chore(deps): update dependency node-notifier to v8 [security] #209

renovate · 2025-11-26T09:35:14Z

This PR contains the following updates:

Package	Change	Age	Confidence
node-notifier	`^5.1.2` -> `^8.0.0`

GitHub Vulnerability Alerts

CVE-2020-7789

This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.

OS Command Injection in node-notifier

CVE-2020-7789 / GHSA-5fw9-fq32-wv5p

More information

Details

This affects the package node-notifier before 8.0.1. It allows an attacker to run arbitrary commands on Linux machines due to the options params not being sanitised when being passed an array.

Severity

CVSS Score: 5.6 / 10 (Medium)
Vector String: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Release Notes

mikaelbr/node-notifier (node-notifier)

`v8.0.1`

Compare Source

`v8.0.0`

Compare Source

Breaking changes:

Expire time for notify-send is made to match macOS and Windows with default time of 10 seconds. The API is changed to take seconds as input and converting it to milliseconds before passing it on to notify-send. See #341.

`v7.0.2`

Compare Source

Updates dependencies
Fixes issue with haning Windows notifications when disabled (#335)

`v7.0.1`

Compare Source

Fixes import of uuid, removes deprecation warnings

`v7.0.0`

Compare Source

Features

NotifySend support for app-name (#299, see docs)

Breaking Changes

All notify messages now have auto bound context to make it easier to pass as variables/arguments (#306)
Updated snoreToast to version 0.7.0 with new input features (#293)
Breaking snoreToast: Sanitizing data now changes "timedout" to "timeout"

`v6.0.0`

Compare Source

Breaking Changes

Dropped support for node v6. As of v6 we currently support node versions 8, 10, and 12 (latest).
Updated to the latest version of SnoreToast. This removes support for the wait option in that environment as it is now always on. Prepares the way for other new features added to the WindowsToaster.