[Snyk] Upgrade @octokit/rest from 16.43.2 to 19.0.11

[ekmixon]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @octokit/rest from 16.43.2 to 19.0.11.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 97 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2023-05-20.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASHSET-1320032	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @octokit/rest

• 19.0.11 - 2023-05-20
  

  19.0.11 (2023-05-20)

  Bug Fixes

  • deps: upgrade @ octokit/* packages (#300) (f1b3579)
• 19.0.10 - 2023-05-20
  

  19.0.10 (2023-05-20)

  Bug Fixes

  • export type only RestEndpointMethodTypes (#299) (11f8e63), closes #298
• 19.0.9 - 2023-05-20
  

  19.0.9 (2023-05-20)

  Bug Fixes

  • build: replace pika with esbuild and tsc (#297) (5ca150f)
• 19.0.8 - 2023-05-14
  

  19.0.8 (2023-05-14)

  Bug Fixes

  • deps: bump plugin versions (#292) (9b047a0), closes #290
• 19.0.7 - 2023-01-21
  

  19.0.7 (2023-01-21)

  Bug Fixes

  • deps: update dependency @ octokit/plugin-rest-endpoint-methods to v7 (#258) (22bf083)
• 19.0.6 - 2023-01-21
  

  19.0.6 (2023-01-21)

  Bug Fixes

  • deps: update dependency @ octokit/plugin-paginate-rest to v6 (#257) (322d82b)
• 19.0.5 - 2022-10-13
  

  19.0.5 (2022-10-13)

  Bug Fixes

  • deps: update @ octokit/plugin-paginate-rest to v5 (#220) (9debac2)
• 19.0.4 - 2022-08-15
  

  19.0.4 (2022-08-15)

  Bug Fixes

  • deps: update dependency @ octokit/plugin-paginate-rest to v4 (#187) (4e18c8d)
• 19.0.3 - 2022-07-08
  

  19.0.3 (2022-07-08)

  Bug Fixes

  • deps: update dependency @ octokit/plugin-paginate-rest to v3 (#161) (670f477)
• 19.0.2 - 2022-07-08
  

  19.0.2 (2022-07-08)

  Bug Fixes

  • deps: update dependency @ octokit/plugin-rest-endpoint-methods to v6 (#162) (310c738)
• 19.0.1 - 2022-07-07
• 19.0.0 - 2022-07-07
• 18.12.0 - 2021-10-07
• 18.11.4 - 2021-09-30
• 18.11.3 - 2021-09-30
• 18.11.2 - 2021-09-27
• 18.11.1 - 2021-09-24
• 18.11.0 - 2021-09-22
• 18.10.0 - 2021-08-31
• 18.9.1 - 2021-08-16
• 18.9.0 - 2021-08-03
• 18.8.0 - 2021-08-02
• 18.7.2 - 2021-07-30
• 18.7.1 - 2021-07-23
• 18.7.0 - 2021-07-21
• 18.6.8 - 2021-07-20
• 18.6.7 - 2021-07-04
• 18.6.6 - 2021-06-30
• 18.6.5 - 2021-06-30
• 18.6.4 - 2021-06-29
• 18.6.3 - 2021-06-26
• 18.6.2 - 2021-06-24
• 18.6.1 - 2021-06-23
• 18.6.0 - 2021-06-12
• 18.5.6 - 2021-06-01
• 18.5.6-beta.1 - 2021-06-01
• 18.5.5 - 2021-05-28
• 18.5.4 - 2021-05-27
• 18.5.3 - 2021-04-21
• 18.5.2 - 2021-03-27
• 18.5.1 - 2021-03-26
• 18.5.0 - 2021-03-26
• 18.4.0 - 2021-03-24
• 18.3.5 - 2021-03-08
• 18.3.4 - 2021-03-05
• 18.3.3 - 2021-03-05
• 18.3.2 - 2021-03-03
• 18.3.1 - 2021-03-01
• 18.3.0 - 2021-02-26
• 18.2.1 - 2021-02-24
• 18.2.0 - 2021-02-18
• 18.1.1 - 2021-02-13
• 18.1.0 - 2021-02-03
• 18.0.15 - 2021-01-25
• 18.0.14 - 2021-01-22
• 18.0.13 - 2021-01-22
• 18.0.12 - 2020-12-04
• 18.0.11 - 2020-12-03
• 18.0.10 - 2020-12-02
• 18.0.9 - 2020-11-02
• 18.0.8 - 2020-11-01
• 18.0.7 - 2020-10-30
• 18.0.6 - 2020-09-14
• 18.0.5 - 2020-09-04
• 18.0.4 - 2020-08-26
• 18.0.3 - 2020-07-24
• 18.0.2 - 2020-07-23
• 18.0.1 - 2020-07-16
• 18.0.0 - 2020-06-11
• 17.11.2 - 2020-06-11
• 17.11.1 - 2020-06-11
• 17.11.0 - 2020-06-07
• 17.10.0 - 2020-06-04
• 17.9.3 - 2020-06-03
• 17.9.2 - 2020-05-18
• 17.9.1 - 2020-05-17
• 17.9.0 - 2020-05-11
• 17.8.0 - 2020-05-06
• 17.7.0 - 2020-05-05
• 17.6.0 - 2020-04-24
• 17.5.2 - 2020-04-22
• 17.5.1 - 2020-04-20
• 17.5.0 - 2020-04-20
• 17.4.0 - 2020-04-19
• 17.3.0 - 2020-04-15
• 17.2.1 - 2020-04-12
• 17.2.0 - 2020-04-08
• 17.1.4 - 2020-03-26
• 17.1.3 - 2020-03-25
• 17.1.2 - 2020-03-24
• 17.1.1 - 2020-03-20
• 17.1.0 - 2020-03-11
• 17.0.1 - 2020-03-10
• 17.0.0 - 2020-02-19
• 17.0.0-beta.3 - 2020-02-07
• 17.0.0-beta.2 - 2020-02-04
• 17.0.0-beta.1 - 2020-02-03
• 16.43.2 - 2020-06-24

from @octokit/rest GitHub release notes

Commit messages

Package name: @octokit/rest

• f1b3579 fix(deps): upgrade `@ octokit/*` packages (Feature/plugin/ebs default ebs encryption aquasecurity/cloudsploit#300)
• 11f8e63 fix: export type only `RestEndpointMethodTypes` (Feature/plugin/lambda log group fix aquasecurity/cloudsploit#299)
• 5ca150f fix(build): replace pika with esbuild and tsc (Feature/plugin/cloudtrail bucket ignore aquasecurity/cloudsploit#297)
• ca5b0d4 chore(deps): replace usage of `@ octokit/auth` module with respective packages (Feature/57 | Added CloudTrail Object Lock plugin, spec files aquasecurity/cloudsploit#286)
• 3b34085 build(deps): lock file maintenance
• 9b047a0 fix(deps): bump plugin versions (Feature/43 | Added AutoScaling Same Az Elb plugin, spec file aquasecurity/cloudsploit#292)
• f791645 build: add script to fix package.json before publishing (Feature/plugin/iam/less restrictive iam role policies aquasecurity/cloudsploit#293)
• 1f4603f build(deps): lock file maintenance (plugins/google/vpcnetwork/ | Fixed openSSH description typo aquasecurity/cloudsploit#288)
• 9775484 chore(deps): update dependency marked to v5
• 5ebec2f chore(deps): update dependency prettier to v2.8.8
• f8ff8e8 build(deps): lock file maintenance
• 16e819d build(deps): lock file maintenance (AWS Plugin: IAM Role Last Used aquasecurity/cloudsploit#283)
• 32f0655 build(deps): lock file maintenance (Feature/39 | Added Autoscaling Active Notification plugin, spec files aquasecurity/cloudsploit#280)
• c55da64 ci(action): update actions/add-to-project action to v0.5.0 (Feature: CloudSploit 2.0 aquasecurity/cloudsploit#281)
• 71f568b chore(deps): update dependency semantic-release to v21 (Feature/sploit 947 | Added Open Custom Ports plugin aquasecurity/cloudsploit#277)
• a6dd04f build(deps): lock file maintenance
• 0dcf672 chore(deps): update dependency prettier to v2.8.7 (Feature/sploit 947 | Added plugin and spec file for open custom ports aquasecurity/cloudsploit#276)
• 6ef9a54 chore(deps): update dependency prettier to v2.8.6 (Feature/sploit 935 | SQL server TLS version plugin aquasecurity/cloudsploit#275)
• 3f42c80 build(deps): lock file maintenance (Feature/23 root account active signing certificate aquasecurity/cloudsploit#274)
• 45b57ab chore(deps): update dependency typescript to v5 (Feature: ESLint Formatting aquasecurity/cloudsploit#273)
• c52c561 build(deps): lock file maintenance (Added plugin and spec file for launch wizard security groups | Removed duplicate test case from vpcEndpointAcceptance.spec.js aquasecurity/cloudsploit#272)
• 6265ca1 build(deps): lock file maintenance (Aqua CloudSploit Plugin Assessment aquasecurity/cloudsploit#271)
• eb61f77 build(deps): lock file maintenance
• ea7cbe1 ci(action): update actions/add-to-project action to v0.4.1 (Added vpcEndpointAcceptance plugin and spec file aquasecurity/cloudsploit#270)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[secure-code-warrior-for-github]

Micro-Learning Topic: Prototype pollution (Detected by phrase)

Matched on "Prototype Pollution"

What is this? (2min video)

By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf).

Try a challenge in Secure Code Warrior