[Snyk] Fix for 1 vulnerabilities

[ajesse11x]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: chokidar

The new version differs by 161 commits.

• 7b8e02a Release 3.0.0.
• e7bfe2f Move stuff.
• df7f22e Remove changelog from npm, move to hidden dir.
• 3df7692 Improve naming.
• 6e94ca2 Clean-up.
• 2de2f9c test: Add testing of Node.js v12 in Travis pipeline. (Added url information in the boot message Automattic/wp-calypso#833)
• 9e0965a Fix Windows tests in Travis CI (Reader: Pretty URLs for some feeds Automattic/wp-calypso#832)
• c95a98f Update stuff.
• 187ff2b test: Trying to fix blinked tests for Travis CI. (Plugins: Can't select business plugin only Automattic/wp-calypso#825)
• db99076 fix(Windows): Add converting from windows to unix path for all ignored paths. (Translator invitation: add conditional margin to avoid sidebar Automattic/wp-calypso#824)
• 41f8782 fix(FsEvents): Remove situation with NaN depth. (Plugins: updating a plugin moves from an inline notice to global one Automattic/wp-calypso#823)
• 7cf3f7e Update readdirp to stable.
• 0927a62 Bump packages.
• 11cd857 Update nyc.
• 99c14d7 Uncomment fsevents.
• cf330a5 Update fsevents.
• 0e4fca5 Fix deps.
• 9c575d4 Fix Windows version (Plugin Browser: Filter by author Automattic/wp-calypso#821)
• 3323d59 fix(Linux): Make event loop hack for keep testing valid. (Jetpack Plugins: hidden sites and their plugins should not be displayed anywhere in Calypso Automattic/wp-calypso#820)
• 06214c5 Update to latest readdirp.
• 793639f Rename osxfswatch.
• 078bc2d Refactor and fix freaking tests.
• 2b9bb41 Try node 11.
• 3fe3d4e Test travis.

See the full diff

Package name: globby

The new version differs by 33 commits.

• 878ef6e 10.0.0
• 3706920 Upgrade `fast-glob` package to v3 (Purchases: Billing History: Duplicate credit cards Automattic/wp-calypso#126)
• 8aadde8 Add `globby.stream` ([Snyk] Fix for 4 vulnerabilities #113)
• 2dd76d2 Remove `**/bower_components/**` as a default ignore pattern
• 9f781ce Require Node.js 8
• 04d51bf Upgrade `ignore` package ([Snyk] Fix for 1 vulnerabilities #120)
• 2b61484 Readme tweaks
• ff3e1f9 Tidelift tasks
• 31f18ae Create funding.yml
• 33ca01c Fix using the `gitignore` and `stats` options together ([Snyk] Fix for 2 vulnerabilities #121)
• c737820 Minor TypeScript definition improvements
• 82db101 Add Node.js 12 to testing ([Snyk] Security upgrade express from 4.16.4 to 4.20.0 #117)
• 766b728 9.2.0
• dc0a49c Refactor TypeScript definition to CommonJS compatible export ([Snyk] Security upgrade chokidar from 2.0.4 to 4.0.0 #115)
• 89cee24 9.1.0
• 59f4b48 Add check to ensure `cwd` is a directory ([Snyk] Security upgrade thread-loader from 1.2.0 to 2.1.1 #110)
• 9a9cf1e Add TypeScript definition ([Snyk] Security upgrade webpack from 4.20.2 to 5.94.0 #111)
• eb26c7e Meta tweaks
• d77a623 Add failing test for [Snyk] Security upgrade webpack-bundle-analyzer from 3.0.3 to 4.0.0 #105 ([Snyk] Fix for 1 vulnerabilities #108)
• 2294618 Deduplicate identical file patterns ([Snyk] Fix for 2 vulnerabilities #102)
• ba9c267 Add failing test for [Snyk] Fix for 1 vulnerabilities #97 ([Snyk] Fix for 2 vulnerabilities #100)
• 71b9c58 9.0.0
• 39ad0d9 Update dependencies
• d804228 Fix compatibility with latest `dir-glob` release ([Snyk] Fix for 1 vulnerabilities #99)

See the full diff

Package name: postcss-cli

The new version differs by 37 commits.

• 745ad2c 7.0.0
• cf6ea09 Update eslint config
• ea1cec4 Update eslint-config-problems to version 3.1.0 (Editor: Add spellcheck / proofreading feature Automattic/wp-calypso#306)
• 1519430 Update globby to version 10.0.1 (Editor: Add "link to existing content" feature Automattic/wp-calypso#303)
• 5b47456 Update eslint to version 6.8.0 (Framework: replace wpcom-private by wpcom-unpublished Automattic/wp-calypso#305)
• e241672 Update nyc to version 15.0.0 (Purchases: Deploy /purchases to production Automattic/wp-calypso#297)
• 4a87ff1 Update chalk to version 3.0.0 (Fix typo in the readme Automattic/wp-calypso#294)
• e666505 Update prettier to version 1.19.1 (Plugins: Show disabled autoupdate info Automattic/wp-calypso#304)
• 0d3591a Update ava to version 2.4.0 (Framework: Allow for a sans-sidebar layout and adjust accordingly  Automattic/wp-calypso#302)
• cb9f451 Update fs-extra to version 8.1.0 (Don't allow private registration to be removed from the cart Automattic/wp-calypso#301)
• 4f68a46 Update chokidar to version 3.3.0 (Editor: Add word count Automattic/wp-calypso#300)
• 5c22ddb Update yargs to version 15.0.2 (Editor: Fix iOS 8.4 Focus Issues Automattic/wp-calypso#298)
• 79eb0ac Update get-stdin to version 7.0.0 (Purchases: Domain renewals: Removing private registration Automattic/wp-calypso#273)
• 71384c6 Update Travis config; remove AppVeyor
• 6b92df3 BREAKING: Drop Node 6 & 8; test on new Node versions
• 7091819 6.1.3
• 0de7ccf Fix map file path creation (Purchases: Renewals: Use a temporary cart Automattic/wp-calypso#286)
• f1c7352 Update prettier to version 1.18.0 (Purchases: Manage: Implement Use This Card feature Automattic/wp-calypso#281)
• 035bab8 Update nyc to version 14.0.0 (Server Side Rendering: Bundle localization json files Automattic/wp-calypso#274)
• 541048e Update prettier to version 1.17.0 (Purchases: style issues for PayPal in Edit Payment Method Automattic/wp-calypso#272)
• 8fd79b0 6.1.2
• 72376fc Upgrade prettier to ~1.16.4
• 87a7286 Update globby to v9.0.0 (Stats: Insights module labels and numbers misaligned Automattic/wp-calypso#270)
• c079cff Test Node 10 & 11

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic