Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade bcryptjs from 2.2.2 to 2.4.3 #6

Open
wants to merge 1 commit into
base: Java
Choose a base branch
from

Conversation

snyk-bot
Copy link

Snyk has created this PR to upgrade bcryptjs from 2.2.2 to 2.4.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 5 versions ahead of your current version.
  • The recommended version was released 5 years ago, on 2017-02-07.
Release notes
Package name: bcryptjs
  • 2.4.3 - 2017-02-07

    2.4.3

  • 2.4.2 - 2017-02-07

    Switched CC to use simple optimizations, also fixes #55

  • 2.4.1 - 2017-02-07
  • 2.4.0 - 2016-12-10

    Merge pull request #48 from JakobLofgren/master

    Add Promise example in Async code examples

  • 2.3.0 - 2015-09-24

    …ee #27

  • 2.2.2 - 2015-09-19

    Use constant time string compare, fixes #29

from bcryptjs GitHub release notes
Commit messages
Package name: bcryptjs
  • f7dd725 2.4.3
  • 2d20276 Actually build .min.js.gz
  • 9323764 Updated benchmark data and performance difference value
  • 2fa2b7c Switched CC to use simple optimizations, also fixes #55
  • 048c58a Cleanup
  • 5be2eb6 Post-merge; Fixed genSalt not defaulting to default rounds with omitted callback (promise), see #58
  • bfba82c Merge pull request #53 from cruxic/darn-fast
  • 0b7c11a Unroll the _encipher() loop. Saves ~80ms on my machine (at cost 12).
  • 9350b93 Small speedup by using >>> in the _encipher() loop which allows us to remove two `& 0xFF` instructions. This saves ~30ms on my machine (at cost 12).
  • 422f265 Huge speedup by using typed arrays (Int32Array) for P and S. I suspect this is because it packs the data tighter in RAM so it can fit in the CPU cache more easily.
  • 2ab0521 README: Corrected promises example, see #51
  • c473690 Updated travis to use g++-4.8
  • f0b5518 Merge pull request #48 from JakobLofgren/master
  • de55e41 Add Promise example in Async code examples
  • 21b7912 Merge pull request #40 from hellsan631/master
  • cc658b8 Merge pull request #43 from axelpale/patch-1
  • 4cb575d Merge pull request #47 from ftaiolivista/master
  • 8e83bac wrong bower main file
  • e7c3195 Fix #39: explain the used async mechanism
  • d79a012 added LTS versions 4 and 6 to travis for testing
  • 0646370 Documentation fixes
  • 8dabe51 Updated README on Promises
  • 215c421 Attempted first class support for Promise, see My new feature containers101/demochat#36, Alex containers101/demochat#38
  • 89c1940 Test for WCA on self instead of window for webworker compatibility, see Composetest amir-codefresh/demochat#27

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant