[Snyk] Security upgrade cspell from 6.31.2 to 8.15.0

[abdulrahman305]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• eng/common/spelling/package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	124

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Inefficient Regular Expression Complexity

Description by Korbit AI

What change is being made?

Upgrade the cspell dependency from version 6.12.0 to 8.15.0 in the package.json file.

Why are these changes being made?

This upgrade addresses security vulnerabilities identified in the older version of cspell, ensuring the project remains secure and up-to-date with the latest features and fixes provided in the newer version.

Is this description stale? Ask me to generate a new description by commenting /korbit-generate-pr-description

[korbit-ai]

👋 I'm here to help you review your pull request. When you're ready for me to perform a review, you can comment anywhere on this pull request with this command: /korbit-review.

As a reminder, here are some helpful tips on how we can collaborate together:

• To have me re-scan your pull request, simply re-invoke the /korbit-review command in a new comment.
• You can interact with me by tagging @korbit-ai in any conversation in your pull requests.
• On any comment I make on your code, please leave a 👍 if it is helpful and a 👎 if it is unhelpful. This will help me learn and improve as we work together
• Lastly, to learn more, check out our Docs.

[codeautopilot]

PR summary

This Pull Request aims to upgrade the cspell package from version 6.31.2 to 8.15.0 in the eng/common/spelling/package.json file. The primary purpose of this upgrade is to address a high-severity vulnerability related to inefficient regular expression complexity (SNYK-JS-MICROMATCH-6838728). By upgrading to a newer version, the project mitigates potential security risks associated with this vulnerability, enhancing the overall security posture of the application.

Suggestion

Before merging, it is advisable to test the application thoroughly to ensure that the upgrade does not introduce any breaking changes or compatibility issues, given that this is a major version upgrade. Additionally, reviewing the changelog of the cspell package for any significant changes or deprecations would be beneficial to anticipate any necessary code adjustments.

Disclaimer: This comment was entirely generated using AI. Be aware that the information provided may be incorrect.

Current plan usage: 62.25%

Have feedback or need help?
Discord
Documentation
support@codeautopilot.com

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
pypi/a@1.0	None	0	627 B	vimalmani
pypi/anyio@4.5.0	None	0	0 B
pypi/avro@1.12.0	environment, eval, filesystem, network, shell	0	474 kB	Doug.Cutting, Fokko, RyanSkraba, ...5 more
pypi/azure-ai-ml@1.21.0	environment, eval, filesystem, network, shell, unsafe	0	84.4 MB	amlpypi, azure-sdk, microsoft
pypi/azure-ai-nspkg@1.0.0	filesystem	0	6.86 kB	azure-sdk, microsoft
pypi/azure-ai-resources@1.0.0b8	environment, eval, filesystem, network, shell, unsafe	0	8.53 MB	amlpypi, microsoft
pypi/azure-appconfiguration@1.7.1	environment, eval, filesystem, network	0	851 kB	azure-sdk, microsoft
pypi/azure-cognitiveservices-knowledge-nspkg@3.0.0	filesystem	0	7.13 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-cognitiveservices-language-nspkg@3.0.1	filesystem	0	7.02 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-cognitiveservices-nspkg@3.0.1	filesystem	0	6.65 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-cognitiveservices-search-nspkg@3.0.1	filesystem	0	6.98 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-cognitiveservices-vision-nspkg@3.0.1	filesystem	0	6.98 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-common@1.1.0	filesystem	0	9.65 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-common@1.1.28	environment, filesystem	0	57.3 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-common@1.1.5	environment, filesystem, shell	0	30.1 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-core-tracing-opentelemetry@1.0.0b11	environment, filesystem, network	0	86.7 kB	azure-sdk, microsoft
pypi/azure-media-nspkg@1.0.0	filesystem	0	5.67 kB	azure-sdk, microsoft
pypi/azure-messaging-webpubsubservice@1.1.0b1	environment, eval, filesystem, network	0	357 kB	azure-sdk, microsoft
pypi/azure-mgmt-compute@26.1.0	environment, filesystem	0	39 MB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-mgmt-compute@33.0.0	environment, eval, filesystem, network	0	77.8 MB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-mgmt-core@1.4.0	environment, filesystem, network, unsafe	0	163 kB	azure-sdk, microsoft
pypi/azure-mgmt-managementgroups@1.0.0	filesystem	0	327 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-mgmt-nspkg@3.0.2	filesystem	0	6.55 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-mgmt-privatedns@1.0.0	filesystem	0	281 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-mgmt-servicebus@8.0.0	environment, filesystem	0	4.96 MB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-mixedreality-authentication@1.0.0b1	environment, filesystem	+2	111 kB	azure-sdk, microsoft
pypi/azure-monitor-opentelemetry-exporter@1.0.0b31	None	0	0 B
pypi/azure-nspkg@3.0.2	filesystem	0	6.16 kB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-schemaregistry@1.2.0	environment, eval, filesystem, network	0	310 kB	azure-sdk, microsoft
pypi/azure-schemaregistry@1.3.0	environment, eval, filesystem, network	0	569 kB	azure-sdk, microsoft
pypi/azure-servicebus@7.12.3	environment, eval, filesystem, network, unsafe	0	3.28 MB	Laurent.Mazuel, azure-sdk, microsoft
pypi/azure-storage-file-datalake@12.17.0	environment, eval, filesystem, network	0	2.03 MB	azure-sdk, microsoft
pypi/azure-storage-file-share@12.19.0	None	0	0 B
pypi/azure-storage-file@2.1.0	filesystem Transitive: environment, network	+4	583 kB	azure-sdk, microsoft
pypi/azure-template@0.1.0b4167612	filesystem	0	16 kB	azure-sdk, microsoft
pypi/azureml-defaults@1.57.0	None	0	2.12 kB	amlpypi
pypi/azureml-telemetry@1.57.0	environment, filesystem, network	+2	627 kB	amlpypi
pypi/cloudpickle@2.0.0	environment, eval, filesystem, shell, unsafe	0	240 kB	Kyle.Kelley, antoine, holdenk, ...6 more
pypi/colorama@0.4.6	environment	0	116 kB	tartley, wiggin15
pypi/configargparse@1.7	environment, eval, filesystem, network, shell	0	211 kB	bw2

🚮 Removed packages: pypi/cryptography@43.0.1, pypi/cycler@0.10.0, pypi/docker@7.1.0, pypi/flask@2.2.2, pypi/flask@2.2.5, pypi/flask@3.0.3, pypi/http@0.02, pypi/httpretty@1.1.4, pypi/httpx@0.23.3, pypi/httpx@0.27.2, pypi/importlib-metadata@7.2.1, pypi/jinja2@3.1.2, pypi/jinja2@3.1.4, pypi/js@1.0, pypi/kiwisolver@1.2.0, pypi/marshmallow-jsonschema@0.10.0, pypi/marshmallow@3.19.0, pypi/marshmallow@3.22.0, pypi/matplotlib@3.2.1, pypi/matplotlib@3.3.4, pypi/mldesigner@0.1.0b18, pypi/mock@5.1.0, pypi/msrestazure@0.4.7, pypi/msrestazure@0.6.4.post1, pypi/myst-parser@4.0.0, pypi/numpy@1.19.5, pypi/numpy@2.1.2, pypi/openai@1.51.2, pypi/opencensus-ext-azure@1.1.13, pypi/opencensus-ext-threading@0.1.2, pypi/opencensus@0.11.4, pypi/opentelemetry-instrumentation-requests@0.46b0, pypi/opentelemetry-instrumentation-requests@0.48b0, pypi/opentelemetry-sdk@1.21.0, pypi/opentelemetry-sdk@1.25.0, pypi/opentelemetry-sdk@1.27.0, pypi/pandas@1.0.4, pypi/pandas@1.1.5, pypi/parameterized@0.9.0, pypi/promptflow-tools@1.4.0, pypi/promptflow@1.16.0, pypi/pydash@8.0.3, pypi/pyodide@0.19.0a1, pypi/pytest-asyncio@0.12.0, pypi/pytest-asyncio@0.24.0, pypi/pytest-cov@5.0.0, pypi/pytest-forked@1.6.0, pypi/pytest-mock@3.14.0, pypi/pytest-reportlog@0.4.0, pypi/pytest-timeout@2.3.1, pypi/pytest-tornasync@0.6.0.post2, pypi/pytest-trio@0.8.0, pypi/pytest-xdist@3.6.1, pypi/pytest@8.3.3, pypi/python-dateutil@2.8.1, pypi/python-dateutil@2.8.2, pypi/python-dateutil@2.9.0, pypi/python-dotenv@1.0.1, pypi/pywin32@304, pypi/requests@2.32.3, pypi/responses@0.25.3, pypi/retry@0.9.2, pypi/scikit-image@0.24.0, pypi/setuptools@67.6.0, pypi/setuptools@75.1.0, pypi/sphinx-rtd-theme@3.0.1, pypi/sphinx@8.1.0, pypi/tools@0.1.9, pypi/trio@0.26.2, pypi/twine@4.0.2, pypi/typing-extensions@4.0.1, pypi/typing-extensions@4.12.2, pypi/urllib3@2.2.3, pypi/websocket-client@1.8.0, pypi/wheel@0.44.0

View full report↗︎