[Snyk] Upgrade serve from 11.3.2 to 13.0.2

[snyk-bot]

Snyk has created this PR to upgrade serve from 11.3.2 to 13.0.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2021-11-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: serve

• 13.0.2 - 2021-11-04
  

  Patches

  • Updated the screenshot: c53be04
  • Use Safari for screenshot: d8870a8
• 13.0.1 - 2021-11-04
  

  Patches

  • Security(deps): boxen@5.1.2 to fix CVE-2021-3807: #676
  • Switch to npm: #681

  Credits

  Huge thanks to @ AviVahl for helping!

• 13.0.0 - 2021-11-04
  

  Major Changes

  • Change default port from 5000 to 3000: #680

  Credits

  Huge thanks to @ kud for helping!

• 12.0.1 - 2021-09-09
  

  Changes

  • HTTPS: Adding Ability to Send Passphrase to createServer: #655
  • Fix network not being shown anymore: #661

  Credits

  Huge thanks to @ wilbert-abreu and @ marcofugaro for helping!

• 12.0.0 - 2021-06-08
  

  Major Changes

  • Update clipboardy to v2.3.0 (Drops support for Node 8, reached end of life): #612

  Minor Changes

  • Add -p port flag to the help command output: #607
  • Add flag for disabling port switching: #579

  Patches

  • Bump lodash from 4.17.15 to 4.17.19: #619
  • Bump ini from 1.3.5 to 1.3.7: #638
  • Fix: Bump ajv to 6.12.6: #635
  • Update repo location in package.json to be vercel/serve: #641
  • Fix spacing for CORS documentation: #610
  • Fix undefined local network address: #572
  • Bump lodash from 4.17.19 to 4.17.21: #654

  Credits

  Huge thanks to @ hail2u, @ Oscar-21, @ jespertheend, @ rajivshah3, @ z-svoboda-mob, @ IvanSanchez, and @ wabscale for helping!

• 11.3.2 - 2020-06-05
  

  Patches

  • Document CORS option: #599
  • Update serve-handler to v6.1.3: 04b42e7
  • Regenerate yarn.lock file: 059c852
  • Update Readme to use Vercel instead of Zeit: f3ecedb

  Credits

  Huge thanks to @ brandonarbini for helping!

from serve GitHub release notes

Commit messages

Package name: serve

• 3e59bc1 13.0.2
• d8870a8 Use Safari for screenshot
• c53be04 Updated the screenshot
• c630db7 13.0.1
• 07cc160 Switch to npm (Opossum is causing DepracationWarning from Buffer() #681)
• 389e9a4 security(deps): boxen@5.1.2 to fix CVE-2021-3807 ([Snyk] Upgrade tape from 5.5.3 to 5.6.0 #676)
• 247b383 13.0.0
• 168d4b2 Change default port from `5000` to `3000` (chore: update CI to include build+test:headless #680)
• 30b0673 12.0.1
• 79ca17c Fix network not being shown anymore (docs: change example of error threshold section #661)
• e3f1e84 HTTPS: Adding Ability to Send Passphrase to createServer (support new LTS 18.x ? #655)
• d941baa 12.0.0
• 6341041 Breaking: Update `clipboardy` to v2.3.0 (drops support for Node 8, end of life) ([Snyk] Upgrade: @babel/core, @babel/preset-env #612)
• 3281c57 Bump lodash from 4.17.19 to 4.17.21 ([Snyk] Upgrade husky from 7.0.4 to 8.0.0 #654)
• a85bd9d Add flag for disabling port switching (chore: updating node.js versions #579)
• b71af1a Fix undefined local network address (chore: release 6.1.0 #572)
• e3fe70a Fix spacing for CORS documentation ([Snyk] Upgrade webpack-cli from 4.9.0 to 4.9.1 #610)
• 818b5e9 Add `-p` port flag to the help command output. ([Snyk] Upgrade webpack-cli from 4.8.0 to 4.9.0 #607)
• 61731b1 Update repo location in package.json to be vercel/serve ([Snyk] Upgrade webpack from 4.46.0 to 5.67.0 #641)
• fbf6376 fix: Bump ajv to 6.12.6 (Getting warning during circuit breaker usage "Warning: Possible perf_hooks memory leak detected." #635)
• cd7dcf2 Bump ini from 1.3.5 to 1.3.7 ([Snyk] Upgrade @babel/core from 7.16.10 to 7.16.12 #638)
• 850cc0b Bump lodash from 4.17.15 to 4.17.19 ([Snyk] Upgrade eslint-plugin-promise from 5.1.0 to 5.1.1 #619)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs