[Snyk] Upgrade @prisma/client from 3.3.0 to 6.4.1 by q1blue · Pull Request #195 · https-quantumblockchainai-atlassian-net/crystal-ai-nextjs-planetscale-starter-01e195f1

q1blue · 2025-03-17T23:49:11Z

Snyk has created this PR to upgrade @prisma/client from 3.3.0 to 6.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

The recommended version is 5761 versions ahead of your current version.
The recommended version was released 25 days ago.

Important

Warning: This PR contains a major version upgrade, and may be a breaking change.
Check the changes in this PR to ensure they won't cause issues with your project.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

📜 Customise PR templates

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade @prisma/client from 3.3.0 to 6.4.1. See this package in yarn: @prisma/client See this project in Snyk: https://app.snyk.io/org/quantum-blockchain-ai-9pr/project/bb367d24-3729-4815-9875-c3eb8ec7fa71?utm_source=github&utm_medium=referral&page=upgrade-pr

sonarqubecloud · 2025-03-17T23:49:51Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

socket-security · 2025-03-18T00:00:08Z

New, updated, and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@prisma/client@3.3.0 ➜ 6.5.0	None	`0`	14.1 MB	prismabot
npm/text-table@0.2.0	None	`0`	11 kB	substack
npm/throat@6.0.1	None	`0`	9.16 kB	throat-bot
npm/through@2.3.8	None	`0`	12.5 kB	dominictarr
npm/timers-browserify@2.0.12	None	`0`	10.4 kB	jryans
npm/tiny-glob@0.2.9	filesystem	`0`	12.1 kB	terkelg
npm/tmp@0.2.1	filesystem	`0`	52.9 kB	raszi
npm/tmpl@1.0.5	None	`0`	2.77 kB	daaku
npm/to-fast-properties@2.0.0	None	`0`	3.5 kB	sindresorhus
npm/to-regex-range@5.0.1	None	`0`	22.9 kB	jonschlinkert
npm/toidentifier@1.0.0	None	`0`	4.33 kB	dougwilson
npm/tough-cookie@4.0.0	None	`+1`	103 kB	awaterma
npm/tr46@0.0.3, 2.1.0 ➜ 1.0.1	None	`0`	322 kB	sebmaster
npm/trouter@3.2.0	None	`0`	13.8 kB	lukeed
npm/ts-node@8.9.1	environment	`0`	257 kB	cspotcode
npm/tslib@1.14.1	None	`0`	34 kB	typescript-bot
npm/tsutils@3.21.0	None	`0`	382 kB	ajaff
npm/tty-browserify@0.0.1	None	`0`	2 kB	goto-bus-stop
npm/tunnel-agent@0.6.0	environment, network	`0`	16.7 kB	mikeal
npm/type-detect@4.0.8	None	`0`	42.1 kB	chaijs
npm/type-fest@0.7.1	None	`0`	31.2 kB	sindresorhus
npm/typedarray-to-buffer@3.1.5	None	`0`	8.84 kB	feross
npm/typescript@4.3.4	None	`0`	60.7 MB	typescript-bot
npm/unbox-primitive@1.0.1	None	`0`	12.8 kB	ljharb
npm/universalify@2.0.0	None	`0`	4.64 kB	ryanzim
npm/unload@2.2.0	None	`0`	28.9 kB	pubkey
npm/unpipe@1.0.0	None	`0`	4.31 kB	dougwilson
npm/unstorage@0.2.9	Transitive: environment, filesystem	`+1`	157 kB	pi0
npm/uri-js@4.4.1	None	`0`	470 kB	garycourt
npm/use-subscription@1.5.1	environment	`0`	13.2 kB	gaearon
npm/util-deprecate@1.0.2	None	`0`	5.48 kB	tootallnate
npm/uuid@8.3.2	None	`0`	116 kB	ctavan
npm/v8-compile-cache@2.3.0	environment, filesystem, unsafe	`0`	16.8 kB	zertosh
npm/v8-to-istanbul@8.1.0	filesystem, unsafe	`+1`	47.7 kB	oss-bot
npm/vm-browserify@1.1.2	None	`0`	15.5 kB	goto-bus-stop
npm/w3c-hr-time@1.0.2	None	`0`	16.8 kB	timothygu
npm/w3c-xmlserializer@2.0.0	None	`0`	18 kB	domenic
npm/walker@1.0.8	filesystem	`0`	5.8 kB	daaku
npm/watchpack@2.3.0	environment, filesystem	`0`	56.8 kB	sokra
npm/webidl-conversions@3.0.1 ➜ 4.0.2	None	`0`	19.3 kB	domenic
npm/webpack-sources@3.2.1	None	`0`	90.6 kB	sokra
npm/webpack@5.62.1	environment, filesystem, network, unsafe	`0`	4.17 MB	sokra
npm/whatwg-encoding@1.0.5	None	`0`	12.3 kB	domenic
npm/whatwg-mimetype@2.3.0	None	`0`	16.2 kB	domenic
npm/whatwg-url@5.0.0 ➜ 7.1.0	None	`0`	78.4 kB	domenic
npm/which-boxed-primitive@1.0.2	None	`0`	15 kB	ljharb
npm/which-typed-array@1.1.7	None	`0`	29.2 kB	ljharb
npm/which@1.3.1	environment	`0`	9.42 kB	isaacs
npm/wide-align@1.1.5	None	`0`	4.47 kB	iarna
npm/word-wrap@1.2.3	None	`0`	10.6 kB	jonschlinkert
npm/wrap-ansi@7.0.0	None	`+1`	27.6 kB	sindresorhus
npm/wrappy@1.0.2	None	`0`	2.96 kB	zkat
npm/write-file-atomic@3.0.3	filesystem	`0`	12.8 kB	isaacs
npm/ws@7.5.5 ➜ 8.2.3	None	`0`	127 kB	lpinca
npm/xml-name-validator@3.0.0	None	`0`	23 kB	domenic
npm/xmlchars@2.2.0	None	`0`	59 kB	lddubeau
npm/xss@1.0.10	None	`0`	143 kB	leizongmin
npm/xtend@4.0.2	None	`0`	6.46 kB	raynos
npm/y18n@5.0.8	filesystem	`0`	23.4 kB	oss-bot
npm/yallist@4.0.0	None	`0`	14.8 kB	isaacs
npm/yaml@1.10.2	environment	`0`	448 kB	eemeli
npm/yargs-parser@20.2.9	environment, filesystem	`0`	124 kB	oss-bot
npm/yargs@16.2.0	environment, filesystem	`+1`	291 kB	oss-bot
npm/yn@3.1.1	None	`0`	6.31 kB	sindresorhus
npm/yocto-queue@0.1.0	None	`0`	6.03 kB	sindresorhus

🚮 Removed packages: npm/@prisma/engines-version@3.3.0-30.33838b0f78f1fe9052cf9a00e9761c9dc097a63c

View full report↗︎

socket-security · 2025-03-18T00:00:10Z

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note	Source	CI
Critical CVE	npm/webpack@5.62.1	CVE: GHSA-hc6q-2mpp-qw7j Cross-realm object access in Webpack 5 (CRITICAL) Affected versions: >= 5.0.0, < 5.76.0 Patched version: 5.76.0	`package.json` `yarn.lock`	⚠︎

View full report↗︎

Next steps

What is a critical CVE?

Contains a Critical Common Vulnerability and Exposure (CVE).

Remove or replace dependencies that include known critical CVEs. Consumers can use dependency overrides or npm audit fix --force to remove vulnerable dependencies.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

@SocketSecurity ignore npm/webpack@5.62.1

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade @prisma/client from 3.3.0 to 6.4.1#195

[Snyk] Upgrade @prisma/client from 3.3.0 to 6.4.1#195
q1blue wants to merge 1 commit intomainfrom
snyk-upgrade-166b67905623b452cadbd5d988c8f1f5

q1blue commented Mar 17, 2025

Uh oh!

sonarqubecloud Bot commented Mar 17, 2025

Uh oh!

socket-security Bot commented Mar 18, 2025

Uh oh!

socket-security Bot commented Mar 18, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

q1blue commented Mar 17, 2025

Snyk has created this PR to upgrade @prisma/client from 3.3.0 to 6.4.1.

Uh oh!

sonarqubecloud Bot commented Mar 17, 2025

Quality Gate passed

Uh oh!

socket-security Bot commented Mar 18, 2025

Uh oh!

socket-security Bot commented Mar 18, 2025

Next steps

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants