions of @discordjs/rest
node_modules/@discordjs/ws
discord.js 14.0.0-dev.1640779371.9cdc448 - 14.0.0-dev.1657757514-fe34f48 || 14.12.2-dev.1690891477-7295a3a94.0 - 14.15.0-dev.1713312606-6759f5b9c
Depends on vulnerable versions of @discordjs/rest
Depends on vulnerable versions of @discordjs/ws
Depends on vulnerable versions of undici
node_modules/discord.js
8 replies