[Snyk] Fix for 1 vulnerabilities

[awaisab172]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: globby

The new version differs by 12 commits.

• 878ef6e 10.0.0
• 3706920 Upgrade `fast-glob` package to v3 ([Snyk] Fix for 2 vulnerabilities #126)
• 8aadde8 Add `globby.stream` ([Snyk] Security upgrade mkdirp from 0.5.1 to 0.5.2 #113)
• 2dd76d2 Remove `**/bower_components/**` as a default ignore pattern
• 9f781ce Require Node.js 8
• 04d51bf Upgrade `ignore` package ([Snyk] Fix for 1 vulnerabilities #120)
• 2b61484 Readme tweaks
• ff3e1f9 Tidelift tasks
• 31f18ae Create funding.yml
• 33ca01c Fix using the `gitignore` and `stats` options together ([Snyk] Fix for 1 vulnerabilities #121)
• c737820 Minor TypeScript definition improvements
• 82db101 Add Node.js 12 to testing ([Snyk] Security upgrade webpack-bundle-analyzer from 3.5.0 to 4.0.0 #117)

See the full diff

Package name: lerna

The new version differs by 250 commits.

• 4582c47 chore(release): v4.0.0
• 2d0a97a fix(version): Ensure --create-release environment variables are present during initialization
• 63f18ba test(version): Assert on mocked releases, not calls
• 1f17e0c chore(lerna): Set top-level package tag -> next
• 80a072e chore(lerna): Enable --temp-tag during publish
• e00779a chore: Add release script
• 255c2ea docs(version): Move changelogPreset examples
• 7acf883 Merge branch 'next' into 'main'
• c3814b5 test(child-process): Avoid windows bullshit
• 671ddef chore: Reset lockfile
• affed1c feat(deps): Bump dependencies
• 126676a chore(scripts): Support --no-install flag
• d8100fd feat(deps): execa@^5.0.0
• 187cd58 chore(deps): Bump devDependencies
• ce232c8 chore: remove volta pins, annoying
• d181863 chore: Bump volta pins
• 42ab453 feat(prompt): Remove ambiguous exports
• 4acff59 refactor: Synchronize import ChildProcessUtilities -> childProcess
• a02e12e refactor(test): Refactor mockPromptChoices() -> promptSelectOne.chooseBump()
• 69bb2e4 refactor: Decompose PromptUtilities namespace import
• a08bafb refactor(test): Use unambiguous mockPromptChoices() method
• 3c67f15 refactor: Migrate to unambiguous promptConfirmation()
• 5d05d95 refactor: Migrate to unambiguous promptSelectOne()
• e9237f3 refactor: Migrate to unambiguous promptTextInput()

See the full diff

Package name: postcss-cli

The new version differs by 20 commits.

• 745ad2c 7.0.0
• cf6ea09 Update eslint config
• ea1cec4 Update eslint-config-problems to version 3.1.0 (Editor: Add spellcheck / proofreading feature Automattic/wp-calypso#306)
• 1519430 Update globby to version 10.0.1 (Editor: Add "link to existing content" feature Automattic/wp-calypso#303)
• 5b47456 Update eslint to version 6.8.0 (Framework: replace wpcom-private by wpcom-unpublished Automattic/wp-calypso#305)
• e241672 Update nyc to version 15.0.0 (Purchases: Deploy /purchases to production Automattic/wp-calypso#297)
• 4a87ff1 Update chalk to version 3.0.0 (Fix typo in the readme Automattic/wp-calypso#294)
• e666505 Update prettier to version 1.19.1 (Plugins: Show disabled autoupdate info Automattic/wp-calypso#304)
• 0d3591a Update ava to version 2.4.0 (Framework: Allow for a sans-sidebar layout and adjust accordingly  Automattic/wp-calypso#302)
• cb9f451 Update fs-extra to version 8.1.0 (Don't allow private registration to be removed from the cart Automattic/wp-calypso#301)
• 4f68a46 Update chokidar to version 3.3.0 (Editor: Add word count Automattic/wp-calypso#300)
• 5c22ddb Update yargs to version 15.0.2 (Editor: Fix iOS 8.4 Focus Issues Automattic/wp-calypso#298)
• 79eb0ac Update get-stdin to version 7.0.0 (Purchases: Domain renewals: Removing private registration Automattic/wp-calypso#273)
• 71384c6 Update Travis config; remove AppVeyor
• 6b92df3 BREAKING: Drop Node 6 & 8; test on new Node versions
• 7091819 6.1.3
• 0de7ccf Fix map file path creation (Purchases: Renewals: Use a temporary cart Automattic/wp-calypso#286)
• f1c7352 Update prettier to version 1.18.0 (Purchases: Manage: Implement Use This Card feature Automattic/wp-calypso#281)
• 035bab8 Update nyc to version 14.0.0 (Server Side Rendering: Bundle localization json files Automattic/wp-calypso#274)
• 541048e Update prettier to version 1.17.0 (Purchases: style issues for PayPal in Edit Payment Method Automattic/wp-calypso#272)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic