[Snyk] Upgrade moment-timezone from 0.5.34 to 0.5.37

[gangsd92]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade moment-timezone from 0.5.34 to 0.5.37.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-08-25.

Release notes

Package name: moment-timezone

• 0.5.37 - 2022-08-25
  
  • Re-publish npm package, because of extra folder present in 0.5.36, check #999
• 0.5.36 - 2022-08-25
  
  • Updated data to IANA TZDB 2022c
  • Improvements/fixes to data pipeline
• 0.5.35 - 2022-08-23
  
  • Fix command injection in data pipeline GHSA-56x4-j7p9-fcf9
  • Fix cleartext transmission of sensitive information GHSA-v78c-4p63-2j6c

  Thanks to the OpenSSF Alpha-Omega project for reporting these!

• 0.5.34 - 2021-11-10
  
  • Updated data to IANA TZDB 2021e

from moment-timezone GitHub release notes

Commit messages

Package name: moment-timezone

• ffe6f34 Add changelog for 0.5.37
• 450ca63 Bump version to 0.5.37
• 95f1a9b Build moment-timezone 0.5.36
• abba28c Add changelog for 0.5.36
• ac6de03 Bump version to 0.5.36
• 7a5cadf tests: Fix country tests for 2022c
• 6754c75 data: generate 2022c data+tests
• f74a364 bugfix: Wipe tests/zones before generation
• e850f9f grunt: do not bundle zone and contry tests
• f13e22b data: automatically create data/*/VERSION.json for latest
• e551fde data: allow running pipeline without wiping temp
• 5bc88fc data: run test generation for all data pipelines
• b8fc9c8 Bugfix: data: Fix dependency order
• 37e4aaa data: Allow test generation for non-latest IANA versions
• 7dc73f5 Style: data: Let grunt.file.write create parent folders
• 1067fd3 Style: data: avoid modifying computed data after initialization
• 8e49f4b Bugfix: data: ignore zdump output lacking utc/local time
• d830613 Add credits to changelog for recent vulnerability reports
• b8fb1ba Build moment-timezone 0.5.35
• f1b5e5a Add changelog for 0.5.35
• 8b0eb0c Bump version to 0.5.35
• 7915ac5 Bugfix: Prevent cleartext transmission of tz data during build
• ce955a3 Bugfix: Fix command injection vulnerability in grunt tzdata pipeline
• 9430b4c Merge remote-tracking branch 'origin/master' into develop

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs