[Snyk] Fix for 1 vulnerabilities

[MaxMood96]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: babel-plugin-istanbul

The new version differs by 40 commits.

• 2fb91f5 chore(release): 6.0.0
• 063274a chore: Update to final releases of dependencies (Expose the resolve function to other plugins import-js/eslint-plugin-import#233)
• 99bd2a2 chore: Update dependencies (No native reassign import-js/eslint-plugin-import#232)
• 95b2df7 chore: Tidelift tasks
• c35ed7b chore: Temporarily pin test-exclude ([email protected] breaks build 🚨 import-js/eslint-plugin-import#231)
• 2342557 chore: Set high timeout for slow Windows CI (Cleanup package import-js/eslint-plugin-import#229)
• f39924e chore: Fix package.json engines field
• fe08f5b feat: Add support for instrumenter options (prototype of clearer resolver interface import-js/eslint-plugin-import#227)
• 93db21a feat!: Drop node.js 6 (Simpler babel settings import-js/eslint-plugin-import#226)
• 2b7ea02 chore: Update package-lock.json (Is it possible to have a separate webpack config for tests? import-js/eslint-plugin-import#223)
• c2aecae chore: Upgrade standard to v14.2.0 (Definition for rule 'import/no-commonjs' was not found import/no-commonjs import-js/eslint-plugin-import#220)
• 6d21bf2 chore(package): update standard-version to version 7.0.0 (Add CHANGELOG import-js/eslint-plugin-import#216)
• 4cd34dc chore(release): 5.2.0
• ef7b666 chore: Update package-lock for CI (Cache fileExists in core/resolve import-js/eslint-plugin-import#214)
• 16080ab chore: Fix tests
• a314f06 feat: Support turning off node_modules default exclude via flag (Rule proposal: no-empty-line-separating-import import-js/eslint-plugin-import#172)
• a12cf16 fix: Print explicit error if use with babel 6 is attempted (Update glob to version 7.0.1 🚀 import-js/eslint-plugin-import#207)
• d3f6ded chore: Update standard-version to the latest version 🚀 (hoisting import-js/eslint-plugin-import#202)
• 882049e chore(release): 5.1.4
• 2e32ca7 chore: Update dependencies
• 047809a chore(release): 5.1.3
• dc7031e chore: Add direct dev dep on @ babel/plugin-transform-modules-commonjs
• 942c60d chore: Update devDependencies, refresh package-lock.json
• 3050bbb chore: Add regression test for Error: Cannot find module 'eslint-config-airbnb/base' from '/usr/lib/node_modules' import-js/eslint-plugin-import#201

See the full diff

Package name: nyc

The new version differs by 173 commits.

• bebf4d6 chore(release): 15.0.0
• 2931730 chore: Update to final releases of dependencies (Request: rule for banning synchronous imports of arbitrary packages import-js/eslint-plugin-import#1245)
• d44ff19 chore: Update node-preload and use process-on-spawn (Add relaxed option for no-relative-parent-imports import-js/eslint-plugin-import#1243)
• 5258e9f feat: Filenames relative to project cwd in coverage reports (React mdl import-js/eslint-plugin-import#1212)
• 6039f29 chore: Unpin test-exclude, update to latest pre-releases (New group types import-js/eslint-plugin-import#1240)
• f3c9e6c chore: Temporarily pin test-exclude (Add extensions order support for import/order import-js/eslint-plugin-import#1239)
• 28ed746 chore: Lazy load modules that are rarely/never needed in test processes. ([import/named] fix destructuring assignemnt import-js/eslint-plugin-import#1232)
• 7307626 chore: Remove cp-file module (import/extensions doesn't work for require('./file-without-extension') import-js/eslint-plugin-import#1230)
• dfd629d fix: Better error handling for main execution, reporting (Support the new rule meta.type property import-js/eslint-plugin-import#1229)
• 549c953 chore: Update dependencies, pin find-cache-dir (feat:add an ignore option for 'no-extraneous-dependencies' import-js/eslint-plugin-import#1228)
• a1dee03 chore: Update yargs (Updated lodash in order to fix CVE-2018-3721 import-js/eslint-plugin-import#1224)
• 8078a79 chore: Fix 404 in README.md. (Webpack Resolver fix for case config is an array of functions import-js/eslint-plugin-import#1220)
• 7a02cb7 chore: Add enterprise language (Add requireResolve option import-js/eslint-plugin-import#1217)
• ea94c7f chore: Remove unused functions (Fix overwriting of dynamic import() CallExpression import-js/eslint-plugin-import#1218)
• 53c66b9 docs: `npm home nyc` goes to github master branch README (chore(package): update eslint to version 3.19.0 import-js/eslint-plugin-import#1201)
• cf5e5d3 chore: Update dependencies
• 8411a26 fix: Correct handling of source-maps for pre-instrumented files (Add support for require.resolve import-js/eslint-plugin-import#1216)
• f890360 docs: Fix URL to default excludes in README.md (no-extraneous-dependencies: Separate packageDir for devDependencies import-js/eslint-plugin-import#1214)
• 3726bbb chore: Update to async version of istanbul-lib-source-maps (chore(package): update cross-env to version 5.0.0 import-js/eslint-plugin-import#1199)
• 0efc6d1 chore: Tweak arguments for async coverage data readers (chore(package): update contains-path to version 1.0.0 import-js/eslint-plugin-import#1198)
• cc77e13 chore: Add `use strict` to all except fixtures (chore(package): update chai to version 4.0.0 import-js/eslint-plugin-import#1197)
• bcbe1df chore: Update dependencies (chore(package): update chai to version 4.0.1 import-js/eslint-plugin-import#1196)
• 2735ee2 chore: 100% coverage (chore(package): update babylon to version 6.17.2 import-js/eslint-plugin-import#1195)
• fd40d49 feat: Use @ istanbuljs/schema for yargs setup (chore(package): update babylon to version 6.17.1 import-js/eslint-plugin-import#1194)

See the full diff

Package name: read-pkg-up

The new version differs by 20 commits.

• c4f8985 8.0.0
• e6fbe7f Require Node.js 12 and move to ESM
• 021b1ec Move to GitHub Actions ([Snyk] Security upgrade nyc from 11.9.0 to 14.0.0 #16)
• c92040f 7.0.1
• d96ce60 Readme tweaks
• 69983fc Tidelift tasks
• 83476ad 7.0.0
• 4406073 Update dependencies
• 8140c73 Rename `.package` to `.packageJson`
• 9ecaa3e Tidelift tasks
• e473d2a Create funding.yml
• 5267672 6.0.0
• 1c15896 Rename `pkg` property to `package`, return `undefined` instead of empty object, add TypeScript definition ([Snyk] Security upgrade nyc from 11.9.0 to 15.0.0 #10)
• 2c1d52f Add Node.js 12 to testing ([Snyk] Security upgrade nyc from 11.9.0 to 15.0.0 #9)
• d8d5100 5.0.0
• 4412fe2 Require Node.js 8
• 5bb0a79 Upgrade `read-pkg` to v4 ([Snyk] Security upgrade nyc from 11.9.0 to 15.0.0 #7)
• ecb0795 4.0.0
• c8bc094 Meta tweaks
• 7d66254 Require Node.js 6 ([Snyk] Security upgrade nyc from 11.9.0 to 14.0.0 #5)

See the full diff

Package name: safe-publish-latest

The new version differs by 8 commits.

• f32d708 v2.0.0
• 189699b [meta] add `auto-changelog`
• f44edd4 [Breaking] `getLatestError`: refactor to use Promises
• 222b068 [Breaking] add `exports`
• a3f5337 [Breaking] `getLatestError`: remove unused `options` param
• 48455b3 [readme] remove travis badge; add github actions/codecov badges
• 3a8d144 [Breaking] drop node < 12
• 72dfebb [meta] editorconfig: ignore more stuff in coverage

See the full diff

Package name: semver

The new version differs by 140 commits.

• e7b78de chore: release 7.5.2
• 58c791f fix: diff when detecting major change from prerelease (Request no-named-as-default rule options which allows Re-Export default syntax import-js/eslint-plugin-import#566)
• 5c8efbc fix: preserve build in raw after inc (Fix #564: Fix tests not running due to Espree bump import-js/eslint-plugin-import#565)
• 717534e fix: better handling of whitespace (tests broken on master import-js/eslint-plugin-import#564)
• 2f738e9 chore: bump @ npmcli/template-oss from 4.14.1 to 4.15.1 ("No default export found in module" when mixing ES5 and ES6 import-js/eslint-plugin-import#558)
• aa016a6 chore: release 7.5.1
• d30d25a fix: show type on invalid semver error (Update typescript-eslint-parser to version 0.3.0 🚀 import-js/eslint-plugin-import#559)
• 09c69e2 chore: bump @ npmcli/template-oss from 4.13.0 to 4.14.1 ([New] extensions: accept both a string, and an object to override it. import-js/eslint-plugin-import#555)
• 5b02ad7 chore: release 7.5.0
• e219bb4 fix: throw on bad version with correct error message (Update eslint to version 3.5.0 🚀 import-js/eslint-plugin-import#552)
• 503a4e5 feat: allow identifierBase to be false (Allow require() but forbid module.exports import-js/eslint-plugin-import#548)
• fc2f3df fix: incorrect results from diff sometimes with prerelease versions (Add option to no-extraneous-dependencies to check shrinkwrap import-js/eslint-plugin-import#546)
• 2781767 fix: avoid re-instantiating SemVer during diff compare (Sort-imports autofixer import-js/eslint-plugin-import#547)
• 82aa7f6 chore: release 7.4.0
• 731d896 chore: enable CD ([import/default] False positive when exporting a default value using destructuring import-js/eslint-plugin-import#545)
• 940723d fix: intersects with v0.0.0 and v0.0.0-0 (Add no-absolute-path rule (fixes #530) import-js/eslint-plugin-import#538)
• aa516b5 fix: faster parse options (Suggested change to readme import-js/eslint-plugin-import#535)
• 61e6ea1 fix: faster cache key factory for range (eslint-import-resolver-webpack swallows errors in webpack.config.js import-js/eslint-plugin-import#536)
• f8b8b61 fix: optimistic parse (no-extraneous-dependencies should not complain when importing file from project name import-js/eslint-plugin-import#541)
• 796cbe2 fix: semver.diff prerelease to release recognition (Support webpack configs that export a function import-js/eslint-plugin-import#533)
• 3f222b1 fix: reuse comparators on subset (Not using webpack config to resolve import-js/eslint-plugin-import#537)
• 113f513 feat: identifierBase parameter for .inc (New rules regarding namespaces used as values import-js/eslint-plugin-import#532)
• ea689bc chore: basic type test for RELEASE_TYPES
• c5d29df docs: Add "Constants" section to README

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)