[Snyk] Upgrade typescript from 5.5.3 to 5.7.2

[nerdy-tech-com-gitub]

Snyk has created this PR to upgrade typescript from 5.5.3 to 5.7.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 157 versions ahead of your current version.

• The recommended version was released on 24 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	169	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-ROLLUP-8073097	169	Proof of Concept
	Information Exposure SNYK-JS-VITE-8023174	169	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SVELTEJSKIT-8400875	169	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-SVELTEJSKIT-8400876	169	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-VITE-8022916	169	Proof of Concept

Release notes

Package name: typescript

• 5.7.2 - 2024-11-22
  

  For release notes, check out the release announcement.

  • fixed issues query for Typescript 5.7.0 (Beta).
  • fixed issues query for Typescript 5.7.1 (RC).
  • fixed issues query for Typescript 5.7.2 (Stable).

  Downloads are available on:

  • npm
• 5.7.1-rc - 2024-11-08
• 5.7.0-dev.20241105 - 2024-11-05
• 5.7.0-dev.20241104 - 2024-11-04
• 5.7.0-dev.20241103 - 2024-11-03
• 5.7.0-dev.20241102 - 2024-11-02
• 5.7.0-dev.20241101 - 2024-11-01
• 5.7.0-dev.20241031 - 2024-10-31
• 5.7.0-dev.20241030 - 2024-10-30
• 5.7.0-dev.20241029 - 2024-10-29
• 5.7.0-dev.20241028 - 2024-10-28
• 5.7.0-dev.20241027 - 2024-10-27
• 5.7.0-dev.20241026 - 2024-10-26
• 5.7.0-dev.20241025 - 2024-10-25
• 5.7.0-dev.20241024 - 2024-10-24
• 5.7.0-dev.20241023 - 2024-10-23
• 5.7.0-dev.20241022 - 2024-10-22
• 5.7.0-dev.20241021 - 2024-10-21
• 5.7.0-dev.20241020 - 2024-10-20
• 5.7.0-dev.20241019 - 2024-10-19
• 5.7.0-dev.20241018 - 2024-10-18
• 5.7.0-dev.20241017 - 2024-10-17
• 5.7.0-dev.20241016 - 2024-10-16
• 5.7.0-dev.20241015 - 2024-10-15
• 5.7.0-dev.20241014 - 2024-10-14
• 5.7.0-dev.20241013 - 2024-10-13
• 5.7.0-dev.20241012 - 2024-10-12
• 5.7.0-dev.20241011 - 2024-10-11
• 5.7.0-dev.20241010 - 2024-10-10
• 5.7.0-dev.20241009 - 2024-10-09
• 5.7.0-dev.20241008 - 2024-10-08
• 5.7.0-dev.20241007 - 2024-10-07
• 5.7.0-dev.20241006 - 2024-10-06
• 5.7.0-dev.20241005 - 2024-10-05
• 5.7.0-dev.20241004 - 2024-10-04
• 5.7.0-dev.20241003 - 2024-10-03
• 5.7.0-dev.20241002 - 2024-10-02
• 5.7.0-dev.20241001 - 2024-10-01
• 5.7.0-dev.20240930 - 2024-09-30
• 5.7.0-dev.20240929 - 2024-09-29
• 5.7.0-dev.20240928 - 2024-09-28
• 5.7.0-dev.20240927 - 2024-09-27
• 5.7.0-dev.20240926 - 2024-09-26
• 5.7.0-dev.20240925 - 2024-09-25
• 5.7.0-dev.20240924 - 2024-09-24
• 5.7.0-dev.20240923 - 2024-09-23
• 5.7.0-dev.20240922 - 2024-09-22
• 5.7.0-dev.20240921 - 2024-09-21
• 5.7.0-dev.20240920 - 2024-09-20
• 5.7.0-dev.20240919 - 2024-09-19
• 5.7.0-dev.20240918 - 2024-09-18
• 5.7.0-dev.20240917 - 2024-09-17
• 5.7.0-dev.20240916 - 2024-09-16
• 5.7.0-dev.20240915 - 2024-09-15
• 5.7.0-dev.20240914 - 2024-09-14
• 5.7.0-dev.20240913 - 2024-09-13
• 5.7.0-dev.20240912 - 2024-09-12
• 5.7.0-dev.20240911 - 2024-09-11
• 5.7.0-dev.20240904 - 2024-09-04
• 5.7.0-dev.20240903 - 2024-09-03
• 5.7.0-dev.20240902 - 2024-09-02
• 5.7.0-dev.20240901 - 2024-09-01
• 5.7.0-dev.20240831 - 2024-08-31
• 5.7.0-dev.20240830 - 2024-08-30
• 5.7.0-dev.20240829 - 2024-08-29
• 5.7.0-dev.20240828 - 2024-08-28
• 5.7.0-dev.20240827 - 2024-08-27
• 5.7.0-dev.20240826 - 2024-08-26
• 5.7.0-dev.20240825 - 2024-08-25
• 5.7.0-dev.20240824 - 2024-08-24
• 5.7.0-dev.20240823 - 2024-08-23
• 5.7.0-dev.20240822 - 2024-08-22
• 5.7.0-dev.20240821 - 2024-08-21
• 5.7.0-dev.20240820 - 2024-08-20
• 5.7.0-beta - 2024-10-09
• 5.6.3 - 2024-10-08
  

  For release notes, check out the release announcement.

  For the complete list of fixed issues, check out the

  • fixed issues query for Typescript 5.6.0 (Beta).
  • fixed issues query for Typescript 5.6.1 (RC).
  • fixed issues query for Typescript 5.6.2 (Stable).
  • fixed issues query for Typescript 5.6.3 (Stable).

  Downloads are available on:

  • npm
  • NuGet package
• 5.6.2 - 2024-09-09
  

  For release notes, check out the release announcement.

  For the complete list of fixed issues, check out the

  • fixed issues query for Typescript 5.6.0 (Beta).
  • fixed issues query for Typescript 5.6.1 (RC).
  • fixed issues query for Typescript 5.6.2 (Stable).

  Downloads are available on:

  • npm
  • NuGet package
• 5.6.1-rc - 2024-08-23
• 5.6.0-dev.20240819 - 2024-08-19
• 5.6.0-dev.20240818 - 2024-08-18
• 5.6.0-dev.20240817 - 2024-08-17
• 5.6.0-dev.20240816 - 2024-08-16
• 5.6.0-dev.20240815 - 2024-08-15
• 5.6.0-dev.20240814 - 2024-08-14
• 5.6.0-dev.20240813 - 2024-08-13
• 5.6.0-dev.20240812 - 2024-08-12
• 5.6.0-dev.20240811 - 2024-08-11
• 5.6.0-dev.20240810 - 2024-08-10
• 5.6.0-dev.20240809 - 2024-08-09
• 5.6.0-dev.20240808 - 2024-08-08
• 5.6.0-dev.20240807 - 2024-08-07
• 5.6.0-dev.20240806 - 2024-08-06
• 5.6.0-dev.20240805 - 2024-08-05
• 5.6.0-dev.20240804 - 2024-08-04
• 5.6.0-dev.20240803 - 2024-08-03
• 5.6.0-dev.20240802 - 2024-08-02
• 5.6.0-dev.20240801 - 2024-08-01
• 5.6.0-dev.20240731 - 2024-07-31
• 5.6.0-dev.20240730 - 2024-07-30
• 5.6.0-dev.20240729 - 2024-07-29
• 5.6.0-dev.20240728 - 2024-07-28
• 5.6.0-dev.20240727 - 2024-07-27
• 5.6.0-dev.20240726 - 2024-07-26
• 5.6.0-dev.20240725 - 2024-07-25
• 5.6.0-dev.20240724 - 2024-07-24
• 5.6.0-dev.20240723 - 2024-07-23
• 5.6.0-dev.20240722 - 2024-07-22
• 5.6.0-dev.20240721 - 2024-07-21
• 5.6.0-dev.20240720 - 2024-07-20
• 5.6.0-dev.20240719 - 2024-07-19
• 5.6.0-dev.20240718 - 2024-07-18
• 5.6.0-dev.20240717 - 2024-07-17
• 5.6.0-dev.20240716 - 2024-07-16
• 5.6.0-dev.20240715 - 2024-07-15
• 5.6.0-dev.20240714 - 2024-07-14
• 5.6.0-dev.20240713 - 2024-07-13
• 5.6.0-dev.20240712 - 2024-07-12
• 5.6.0-dev.20240711 - 2024-07-11
• 5.6.0-dev.20240710 - 2024-07-10
• 5.6.0-dev.20240709 - 2024-07-09
• 5.6.0-dev.20240708 - 2024-07-08
• 5.6.0-dev.20240707 - 2024-07-07
• 5.6.0-dev.20240706 - 2024-07-06
• 5.6.0-dev.20240705 - 2024-07-05
• 5.6.0-dev.20240704 - 2024-07-04
• 5.6.0-dev.20240703 - 2024-07-03
• 5.6.0-dev.20240702 - 2024-07-02
• 5.6.0-dev.20240701 - 2024-07-01
• 5.6.0-dev.20240630 - 2024-06-30
• 5.6.0-dev.20240629 - 2024-06-29
• 5.6.0-dev.20240628 - 2024-06-28
• 5.6.0-dev.20240627 - 2024-06-27
• 5.6.0-dev.20240626 - 2024-06-26
• 5.6.0-dev.20240625 - 2024-06-25
• 5.6.0-dev.20240624 - 2024-06-24
• 5.6.0-dev.20240623 - 2024-06-23
• 5.6.0-dev.20240622 - 2024-06-22
• 5.6.0-dev.20240621 - 2024-06-21
• 5.6.0-dev.20240620 - 2024-06-20
• 5.6.0-dev.20240619 - 2024-06-19
• 5.6.0-dev.20240618 - 2024-06-18
• 5.6.0-dev.20240617 - 2024-06-17
• 5.6.0-dev.20240616 - 2024-06-16
• 5.6.0-dev.20240615 - 2024-06-15
• 5.6.0-dev.20240614 - 2024-06-14
• 5.6.0-dev.20240613 - 2024-06-13
• 5.6.0-dev.20240612 - 2024-06-12
• 5.6.0-dev.20240611 - 2024-06-11
• 5.6.0-dev.20240610 - 2024-06-10
• 5.6.0-dev.20240609 - 2024-06-09
• 5.6.0-dev.20240608 - 2024-06-08
• 5.6.0-dev.20240607 - 2024-06-07
• 5.6.0-dev.20240606 - 2024-06-06
• 5.6.0-dev.20240605 - 2024-06-05
• 5.6.0-dev.20240604 - 2024-06-04
• 5.6.0-beta - 2024-07-26
• 5.5.4 - 2024-07-22
  

  For release notes, check out the release announcement.

  For the complete list of fixed issues, check out the

  • fixed issues query for TypeScript v5.5.4 (Stable).
  • fixed issues query for TypeScript v5.5.3 (Stable).
  • fixed issues query for TypeScript v5.5.2 (Stable).
  • fixed issues query for TypeScript v5.5.1 (RC).
  • fixed issues query for TypeScript v5.5.0 (Beta).

  Downloads are available on:

  • npm
  • NuGet package (soon!)
• 5.5.3 - 2024-07-01
  

  For release notes, check out the release announcement.

  For the complete list of fixed issues, check out the

  • fixed issues query for TypeScript v5.5.3 (Stable).
  • fixed issues query for TypeScript v5.5.2 (Stable).
  • fixed issues query for TypeScript v5.5.1 (RC).
  • fixed issues query for TypeScript v5.5.0 (Beta).

  Downloads are available on:

  • npm
  • NuGet package

from typescript GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Summary by Sourcery

Build:

• Upgrade TypeScript from version 5.5.3 to 5.7.2 in the project dependencies.

[sourcery-ai]

Reviewer's Guide by Sourcery

This PR upgrades the TypeScript dependency from version 5.5.3 to 5.7.2 to address several security vulnerabilities. The upgrade includes fixes for high-severity uncontrolled resource consumption, medium-severity cross-site scripting (XSS), and information exposure issues.

No diagrams generated as the changes look simple and do not need a visual representation.

File-Level Changes

Change	Details	Files
Upgrade TypeScript dependency to address security vulnerabilities	Update TypeScript version from 5.5.3 to 5.7.2 Fix high-severity uncontrolled resource consumption vulnerability in braces package Fix medium-severity XSS vulnerability in rollup package Fix medium-severity information exposure vulnerability in vite package Fix low-severity XSS vulnerabilities in svelte-kit and vite packages	examples/user-management/sveltekit-user-management/package.json

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time. You can also use
  this command to specify where the summary should be inserted.

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

We have skipped reviewing this pull request. Here's why:

• It seems to have been created by a bot ('[Snyk]' found in title). We assume it knows what it's doing!
• We don't review packaging changes - Let us know if you'd like us to change this.

[nerdy-tech-com-gitub]

Extension enabled by org