[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-Y18N-1021887	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: protractor

The new version differs by 63 commits.

• 5d8da04 chore(release): version bump to 6.0.0 and update the changelog
• d777738 chore(tests): circleci - chrome 69 requires chromdriver to 2.44 (#5182)
• 3d50b68 chore(deps): update based on npm audit
• e478ba8 chore(release): bump version to 6.0.1-beta
• 7054827 chore(types): fix types to use not @types/selenium-webdriver (#5127)
• 2e5c2e6 chore(jasmine): prevent random execution order in jasmine 3 (#5126)
• 8afc4e2 chore(release): release 6.0.0-beta and update the changelog
• 5fd711c chore(webdriver-manager): use webdriver-manager@13.0.0-beta
• 96ae17c deps(jasmine): upgrade jasmine 3.3 (#5102)
• 68491dd chore(expectedConditions): update generic Function typings (#5101)
• cf43651 chore(debugprint): convert debugprint to TypeScript (#5074)
• d213aa9 deps(selenium): upgrade to selenium 4 (#5095)
• 4672265 chore(browser): remove timing issues with restart and fork (#5085)
• b4dbcc2 chore(elementexplorer): remove explorer bin file (#5094)
• 7de6d85 docs(api): update examples to use async/await (#5081)
• 1b2036e typings(selenium): try out new version of typings (#5084)
• befb457 chore(bin): update webdriver-manager require to use the cli (#5093)
• 509f1b2 deps(latest): upgrade to the gulp and typescript (#5089)
• 2def202 deps(webdriver-manager): use replacement (#5088)
• 9d510db chore(test): remove jasmine addMatcher test (#5072)
• 6522e40 chore(cleanup): clean up imports and wdpromises (#5073)
• 3b8f263 chore(ignoreSynchornization): clean up to use waitForAngularEnabled (#5071)
• ffa3519 chore(debugger): remove debugger and explore methods (#5070)
• 0f7a38a chore(test): error tests fixed (#5069)

See the full diff

Package name: webpack

The new version differs by 250 commits.

• 213226e 4.0.0
• fde0183 Merge pull request #6081 from webpack/formating/prettier
• b6396e7 update stats
• f32bd41 fix linting
• 5238159 run prettier on existing code
• 518d1e0 replace js-beautify with prettier
• 4c25bfb 4.0.0-beta.3
• dd93716 Merge pull request #6296 from shellscape/fix/hmr-before-node-stuff
• 7a07901 Merge pull request #6563 from webpack/performance/assign-depth
• c7eb895 Merge pull request #6452 from webpack/update_acorn
• 9179980 Merge pull request #6551 from nveenjain/fix/templatemd
• e52f323 optimize performance of assignDepth
• 6bf5df5 Fixed template.md
• 90ab23a Merge branch 'master' into fix/hmr-before-node-stuff
• b0949cb add integration test for spread operator
• 39438c7 unittest now also walks the ast
• 15ab027 Merge pull request #6536 from jevan0307/sideEffects-selectors
• 1611ce1 Merge pull request #6561 from joshunger/patch-1
• 6e175bc Merge pull request #6549 from webpack/md4_hash
• 0637531 Add a hyperlink to create a new issue
• 0e1f9c6 Merge pull request #6554 from webpack/deps/end-of-beta
• 72477f4 upgrade versions to stable versions
• ed30285 Merge pull request #6546 from webpack/bot/review-permission
• 40ee8c7 Use MD4 for hashing

See the full diff

Package name: y18n

The new version differs by 60 commits.

• e343b70 chore: v5.0.5 release
• b64ae70 chore: release 5.0.5 ([Snyk] Security upgrade karma from 1.7.1 to 6.3.16 #109)
• a9ac604 fix: address prototype pollution issue ([Snyk] Security upgrade unset-value from 0.1.2 to 2.0.1 #108)
• 61a8b9a chore: release 5.0.4 ([Snyk] Fix for 1 vulnerabilities #106)
• 4f85d80 fix(exports): node 13.0 and 13.1 require the dotted object form _with_ a string fallback ([Snyk] Security upgrade marked from 0.3.19 to 4.0.10 #105)
• 3c4e241 chore: release 5.0.3 ([Snyk] Security upgrade webpack-dev-server from 2.11.5 to 4.7.3 #104)
• e39921e fix(exports): node 13.0-13.6 require a string fallback ([Snyk] Security upgrade selfsigned from 1.10.14 to 2.0.0 #103)
• 091c7cd build: newest version of action
• bbf3bfd chore(deps): update dependency gts to v3 ([Snyk] Security upgrade node-forge from 0.6.49 to 1.0.0 #102)
• fd0e21a chore: release 5.0.2 ([Snyk] Security upgrade node-forge from 0.6.49 to 1.0.0 #101)
• 3834d9a fix(deno): update types for deno ^1.4.0 ([Snyk] Security upgrade node-sass from 4.14.1 to 7.0.1 #100)
• 9c8a079 chore: release 5.0.1 ([Snyk] Security upgrade node-sass from 4.14.1 to 7.0.0 #99)
• 124f7b0 fix: main had old index path ([Snyk] Security upgrade jsprim from 1.4.1 to 2.0.2 #98)
• 3351338 build: switch package.json to format supported by wombat
• f2beb1e chore: release 5.0.0 ([Snyk] Fix for 3 vulnerabilities #91)
• b284631 build: experiment with label for kicking off build
• 1a5852a chore(deps): update dependency typescript to v4 ([Snyk] Security upgrade json-schema from 0.2.5 to 0.4.0 #97)
• 25d8962 build: fix action release tag
• 467b4b7 build: use 2.x release
• 0d90d50 force workflow
• b9489dc build: debugging bad build
• 90eda2d build: debugging bad build
• 5b3d158 build: debugging bad build
• 2da6117 build: debugging bad build

See the full diff

Package name: yargs

The new version differs by 250 commits.

• 1ffb927 chore: v16.0.0 release
• 5e5e5d0 chore: release 16.0.0 (#1698)
• b215fba feat: adds strictOptions() (#1738)
• c7debe8 feat(helpers): rebase, Parser, applyExtends now blessed helpers (#1733)
• c71783a feat: i18n for ESM and Deno (#1735)
• d360577 build: use release-please action (#1736)
• 4151fee feat: tweaks to API surface based on user feedback (#1726)
• 60234a4 deps(typescript): upgrade to typescript@4.x (#1728)
• bad6f76 docs: use URL to images, for benefit of Deno (#1727)
• b1f647b chore: add back yargs logo
• ac6d5d1 feat: adds support for ESM and Deno (#1708)
• 0f81024 fix(yargs): add missing command(module) signature (#1707)
• a552990 feat(usage)!: single char aliases first in help (#1574)
• f5997e8 refactor(ts): move to TypeScript release of yargs-parser (#1696)
• c06f886 refactor(ts)!: ship yargs.d.ts (#1671)
• 56a589f chore(deps): update dependency @types/mocha to v8 (#1689)
• df283d3 chore(deps): update dependency mocha to v8 (#1674)
• 863937f feat!: drop support for EOL Node 8 (#1686)
• 028b50d chore: release 15.4.0 (#1635)
• 225ab82 feat: support array of examples (#1682)
• e68334b refactor(ts): move and tsify most of root yargs.js to lib/yargs (#1670)
• cb7fbb8 chore: remove old entries from `files` field in `package.json (#1677)
• 34949f8 Revert "chore(deps): update dependency eslint to v7 (#1656)" (#1673)
• 18c2efd docs(api): clarify process.argv handling and the order of API methods (#1644)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic