[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: read-pkg

The new version differs by 26 commits.

• 55549f3 6.0.0
• 2088095 Require Node.js 12 and move to ESM
• 4c0cd9a Move to GitHub Actions ([Snyk] Fix for 1 vulnerable dependencies #19)
• bfe8eb8 5.2.0
• 8b11c42 Bump dependencies ([Snyk] Fix for 2 vulnerable dependencies #17)
• a6ca17a Fix readme example ([Snyk] Fix for 2 vulnerable dependencies #16)
• 01d66b2 Tidelift tasks
• 371d871 Create funding.yml
• 7a86b11 5.1.1
• d57aeb1 Fix types for default value of `normalize` ([Snyk Update] New fixes for 1 vulnerable dependency path #14)
• e2ae941 Add Node.js 12 to testing ([Snyk Update] New fixes for 1 vulnerable dependency path #13)
• 1270bef 5.1.0
• a45019a Meta tweaks
• 8a3fcef Add TypeScript definition ([Snyk Update] New fixes for 1 vulnerable dependency path #12)
• d443393 Fix Travis
• 51a9429 5.0.0
• 267b050 Require Node.js 8
• 03b601f 4.0.1
• b1a3920 Use `pify`
• 8f30e19 4.0.0
• 0cd09a0 Remove the `path` arguments and drop BOM stripping
• c5f6837 Require Node.js 6
• 7eb2f6b 3.0.0
• 8aac403 Fix tests for newer AVA version

See the full diff

Package name: webpack

The new version differs by 250 commits.

• 213226e 4.0.0
• fde0183 Merge pull request #6081 from webpack/formating/prettier
• b6396e7 update stats
• f32bd41 fix linting
• 5238159 run prettier on existing code
• 518d1e0 replace js-beautify with prettier
• 4c25bfb 4.0.0-beta.3
• dd93716 Merge pull request #6296 from shellscape/fix/hmr-before-node-stuff
• 7a07901 Merge pull request #6563 from webpack/performance/assign-depth
• c7eb895 Merge pull request #6452 from webpack/update_acorn
• 9179980 Merge pull request #6551 from nveenjain/fix/templatemd
• e52f323 optimize performance of assignDepth
• 6bf5df5 Fixed template.md
• 90ab23a Merge branch 'master' into fix/hmr-before-node-stuff
• b0949cb add integration test for spread operator
• 39438c7 unittest now also walks the ast
• 15ab027 Merge pull request #6536 from jevan0307/sideEffects-selectors
• 1611ce1 Merge pull request #6561 from joshunger/patch-1
• 6e175bc Merge pull request #6549 from webpack/md4_hash
• 0637531 Add a hyperlink to create a new issue
• 0e1f9c6 Merge pull request #6554 from webpack/deps/end-of-beta
• 72477f4 upgrade versions to stable versions
• ed30285 Merge pull request #6546 from webpack/bot/review-permission
• 40ee8c7 Use MD4 for hashing

See the full diff

Package name: yargs

The new version differs by 98 commits.

• 8515e4f docs: nit in CHANGELOG
• 4b8cfa9 docs: slight tweaks to CHANGELOG
• c809cbe chore(release): 10.0.0
• fc13dcd chore: new translations for command API overhaul (#976)
• 7269531 feat: .usage() can now be used to configure a default command (#975)
• 3757194 chore: add id translation to #976 (#986)
• 47b3078 chore: update Dutch Translation (#981)
• 20bb99b feat: replace /bin/bash with file basename (#983)
• 5a9c986 feat(translation): Update pl-PL translations (#985)
• 02cc11d docs: whoops, forgot to call out a breaking change introduced into parse()
• 7e58453 fix: the positional argument parse was clobbering global flag arguments (#984)
• a06b67d chore: update tr.json (#982)
• b2d11b3 chore: add ja translations (#979)
• 1598a7f docs: switch to using .positional() in example (#973)
• 280d0d6 feat: hidden options are now explicitly indicated using "hidden" flag (#962)
• 8c1d7bf fix: less eager help command execution (#972)
• db77c53 chore: switch to find-up from read-pkg-up (#970)
• cb16460 feat: introduce .positional() for configuring positional arguments (#967)
• 3bb8771 fix: config and normalise can be disabled with false (#952)
• c649415 chore(release): 9.1.0
• 7b22203 fix(command): Run default cmd even if the only cmd (#950)
• 74a38b2 feat: multiple usage calls are now collected, not replaced (#958)
• d1b23f3 chore(release): 9.0.1
• ac8088b fix: implications fails only displayed once (#954)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic