fix(deps): update dependency class-transformer to v0.3.1 [security]

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
class-transformer	dependencies	minor	0.2.3 -> 0.3.1

GitHub Vulnerability Alerts

CVE-2020-7637

class-transformer through 0.2.3 is vulnerable to Prototype Pollution. The 'classToPlainFromExist' function could be tricked into adding or modifying properties of 'Object.prototype' using a 'proto' payload.

---

Release Notes

typestack/class-transformer

v0.3.1

Compare Source

Added

• table of content added to readme

Changed

• moved from Mocha to Jest
• added Prettier for code formatting
• added Eslint for linting
• updated CI configuration
• removed some unused dev dependencies
• updated dependencies to latest version

Fixed

• circular dependency fixed
• dev dependencies removed from package.json before publishing (no more security warnings)
• transformer order is deterministic now (#​231)
• fix prototype pollution issue (#​367)
• various fixes in documentation

---

Renovate configuration

📅 Schedule: "" (UTC).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by WhiteSource Renovate. View repository job log here.