[Snyk] Security upgrade typeorm from 0.3.7 to 0.3.18

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • apps/dev/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	No	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Prototype Pollution SNYK-JS-XML2JS-5414874	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: typeorm

The new version differs by 250 commits.

• b6ef306 updated glob version
• b5d2599 build(deps-dev): bump the npm_and_yarn group group with 1 update (Simplified signInPage example nextauthjs/next-auth#10591)
• 080528b fix: resolve circular dependency when using Vite ([Credentials provider] error API call been made to "/auth/auth/" instead of "/auth" nextauthjs/next-auth#10273)
• 338df16 feat: add support for table comment in MySQL (refactor: high-level tests nextauthjs/next-auth#10017)
• 15bc887 build: update CircleCI config & repair failing tests (JWT strings must contain exactly 2 period characters. Found: 4 nextauthjs/next-auth#10590)
• b5ec088 docs: update Chinese faq.md (Unexpected Modification of User Object in Next.js Authentication Callback nextauthjs/next-auth#10593)
• a00b1df feat: implement OR operator (Build error in Next.js 14.1.0 when using next-auth 5.0.0-beta.11 due to "cannot get final name for export 'default' of ./node_modules/.pnpm/jose@5.2.2/node_modules/jose/dist/node/esm/runtime/random.js" nextauthjs/next-auth#10086)
• dd59524 fix: prevent using absolute table path in migrations unless required (Added missing .js extension to import nextauthjs/next-auth#10123)
• 4329996 docs: update Soft-Delete, Restore-Soft-Delete examples (next.js 14.2.1 gives 404 on /auth/signin nextauthjs/next-auth#10585)
• 7ecc8f3 docs: updated id to _id (Improve Auth.js Intro nextauthjs/next-auth#10584)
• 8b4df5b fix: added fail callback while opening the database in Cordova (Issue with NextAuth, PrismaAdapter, and Resend with magic link: Not Saving name and tenantId in User Table and Passing Extra Props nextauthjs/next-auth#10566)
• 173910e fix: should automatically cache if alwaysEnable (Middleware doesn't work with Next Auth V5, "message": "There was a problem with the server configuration. Check the server logs for more information." nextauthjs/next-auth#10137)
• 73ee70b fix: correctly keep query.data from ormOption for commit / rollback subscribers (How can I access to request object from [...nextauth]/route? (NextJS 13/14, App Router) nextauthjs/next-auth#10151)
• e67d704 feat: nullable embedded entities (Pages configuration doesn't work in NextAuth V5 nextauthjs/next-auth#10289)
• 5c28154 feat: BeforeQuery and AfterQuery events (`basePath` is constructed incorrectly, resulting in invalid URLs nextauthjs/next-auth#10234)
• 0f11739 docs: fix typos (Custom redirect URL when signin? nextauthjs/next-auth#10243)
• b188c1e chore: initial setup of ESLint (Update Introduction with Enhancements nextauthjs/next-auth#10203)
• 25e6ecd fix: nested transactions issues ("OperationProcessingError: unexpected JWT "aud" (audience) claim value" on Google Provider callback nextauthjs/next-auth#10210)
• 3cda7ec feat: add isolated where statements (Forward credentials/access token from route handler in a request to another route handler nextauthjs/next-auth#10213)
• 149226d fix: backport postgres connection error handling to crdb (`@auth/sveltekit`: how to make working `adapter-node` build of the app? nextauthjs/next-auth#10177)
• 122b683 fix: mssql datasource testonborrow not affecting anything (JWT strings must contain exactly 2 period characters. Found: 4 nextauthjs/next-auth#10589)
• dc1bfed fix: resolve issues on upsert (authjs.session-token send to backend but is error nextauthjs/next-auth#10588)
• a939654 fix: remove dynamic require calls (How to use next-auth with mongodb v6.4? nextauthjs/next-auth#10196)
• f6b87e3 perf: improve SapQueryRunner performance (fix(docs): typo in docs for prisma adapter nextauthjs/next-auth#10198)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher

🚮 Removed packages: npm/@actions/core@1.9.0, npm/@aws-sdk/client-dynamodb@3.113.0, npm/@babel/cli@7.17.10, npm/@babel/core@7.18.5, npm/next-auth@4.18.5, npm/nodemailer@6.9.13

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source
New author	npm/@babel/plugin-syntax-import-meta@7.10.4	New Author: jlhwung Previous Author: nicolo-ribaudo	orphan: npm/@babel/plugin-syntax-import-meta@7.10.4
New author	npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4	New Author: jlhwung Previous Author: nicolo-ribaudo	orphan: npm/@babel/plugin-syntax-logical-assignment-operators@7.10.4
New author	npm/@babel/plugin-syntax-numeric-separator@7.10.4	New Author: jlhwung Previous Author: nicolo-ribaudo	orphan: npm/@babel/plugin-syntax-numeric-separator@7.10.4
Floating dependency	npm/@types/cacheable-request@6.0.3	Location: Package overview	orphan: npm/@types/cacheable-request@6.0.3
Floating dependency	npm/@types/cacheable-request@6.0.3	Location: Package overview	orphan: npm/@types/cacheable-request@6.0.3
Deprecated	npm/@babel/plugin-proposal-class-properties@7.18.6	Reason: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-class-properties instead.	orphan: npm/@babel/plugin-proposal-class-properties@7.18.6
Deprecated	npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6	Reason: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-nullish-coalescing-operator instead.	orphan: npm/@babel/plugin-proposal-nullish-coalescing-operator@7.18.6
Deprecated	npm/@babel/plugin-proposal-numeric-separator@7.18.6	Reason: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-numeric-separator instead.	orphan: npm/@babel/plugin-proposal-numeric-separator@7.18.6
Deprecated	npm/@babel/plugin-proposal-object-rest-spread@7.20.7	Reason: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-object-rest-spread instead.	orphan: npm/@babel/plugin-proposal-object-rest-spread@7.20.7
Deprecated	npm/@babel/plugin-proposal-optional-chaining@7.21.0	Reason: This proposal has been merged to the ECMAScript standard and thus this plugin is no longer maintained. Please use @babel/plugin-transform-optional-chaining instead.	orphan: npm/@babel/plugin-proposal-optional-chaining@7.21.0
New author	npm/@hapi/topo@5.1.0	New Author: devinivy Previous Author: hueniverse	orphan: npm/@hapi/topo@5.1.0
New author	npm/@sideway/formula@3.0.1	New Author: marsup Previous Author: hueniverse	orphan: npm/@sideway/formula@3.0.1
Dynamic require	npm/@babel/preset-modules@0.1.6-no-external-plugins	Location: Package overview	orphan: npm/@babel/preset-modules@0.1.6-no-external-plugins
Uses eval	npm/@ardatan/relay-compiler@12.0.0	Eval Type: eval Location: Package overview	orphan: npm/@ardatan/relay-compiler@12.0.0
Filesystem access	npm/@ardatan/relay-compiler@12.0.0	Module: fs Location: Package overview	orphan: npm/@ardatan/relay-compiler@12.0.0
Environment variable access	npm/@ardatan/relay-compiler@12.0.0	Env Vars: NODE_ENV Location: Package overview	orphan: npm/@ardatan/relay-compiler@12.0.0
Shell access	npm/@ardatan/relay-compiler@12.0.0	Module: child_process Location: Package overview	orphan: npm/@ardatan/relay-compiler@12.0.0
Environment variable access	npm/@ardatan/relay-compiler@12.0.0	Env Vars: NODE_ENV Location: Package overview	orphan: npm/@ardatan/relay-compiler@12.0.0
Trivial Package	npm/@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1	Location: Package overview	orphan: npm/@nicolo-ribaudo/eslint-scope-5-internals@5.1.1-v1
Dynamic require	npm/@graphql-tools/code-file-loader@7.3.23	Location: Package overview	orphan: npm/@graphql-tools/code-file-loader@7.3.23
Dynamic require	npm/@graphql-tools/code-file-loader@7.3.23	Location: Package overview	orphan: npm/@graphql-tools/code-file-loader@7.3.23
Filesystem access	npm/@graphql-tools/code-file-loader@7.3.23	Module: fs Location: Package overview	orphan: npm/@graphql-tools/code-file-loader@7.3.23
Debug access	npm/@graphql-tools/code-file-loader@7.3.23	Module: module Location: Package overview	orphan: npm/@graphql-tools/code-file-loader@7.3.23
Debug access	npm/@graphql-tools/code-file-loader@7.3.23	Module: module Location: Package overview	orphan: npm/@graphql-tools/code-file-loader@7.3.23
Filesystem access	npm/@graphql-tools/code-file-loader@7.3.23	Module: fs Location: Package overview	orphan: npm/@graphql-tools/code-file-loader@7.3.23
Debug access	npm/@graphql-tools/load@7.8.14	Module: module Location: Package overview	orphan: npm/@graphql-tools/load@7.8.14
Debug access	npm/@graphql-tools/load@7.8.14	Module: module Location: Package overview	orphan: npm/@graphql-tools/load@7.8.14
Dynamic require	npm/@graphql-tools/load@7.8.14	Location: Package overview	orphan: npm/@graphql-tools/load@7.8.14
Filesystem access	npm/@pnpm/npm-conf@2.2.2	Module: fs Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: APPDATA Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: HOME Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: SHELL Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: COMSPEC Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: VISUAL Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: EDITOR Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: SUDO_UID Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: DESTDIR Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: PREFIX Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: CI Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: NODE_ENV Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: SUDO_GID Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: NO_COLOR Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Environment variable access	npm/@pnpm/npm-conf@2.2.2	Env Vars: TRAVIS Location: Package overview	orphan: npm/@pnpm/npm-conf@2.2.2
Dynamic require	npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11	Location: Package overview	orphan: npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11
Dynamic require	npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11	Location: Package overview	orphan: npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11
Environment variable access	npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11	Env Vars: NODE_ENV Location: Package overview	orphan: npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11
Filesystem access	npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11	Module: fs Location: Package overview	orphan: npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11
Dynamic require	npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11	Location: Package overview	orphan: npm/@pmmmwh/react-refresh-webpack-plugin@0.5.11
Dynamic require	npm/@parcel/core@2.8.3	Location: Package overview	orphan: npm/@parcel/core@2.8.3
Debug access	npm/@parcel/core@2.8.3	Module: v8 Location: Package overview	orphan: npm/@parcel/core@2.8.3
Environment variable access	npm/@parcel/core@2.8.3	Env Vars: Location: Package overview	orphan: npm/@parcel/core@2.8.3
Dynamic require	npm/@parcel/fs-search@2.8.3	Location: Package overview	orphan: npm/@parcel/fs-search@2.8.3
Environment variable access	npm/@parcel/fs-search@2.8.3	Env Vars: PARCEL_BUILD_ENV Location: Package overview	orphan: npm/@parcel/fs-search@2.8.3
Filesystem access	npm/@parcel/fs-search@2.8.3	Module: fs Location: Package overview	orphan: npm/@parcel/fs-search@2.8.3
Environment variable access	npm/@parcel/fs@2.8.3	Env Vars: GRACEFUL_FS_PLATFORM Location: Package overview	orphan: npm/@parcel/fs@2.8.3
Environment variable access	npm/@parcel/fs@2.8.3	Env Vars: NODE_DEBUG Location: Package overview	orphan: npm/@parcel/fs@2.8.3
Environment variable access	npm/@parcel/fs@2.8.3	Env Vars: TEST_GRACEFUL_FS_GLOBAL_PATCH Location: Package overview	orphan: npm/@parcel/fs@2.8.3
Filesystem access	npm/@parcel/fs@2.8.3	Module: fs Location: Package overview	orphan: npm/@parcel/fs@2.8.3
Dynamic require	npm/@parcel/hash@2.8.3	Location: Package overview	orphan: npm/@parcel/hash@2.8.3
Environment variable access	npm/@parcel/hash@2.8.3	Env Vars: PARCEL_BUILD_ENV Location: Package overview	orphan: npm/@parcel/hash@2.8.3
Filesystem access	npm/@parcel/hash@2.8.3	Module: fs Location: Package overview	orphan: npm/@parcel/hash@2.8.3
Debug access	npm/@parcel/node-resolver-core@2.8.3	Module: module Location: Package overview	orphan: npm/@parcel/node-resolver-core@2.8.3
Environment variable access	npm/@parcel/package-manager@2.8.3	Env Vars: OSTYPE Location: Package overview	orphan: npm/@parcel/package-manager@2.8.3
Environment variable access