[Snyk] Fix for 6 vulnerabilities

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • deps/node-inspect/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	679/1000 Why? Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962463	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: eslint

The new version differs by 250 commits.

• 80b8d5d 5.5.0
• b68e403 Build: changelog update for 5.5.0
• 6e110e6 Fix: camelcase duplicate warning bug (fixes url: export URLSearchParams nodejs/node#10801) (Cannot disable warnings when node is launched via a shell script. nodejs/node#10802)
• 5103ee7 Docs: Add Brackets integration (test: improve code in test-console-instance nodejs/node#10813)
• b61d2cd Update: max-params to only highlight function header (I found that the NodejsForDelphi is not thread safe? nodejs/node#10815)
• 2b2f11d Upgrade: babel-code-frame to version 7 (test: add test case to test-http-response-statuscode.js nodejs/node#10808)
• 2824d43 Docs: fix comment placement in a code example (url: make URLSearchParams properties spec-compliant nodejs/node#10799)
• 10690b7 Upgrade: devdeps and deps to latest (test: refactor test-crypto-padding-aes256 nodejs/node#10622)
• 80c8598 Docs: gitignore syntax updates (fixes benchmark: http/simple is unreliable nodejs/node#8139) (test: get rid of done in test-dns and use common.mustCall nodejs/node#10776)
• cb946af Chore: use meta.messages in some rules (1/4) (process: improve process.hrtime nodejs/node#10764)
• a857cd9 5.4.0
• 8dee250 Build: changelog update for 5.4.0
• a70909f Docs: Add jscs-dev.github.io links (Eslint fixes nodejs/node#10771)
• 034690f Fix: no-invalid-meta crashes for non Object values (fixes Remove nonstandard WHATWG URL url.toString(true) nodejs/node#10750) (test: cleanup test-crypto-dh.js nodejs/node#10753)
• 11a462d Docs: Broken jscs.info URLs (fixes deps: V8: fix backtrace for symbols nodejs/node#10732) (Unclear docs on copying/sharing memory for Buffer.from(arrayBuffer) nodejs/node#10770)
• 985567d Chore: rm unused dep string.prototype.matchall (benchmark: don't lint autogenerated modules nodejs/node#10756)
• f3d8454 Update: Improve no-extra-parens error message (Request: support out of tree build nodejs/node#10748)
• 562a03f Fix: consistent-docs-url crashes if meta.docs is empty (fixes Incorrect SHASUM method listed on v4.4.7 nodejs/node#10722) (lib: refactor bootstrap_node.js regular expression nodejs/node#10749)
• 6492233 Chore: enable no-prototype-builtins in codebase (fixes Tests for resizing window fails for Node.js v7 while working fine for v4-v6 nodejs/node#10660) (http: remove pointless uses of arguments nodejs/node#10664)
• 137140f Chore: use eslintrc overrides (pipe: enable writev for pipe handles on Unix nodejs/node#10677)
• 2af6f4f 5.3.0
• 11e70c7 Build: changelog update for 5.3.0
• dd6cb19 Docs: Updated no-return-await Rule Documentation (fixes dgram: generalized send queue to handle close nodejs/node#9695) (test: improve test stream transform constructor nodejs/node#10699)
• 6009239 Chore: rename utils for consistency (querystring.unescape() accepting input that is not URL escaped nodejs/node#10727)

See the full diff

Package name: tap

The new version differs by 250 commits.

• 8f2baa7 16.0.0
• 65e599e drop support for node v10
• 84fc6df docs: changelog for v16
• e6acf7b update coveralls documentation to say to install it
• 3c7b3ef document coveralls removal in the cli help output
• 43bf1df undocument synonyms
• 1ff75a4 make coveralls an optional peer dep
• 3f1ae47 Add eslint for linting
• 162c1a8 Support Typescript for --before and --after
• 28d2d03 Fix script on using node-tap with codecov
• 3a0e81c docs: fix broken link
• 1b636b2 Add jsonpath-faster
• c4bdeef fix typo `than` to `that`
• 20fbd40 Update Node.js min version to 10.x in CONTRIBUTING
• 90dda0b update cli doc
• 636ab18 15.2.3
• e609d8f docs: changelog for 15.2
• c182328 [email protected]
• f576a60 docs: setting t.snapshotFile
• d9fa241 [email protected]
• a02f33e update cli doc
• d1500b6 15.2.2
• b784d77 tap-parser@11
• 567384e update cli doc

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Server-side Request Forgery (SSRF)
🦉 Prototype Pollution

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[socket-security]

Updated and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
tap	10.7.3...16.3.9	eval, network, filesystem, environment	+90/-36	82.5 MB	isaacs

🚮 Removed packages: [email protected]