Skip to content

chore(deps): update dependency nexmo to v2 (main)#26

Open
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/main-nexmo-2.x
Open

chore(deps): update dependency nexmo to v2 (main)#26
mend-for-github-com[bot] wants to merge 1 commit intomainfrom
whitesource-remediate/main-nexmo-2.x

Conversation

@mend-for-github-com
Copy link
Copy Markdown

@mend-for-github-com mend-for-github-com bot commented Aug 4, 2025

This PR contains the following updates:

Package Type Update Change
nexmo dependencies major ^1.0.0-beta-7^2.0.0

By merging this PR, the issue #17 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
High High 7.5 CVE-2025-65945

Release Notes

nexmo/nexmo-node (nexmo)

v2.0.0

Compare Source

  • FIXED: #​110 - check the statusCode on the response
  • FIXED: #​114 - handle 429 HTTP status codes
  • UPDATED: To allow errors to be programmatically useful the error callback objects has been updated to {statusCode: STATUS_CODE, body: JSON_BODY, headers: HEADERS}

v1.2.1

Compare Source

v1.2.0

Compare Source

  • ADDED: Add File API to library. nexmo.files.get and nexmo.files.save.

v1.1.2

Compare Source

  • Fixed: Bug #​104 - Fix JSON parsing error

v1.1.1

Compare Source

  • UPDATED: Changed User Agent format to match other libraries
  • FIXED: Bug #​88 - Undefined method when missing method declaration

v1.1.0

Compare Source

  • ADDED: nexmo.generateJwt to generate JWT based on instance credentials
  • ADDED: Nexmo.generateJwt static function to generate JWT

v1.0.0

Compare Source

  • ADDED: applicationId and privateKey properties to first constructor parameter to support JWT generation.
  • ADDED: options.logger to constructor 2nd parameter to allow adding customer logger.
  • ADDED: options.appendToUserAgent to constructor 2nd paramater to append custom string to User-Agent header sent to Nexmo.
  • ADDED: nexmo.calls adding support to create, get, update and delete calls.
  • ADDED: nexmo.applications adding support to create, get, update and delete calls.
  • ADDED: Functionality is now namespaced:
    • nexmo.message
    • nexmo.calls
    • nexmo.number
    • nexmo.verify
    • nexmo.numberInsight
    • nexmo.account
    • nexmo.voice - legacy voice functionality
  • CHANGED: var Nexmo = require('nexmo'); returns a class definition which should be created using the new operator e.g. var nexmo = new Nexmo(args...);.
  • REMOVED: var nexmo = require('nexmo'); no longer exposes singleton functions offered by "easynexmo".

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Aug 4, 2025
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/main-nexmo-2.x branch from 2da91e9 to 180cf87 Compare March 28, 2026 02:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants