[Snyk] Upgrade luxon from 3.0.1 to 3.2.1

[EmreBlky]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade luxon from 3.0.1 to 3.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.
• The recommended version was released a month ago, on 2023-01-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LUXON-3225081	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: luxon

• 3.2.1 - 2023-01-04
  

  bump to 3.2.1

• 3.2.0 - 2022-12-29
  

  bump to 3.2.0

• 3.1.1 - 2022-11-29
  

  bump to 3.1.1

• 3.1.0 - 2022-10-31
  

  bump to 3.1.0

• 3.0.4 - 2022-09-24
  

  bump to 3.0.4

• 3.0.3 - 2022-08-29
  

  bump to 3.0.3

• 3.0.2 - 2022-08-28
  

  bump to 3.0.2

• 3.0.1 - 2022-07-09

from luxon GitHub release notes

Commit messages

Package name: luxon

• b1fee58 bump to 3.2.1
• 5ab3bf6 fix rfc2822 regex
• 806467a preserve language tags (Logic for hiding "Send and Post" button in liaison tool broken ietf-tools/datatracker#1354)
• acc4952 bump dev dependencies
• c8f7191 bump to 3.2.0
• f9917c4 clarify equality docstring
• a6f2737 allow timeZone to be specified as an intl option
• f8285c7 find diff by duration hash instead of using repeated addition to cursor (#1340)
• d607d8f remove extra param from tokenForPart
• 7e5d24d Add Interval.toLocaleString() (#1320)
• 545ace5 bump to 3.1.1
• 3858a2a Fix tests (Telechat: ballot positions not correct for WG Actions ietf-tools/datatracker#1336)
• d6ea633 Add Settings.twoDigitCutoffYear to configure parsing 'yy' token. (Etherpad.tools.ietf.org:9000 doesn't work over IPv6 ietf-tools/datatracker#1330)
• ee02e99 bump to 3.1.0
• 7fe3eb0 feat: add rescale option to Duration.normalize method (WG acronym no longer given in chart-doc state change emails ietf-tools/datatracker#1299)
• 07af510 bump to 3.0.4
• f5093b9 Update text example of DATETIME_FULL formatting (#1282)
• 2ecde77 fix tests for node 18.9
• d84e44c DateTime.diff produces wrong results with unit quarter fix. (#1279)
• 42e1e4b upgrade node in test
• 7480340 Bump terser from 5.14.1 to 5.14.2 (Misleading subject line when Call for Adoption issued ietf-tools/datatracker#1246)
• 50197fe [package.json] add ./package.json to exports (Periodically rerun author extraction over old drafts ietf-tools/datatracker#1239)
• 0ebb436 bump to 3.0.3
• 6f5eb7a fix build mess

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs