[Snyk] Upgrade grunt-jsonlint from 2.1.2 to 2.1.3

[snyk-bot]

Snyk has created this PR to upgrade grunt-jsonlint from 2.1.2 to 2.1.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 9 months ago, on 2020-07-22.

Release notes

Package name: grunt-jsonlint

• 2.1.3 - 2020-07-22
  

  Bump version to 2.1.3.

• 2.1.2 - 2020-03-15
  

  Version 2.1.2

from grunt-jsonlint GitHub release notes

Commit messages

Package name: grunt-jsonlint

• 3c0a7d4 Bump version to 2.1.3.
• a8d255e Upgrade eslint-plugin-import.
• 622f73f Upgrade mocha.
• a482c9d Upgrade sinon
• b2a8c59 npm audit fix
• c8a150f Bump lodash from 4.17.15 to 4.17.19

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mistaken-pull-closer]

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
661c7450-9c11-11eb-938c-3838d4c4f0e8

[guardrails]

⚠️ We detected 118 security issues in this pull request:
Mode: paranoid | Total findings: 118 | Considered vulnerability: 0

Hard-Coded Secrets (2)

jquery/test/unit/event.js

Line 1182 in 1d11230

$child.trigger( { "type": "foo", "secret": "boo!" } );

jquery/test/unit/selector.js

Line 2115 in 1d11230

assert.equal( jQuery.escapeSelector( "a0123456789b" ), "a0123456789b",

More info on how to fix Hard-Coded Secrets in General.

---

Insecure File Management (41)

jquery/Gruntfile.js

Line 9 in 1d11230

fs.readFileSync( filepath, { encoding: "utf8" } )

jquery/build/release.js

Line 25 in 1d11230

var contents = fs.readFileSync( filepath, "utf8" );

jquery/build/release.js

Line 27 in 1d11230

fs.writeFileSync( filepath, contents, "utf8" );

jquery/build/release/cdn.js

Line 46 in 1d11230

text = fs.readFileSync( builtFile, "utf8" )

jquery/build/release/cdn.js

Line 51 in 1d11230

fs.writeFileSync( releaseFile, text );

jquery/build/release/cdn.js

Line 74 in 1d11230

output = fs.createWriteStream(

jquery/build/release/cdn.js

Line 93 in 1d11230

fs.writeFileSync( md5file, sum );

jquery/build/release/cdn.js

Line 97 in 1d11230

archiver.append( fs.createReadStream( file ),

jquery/build/release/dist.js

Line 8 in 1d11230

const pkg = require( `${ Release.dir.repo }/package.json` );

jquery/build/release/dist.js

Line 73 in 1d11230

const readme = await fs.readFile(

jquery/build/release/dist.js

Line 106 in 1d11230

await fs.writeFile( `${ Release.dir.dist }/bower.json`, generateBower() );

jquery/build/release/dist.js

Line 108 in 1d11230

await fs.writeFile( `${ Release.dir.dist }/README.md`,

jquery/build/tasks/build.js

Line 102 in 1d11230

fs.readdirSync( `${ srcFolder }/${ prepend }${ module }` ),

jquery/build/tasks/build.js

Line 154 in 1d11230

fs.readdirSync( `${ srcFolder }/${ module }` ),

jquery/build/tasks/dist.js

Line 33 in 1d11230

text = fs.readFileSync( filename, "utf8" );

jquery/build/tasks/node_smoke_tests.js

Line 15 in 1d11230

fs.readdirSync( testsDir )

jquery/build/tasks/node_smoke_tests.js

Line 17 in 1d11230

fs.statSync( testsDir + testFilePath ).isFile() &&

jquery/build/tasks/qunit_fixture.js

Line 8 in 1d11230

fs.writeFileSync(

jquery/build/tasks/sourcemap.js

Line 13 in 1d11230

var text = fs.readFileSync( minLoc, "utf8" )

jquery/build/tasks/sourcemap.js

Line 15 in 1d11230

fs.writeFileSync( minLoc, text );

jquery/src/ajax/xhr.js

Line 24 in 1d11230

xhr.open(

jquery/test/data/jquery-1.9.1.js

Line 8753 in 1d11230

xhr.open( s.type, s.url, s.async, s.username, s.password );

jquery/test/data/jquery-1.9.1.js

Line 8755 in 1d11230

xhr.open( s.type, s.url, s.async );

jquery/test/data/testinit.js

Line 329 in 1d11230

require( [ parentUrl + "test/data/testrunner.js" ], function() {

jquery/test/data/testinit.js

Line 366 in 1d11230

require( [ parentUrl + "test/" + dep ], loadDep );

jquery/test/data/testinit.js

Line 389 in 1d11230

require( [ "http://swarm.jquery.org/js/inject.js?" + ( new Date() ).getTime() ],

jquery/test/jquery.js

Line 89 in 1d11230

require( [ src ], loadTests );

jquery/test/jquery.js

Line 91 in 1d11230

require( [ src ] );

jquery/test/middleware-mockserver.js

Line 134 in 1d11230

var body = fs.readFileSync( __dirname + "/data/with_fries.xml" ).toString();

jquery/test/middleware-mockserver.js

Line 214 in 1d11230

var body = fs.readFileSync( __dirname + "/data/test.include.html" ).toString();

jquery/test/middleware-mockserver.js

Line 223 in 1d11230

var body = fs.readFileSync( __dirname + "/data/csp.include.html" ).toString();

jquery/test/middleware-mockserver.js

Line 232 in 1d11230

var body = fs.readFileSync(

jquery/test/middleware-mockserver.js

Line 241 in 1d11230

var body = fs.readFileSync(

jquery/test/data/mock.php

Line 117 in 1d11230

$text = json_encode( file_get_contents( __DIR__ . '/with_fries.xml' ) );

jquery/test/data/mock.php

Line 206 in 1d11230

$html = file_get_contents( __DIR__ . '/test.include.html' );

jquery/test/data/mock.php

Line 214 in 1d11230

echo file_get_contents( __DIR__ . '/csp.include.html' );

jquery/test/data/mock.php

Line 221 in 1d11230

echo file_get_contents( __DIR__ . '/csp-nonce' . $test . '.html' );

jquery/test/data/mock.php

Line 227 in 1d11230

echo file_get_contents( __DIR__ . '/csp-ajax-script.html' );

jquery/test/data/mock.php

Line 231 in 1d11230

file_put_contents( $this->cspFile, 'error' );

jquery/test/data/mock.php

Line 235 in 1d11230

file_put_contents( $this->cspFile, '' );

jquery/test/data/mock.php

Line 236 in 1d11230

unlink( $this->cspFile );

More info on how to fix Insecure File Management in Javascript and PHP.

---

Insecure Use of Regular Expressions (48)

jquery/build/tasks/build.js

Line 24 in 1d11230

.split( /[\x20\t]*\/\/ @CODE\n(?:[\x20\t]*\/\/[^\n]+\n)*/ );

jquery/src/css/var/rnumnonpx.js

Line 3 in 1d11230

export default new RegExp( "^(" + pnum + ")(?!px)[a-z%]+$", "i" );

jquery/src/event.js

Line 244 in 1d11230

new RegExp( "(^|\\.)" + namespaces.join( "\\.(?:.*\\.|)" ) + "(\\.|$)" );

jquery/src/event/trigger.js

Line 54 in 1d11230

new RegExp( "(^|\\.)" + namespaces.join( "\\.(?:.*\\.|)" ) + "(\\.|$)" ) :

jquery/src/selector.js

Line 73 in 1d11230

rwhitespace = new RegExp( whitespace + "+", "g" ),

jquery/src/selector.js

Line 74 in 1d11230

rtrim = new RegExp( "^" + whitespace + "+|((?:^|[^\\\\])(?:\\\\.)*)" + whitespace + "+$", "g" ),

jquery/src/selector.js

Line 76 in 1d11230

rcomma = new RegExp( "^" + whitespace + "*," + whitespace + "*" ),

jquery/src/selector.js

Line 77 in 1d11230

rcombinators = new RegExp( "^" + whitespace + "*([>+~]|" + whitespace + ")" +

jquery/src/selector.js

Line 79 in 1d11230

rdescend = new RegExp( whitespace + "|>" ),

jquery/src/selector.js

Line 81 in 1d11230

rpseudo = new RegExp( pseudos ),

jquery/src/selector.js

Line 82 in 1d11230

ridentifier = new RegExp( "^" + identifier + "$" ),

jquery/src/selector.js

Line 85 in 1d11230

ID: new RegExp( "^#(" + identifier + ")" ),

jquery/src/selector.js

Line 86 in 1d11230

CLASS: new RegExp( "^\\.(" + identifier + ")" ),

jquery/src/selector.js

Line 87 in 1d11230

TAG: new RegExp( "^(" + identifier + "|[*])" ),

jquery/src/selector.js

Line 88 in 1d11230

ATTR: new RegExp( "^" + attributes ),

jquery/src/selector.js

Line 89 in 1d11230

PSEUDO: new RegExp( "^" + pseudos ),

jquery/src/selector.js

Line 90 in 1d11230

CHILD: new RegExp(

jquery/src/selector.js

Line 94 in 1d11230

bool: new RegExp( "^(?:" + booleans + ")$", "i" ),

jquery/src/selector.js

Line 98 in 1d11230

needsContext: new RegExp( "^" + whitespace +

jquery/src/selector.js

Line 113 in 1d11230

runescape = new RegExp( "\\\\[\\da-fA-F]{1,6}" + whitespace +

jquery/src/selector.js

Line 616 in 1d11230

( pattern = new RegExp( "(^|" + whitespace + ")" + className +

jquery/src/selector/rbuggyQSA.js

Line 4 in 1d11230

var rbuggyQSA = isIE && new RegExp(

jquery/src/var/rcssNum.js

Line 3 in 1d11230

export default new RegExp( "^(?:([+-])=|)(" + pnum + ")([a-z%]*)$", "i" );

jquery/test/data/jquery-1.9.1.js

Line 86 in 1d11230

rvalidbraces = /(?:^|:|,)(?:\s*\[)+/g,

jquery/test/data/jquery-1.9.1.js

Line 2950 in 1d11230

tmp = tmp[ 2 ] && new RegExp( "(^|\\.)" + namespaces.join( "\\.(?:.*\\.|)" ) + "(\\.|$)" );

jquery/test/data/jquery-1.9.1.js

Line 3029 in 1d11230

new RegExp( "(^|\\.)" + namespaces.join( "\\.(?:.*\\.|)" ) + "(\\.|$)" ) :

jquery/test/data/jquery-1.9.1.js

Line 3894 in 1d11230

rtrim = new RegExp( "^" + whitespace + "+|((?:^|[^\\\\])(?:\\\\.)*)" + whitespace + "+$", "g" ),

jquery/test/data/jquery-1.9.1.js

Line 3896 in 1d11230

rcomma = new RegExp( "^" + whitespace + "*," + whitespace + "*" ),

jquery/test/data/jquery-1.9.1.js

Line 3897 in 1d11230

rcombinators = new RegExp( "^" + whitespace + "*([\\x20\\t\\r\\n\\f>+~])" + whitespace + "*" ),

jquery/test/data/jquery-1.9.1.js

Line 3898 in 1d11230

rpseudo = new RegExp( pseudos ),

jquery/test/data/jquery-1.9.1.js

Line 3899 in 1d11230

ridentifier = new RegExp( "^" + identifier + "$" ),

jquery/test/data/jquery-1.9.1.js

Line 3902 in 1d11230

"ID": new RegExp( "^#(" + characterEncoding + ")" ),

jquery/test/data/jquery-1.9.1.js

Line 3903 in 1d11230

"CLASS": new RegExp( "^\\.(" + characterEncoding + ")" ),

jquery/test/data/jquery-1.9.1.js

Line 3904 in 1d11230

"NAME": new RegExp( "^\\[name=['\"]?(" + characterEncoding + ")['\"]?\\]" ),

jquery/test/data/jquery-1.9.1.js

Line 3905 in 1d11230

"TAG": new RegExp( "^(" + characterEncoding.replace( "w", "w*" ) + ")" ),

jquery/test/data/jquery-1.9.1.js

Line 3906 in 1d11230

"ATTR": new RegExp( "^" + attributes ),

jquery/test/data/jquery-1.9.1.js

Line 3907 in 1d11230

"PSEUDO": new RegExp( "^" + pseudos ),

jquery/test/data/jquery-1.9.1.js

Line 3908 in 1d11230

"CHILD": new RegExp( "^:(only|first|last|nth|nth-last)-(child|of-type)(?:\\(" + whitespace +

jquery/test/data/jquery-1.9.1.js

Line 3914 in 1d11230

"needsContext": new RegExp( "^" + whitespace + "*[>+~]|:(even|odd|eq|gt|lt|nth|first|last)(?:\\(" +

jquery/test/data/jquery-1.9.1.js

Line 4390 in 1d11230

rbuggyQSA = new RegExp( rbuggyQSA.join( "|" ) );

jquery/test/data/jquery-1.9.1.js

Line 4391 in 1d11230

rbuggyMatches = new RegExp( rbuggyMatches.join( "|" ) );

jquery/test/data/jquery-1.9.1.js

Line 4805 in 1d11230

( pattern = new RegExp( "(^|" + whitespace + ")" + className + "(" + whitespace + "|$)" ) ) &&

jquery/test/data/jquery-1.9.1.js

Line 6023 in 1d11230

rnoshimcache = new RegExp( "<(?:" + nodeNames + ")[\\s/>]", "i" ),

jquery/test/data/jquery-1.9.1.js

Line 6818 in 1d11230

rnumsplit = new RegExp( "^(" + core_pnum + ")(.*)$", "i" ),

jquery/test/data/jquery-1.9.1.js

Line 6819 in 1d11230

rnumnonpx = new RegExp( "^(" + core_pnum + ")(?!px)[a-z%]+$", "i" ),

jquery/test/data/jquery-1.9.1.js

Line 6820 in 1d11230

rrelNum = new RegExp( "^([+-])=(" + core_pnum + ")", "i" ),

jquery/test/data/jquery-1.9.1.js

Line 8906 in 1d11230

rfxnum = new RegExp( "^(?:([+-])=|)(" + core_pnum + ")([a-z%]*)$", "i" ),

jquery/test/unit/support.js

Line 84 in 1d11230

} else if ( /\b\d+(\.\d+)+ safari/i.test( userAgent ) ) {

More info on how to fix Insecure Use of Regular Expressions in Javascript.

---

Insecure Use of Dangerous Function (2)

jquery/build/tasks/lib/spawn_test.js

Line 7 in 1d11230

var spawn = require( "child_process" ).spawn;

jquery/test/jquery.js

Line 78 in 1d11230

eval( dynamicImportSource );

More info on how to fix Insecure Use of Dangerous Function in Javascript.

---

Information Disclosure (1)

jquery/test/data/json_obj.js

Line 1 in 1d11230

{ "data": {"lang": "en", "length": 25} }

More info on how to fix Information Disclosure in Javascript.

---

Vulnerable Libraries (1)

• [email protected] upgrade to >3.5.0

More info on how to fix Vulnerable Libraries in Javascript.

---

Insecure Processing of Data (21)

jquery/test/data/mock.php

Line 9 in 1d11230

echo $req->query['response'];

jquery/test/data/mock.php

Line 68 in 1d11230

echo $req->query['callback'] . "(" . json_encode( [ 'headers' => $headers ] ) . ")";

jquery/test/data/mock.php

Line 109 in 1d11230

echo $callback . '([ {"name": "John", "age": 21}, {"name": "Peter", "age": 25 } ])';

jquery/test/data/mock.php

Line 111 in 1d11230

echo $callback . '({ "data": {"lang": "en", "length": 25} })';

jquery/test/data/mock.php

Line 118 in 1d11230

echo "$callback($text)\n";

jquery/test/data/mock.php

Line 142 in 1d11230

echo "$key: " . $req->headers[ strtoupper( $key ) ] . "\n";

jquery/test/data/mock.php

Line 149 in 1d11230

echo file_get_contents('php://input');

jquery/test/data/mock.php

Line 153 in 1d11230

echo $_SERVER['QUERY_STRING'];

jquery/test/data/mock.php

Line 157 in 1d11230

echo $req->method;

jquery/test/data/mock.php

Line 162 in 1d11230

echo '<div id="method">' . $req->method . '</div>';

jquery/test/data/mock.php

Line 163 in 1d11230

echo '<div id="query">' . $_SERVER['QUERY_STRING'] . '</div>';

jquery/test/data/mock.php

Line 164 in 1d11230

echo '<div id="data">' . file_get_contents('php://input') . '</div>';

jquery/test/data/mock.php

Line 178 in 1d11230

echo "ETag: $etag\n";

jquery/test/data/mock.php

Line 180 in 1d11230

echo "If-None-Match: $ifNoneMatch\n";

jquery/test/data/mock.php

Line 194 in 1d11230

echo "Last-Modified: $ts\n";

jquery/test/data/mock.php

Line 196 in 1d11230

echo "If-Modified-Since: $ims\n";

jquery/test/data/mock.php

Line 208 in 1d11230

echo $html;

jquery/test/data/mock.php

Line 214 in 1d11230

echo file_get_contents( __DIR__ . '/csp.include.html' );

jquery/test/data/mock.php

Line 221 in 1d11230

echo file_get_contents( __DIR__ . '/csp-nonce' . $test . '.html' );

jquery/test/data/mock.php

Line 227 in 1d11230

echo file_get_contents( __DIR__ . '/csp-ajax-script.html' );

jquery/test/data/mock.php

Line 246 in 1d11230

echo $callback . '( {"status": 404, "msg": "Not Found"} )';

More info on how to fix Insecure Processing of Data in PHP.

---

Insecure Use of Language/Framework API (1)

jquery/test/data/mock.php

Line 64 in 1d11230

array_map( 'strtolower', array_keys( $req->headers ) ),

More info on how to fix Insecure Use of Language/Framework API in PHP.

---

Insecure Use of Crypto (1)

jquery/test/data/mock.php

Line 168 in 1d11230

$hash = md5( $req->query['ts'] );

More info on how to fix Insecure Use of Crypto in PHP.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.