[Snyk] Upgrade ramda from 0.26.1 to 0.28.0

[snyk-bot]

Snyk has created this PR to upgrade ramda from 0.26.1 to 0.28.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2022-01-16.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-RAMDA-1582370	490/1000 Why? Has a fix available, CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ramda

• 0.28.0 - 2022-01-16
  

  A long-overdue release with many updates, documented in #3218.

• 0.27.2 - 2022-01-11
  

  This release patches a security vulnerability in the implementation of trim (#3212).

• 0.27.1 - 2020-07-30
  

  Let's pretend v0.27.0 never happened. 😉

• 0.27.0 - 2020-02-02
  

  Merge pull request #2832 from kibertoad/chore/update-dependencies-2

  Update dependencies

• 0.26.1 - 2018-11-28
  

  BREAKING CHANGE

  The addition of R.then in Ramda 0.26 made the R object
  a Promise-like object, and meant that Promise.resolve() will attempt
  to resolve it by calling the then() method. R is not a Promise, and
  to reassure JavaScript of this fact, R.then is renamed to R.andThen.

from ramda GitHub release notes

Commit messages

Package name: ramda

• c207cf1 Version 0.28.0
• 95d897e chore: publicise funding options. close #3016 (#3208)
• a3737b5 chore: remove dependencies badge (#3207)
• dd26853 Merge branch 'v0.27' into master
• 1a5d40b Version 0.27.2
• 4d8e8f0 Merge pull request #3212 from ramda/davidchambers/trim
• 94d0570 Security fix for ReDoS (#3177)
• 8ae355e update test string for trim
• b8307a7 chore: lift can wrap 1-arity function (#3205)
• 1843493 Fix for failing builds (#3206)
• d5e178d feat: add transducer support for uniqBy/uniqWith (#3201)
• ef6451f feat: There's no need to restrict whenTrue and whenFalse's return type (#3199)
• a02e6ae Bugfix is 3196 (#3198)
• f4d7d06 Merge pull request #3194 from mohit61/mohit/typo-fix
• 9c5e217 fixed typo in test
• 37af6ae Security fix for ReDoS (#3177)
• a1a90dd Fix typos detected by codespell (#3188)
• d0e72a8 Move detailed spec to description section (#3170)
• fe4a055 Create SECURITY.md
• b17c8e2 Update README.md (#3174)
• 68535de chore: link toPairs, keys and values (#3161)
• fd278f4 Add `count` function (#3144)
• 66e37fe chore: link findIndex and indexOf, and their 'last' version (#3151)
• 6b6a85d fix: isOdd: n % 2 may be 1 and -1. (#3140)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs