[Snyk] Upgrade moment-timezone from 0.5.27 to 0.5.43

[john-dot-oa]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade moment-timezone from 0.5.27 to 0.5.43.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 16 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2023-03-31.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Directory Traversal SNYK-JS-MOMENT-2440688	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: moment-timezone

• 0.5.43 - 2023-03-31
  
  • Updated data to IANA TZDB 2023c
• 0.5.42 - 2023-03-24
  
  • Updated data to IANA TZDB 2023b
• 0.5.41 - 2023-02-25
  
  • Updated moment npm dependency to 2.29.4 to remove automated warnings about insecure dependencies #1004.
    Moment Timezone still works with core Moment 2.9.0 and higher.
  • Updated all dev dependencies including UglifyJS, which produces the minified builds.
  • Added deprecation warning to the pre-built moment-timezone-with-data-2012-2022 bundles #1035.
    Use the rolling moment-timezone-with-data-10-year-range files instead.
• 0.5.40 - 2022-12-11
  
  • Updated data to IANA TZDB 2022g
• 0.5.39 - 2022-11-14
  
  • Updated data to IANA TZDB 2022f
• 0.5.38 - 2022-10-15
  
  • Updated data to IANA TZDB 2022e
  • Added moment.tz.dataVersion property to TypeScript definitions #930
  • Removed temporary .tar.gz files from npm releases #1000
• 0.5.37 - 2022-08-25
• 0.5.36 - 2022-08-25
• 0.5.35 - 2022-08-23
• 0.5.34 - 2021-11-10
• 0.5.33 - 2021-02-06
• 0.5.32 - 2020-11-14
• 0.5.31 - 2020-05-17
• 0.5.30 - 2020-05-17
• 0.5.29 - 2020-05-16
• 0.5.28 - 2020-02-21
• 0.5.27 - 2019-10-16

from moment-timezone GitHub release notes

Commit messages

Package name: moment-timezone

• 2448cdc Build moment-timezone 0.5.43
• 682aa63 Bump version to 0.5.43
• e565ae4 Merge pull request #1053 from moment/data/2023c
• 8506787 data: Add 2023c
• 81ce252 Bump version in moment-timezone-utils.js
• 4116a04 Build moment-timezone 0.5.42
• c4a1ce1 changelog: Add 0.5.42
• d702a49 Bump version to 0.5.42
• c008188 Merge pull request #1047 from moment/data/2023b
• f094113 tests: Fix country tests for 2023b
• 81e6c81 data: Add 2023b
• a8d0fa1 Bump json5 via npm audit fix
• 98d3add Build moment-timezone 0.5.41
• 78cf3ad changelog: Add 0.5.41
• cd35dc6 Bump version to 0.5.41
• 76f5a75 Re-number build tasks to match new running order
• ace9a77 Fix broken badges in README
• 8080504 Bump moment dependency to 2.29.4 (#1004)
• 61b14d6 Add deprecation warning to 2012-2022 pre-built files (#1036)
• fc29369 Bump remaining grunt-contrib packages
• c83479e tests: Fix guess tests for 2023
• e501621 Bump y18n from 4.0.0 to 4.0.3 (#1026)
• 0a7b5dd Bump shelljs and grunt-contrib-jshint (#1025)
• 6078ad6 Bump ejs and grunt-contrib-nodeunit (#1013)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs