[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/node_modules/eslint-plugin-markdown/node_modules/ms/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: eslint

The new version differs by 250 commits.

• 80b8d5d 5.5.0
• b68e403 Build: changelog update for 5.5.0
• 6e110e6 Fix: camelcase duplicate warning bug (fixes url: export URLSearchParams nodejs/node#10801) (Cannot disable warnings when node is launched via a shell script. nodejs/node#10802)
• 5103ee7 Docs: Add Brackets integration (test: improve code in test-console-instance nodejs/node#10813)
• b61d2cd Update: max-params to only highlight function header (I found that the NodejsForDelphi is not thread safe? nodejs/node#10815)
• 2b2f11d Upgrade: babel-code-frame to version 7 (test: add test case to test-http-response-statuscode.js nodejs/node#10808)
• 2824d43 Docs: fix comment placement in a code example (url: make URLSearchParams properties spec-compliant nodejs/node#10799)
• 10690b7 Upgrade: devdeps and deps to latest (test: refactor test-crypto-padding-aes256 nodejs/node#10622)
• 80c8598 Docs: gitignore syntax updates (fixes benchmark: http/simple is unreliable nodejs/node#8139) (test: get rid of done in test-dns and use common.mustCall nodejs/node#10776)
• cb946af Chore: use meta.messages in some rules (1/4) (process: improve process.hrtime nodejs/node#10764)
• a857cd9 5.4.0
• 8dee250 Build: changelog update for 5.4.0
• a70909f Docs: Add jscs-dev.github.io links (Eslint fixes nodejs/node#10771)
• 034690f Fix: no-invalid-meta crashes for non Object values (fixes Remove nonstandard WHATWG URL url.toString(true) nodejs/node#10750) (test: cleanup test-crypto-dh.js nodejs/node#10753)
• 11a462d Docs: Broken jscs.info URLs (fixes deps: V8: fix backtrace for symbols nodejs/node#10732) (Unclear docs on copying/sharing memory for Buffer.from(arrayBuffer) nodejs/node#10770)
• 985567d Chore: rm unused dep string.prototype.matchall (benchmark: don't lint autogenerated modules nodejs/node#10756)
• f3d8454 Update: Improve no-extra-parens error message (Request: support out of tree build nodejs/node#10748)
• 562a03f Fix: consistent-docs-url crashes if meta.docs is empty (fixes Incorrect SHASUM method listed on v4.4.7 nodejs/node#10722) (lib: refactor bootstrap_node.js regular expression nodejs/node#10749)
• 6492233 Chore: enable no-prototype-builtins in codebase (fixes Tests for resizing window fails for Node.js v7 while working fine for v4-v6 nodejs/node#10660) (http: remove pointless uses of arguments nodejs/node#10664)
• 137140f Chore: use eslintrc overrides (pipe: enable writev for pipe handles on Unix nodejs/node#10677)
• 2af6f4f 5.3.0
• 11e70c7 Build: changelog update for 5.3.0
• dd6cb19 Docs: Updated no-return-await Rule Documentation (fixes dgram: generalized send queue to handle close nodejs/node#9695) (test: improve test stream transform constructor nodejs/node#10699)
• 6009239 Chore: rename utils for consistency (querystring.unescape() accepting input that is not URL escaped nodejs/node#10727)

See the full diff

Package name: lint-staged

The new version differs by 250 commits.

• 885a644 Merge pull request [Snyk] Security upgrade mocha from 3.5.3 to 4.0.0 #852 from okonet/listr2
• aba3421 fix: all lint-staged output respects the `quiet` option
• b8df31a fix: do not show incorrect error when verbose and no output
• eed6198 style: simplify eslint and prettier config
• b746290 ci: replace Node.js 13 with 14, since 14 will be next LTS
• 2c6f3ad docs: improve `verbose` description
• e749a0b test: remove redundant, misbehaving test
• 16848d8 fix: use test renderer during tests and when TERM=dumb
• efffa22 test: cover `--verbose` option usage
• 1b18550 test: restore variable in test output
• 6aede38 test: add test for error during merge state restoration
• b565481 test: integration test targets the full Node.js API instead of just `runAll`
• a3bd9d7 feat: allow specifying `cwd` using the Node.js API
• 85de3a3 feat: add `--verbose` to show output even when tasks succeed
• d69c65b fix: log task output after running listr to keep everything
• e95d1b0 refactor: move skip and enable cheks of listr tasks to separate file
• 6da7667 refactor: move messages to separate file
• 6392480 refactor: use symbols for errors
• 8f32a3e feat: replace listr with listr2 and print errors inline
• c9adca5 fix: use stash create/store to prevent files from disappearing from disk
• e093b1d fix(deps): update dependencies
• 6066b07 fix: pass correct path to unstaged patch during cleanup
• 0bf1fb0 fix: allow lint-staged to run on empty git repo by disabling backup
• 1ac6863 Merge pull request [Snyk] Fix for 1 vulnerabilities #837 from okonet/serial-git-add

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)