[Snyk] Security upgrade aegir from 37.12.1 to 40.0.4

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/ipfs-core-utils/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aegir

The new version differs by 79 commits.

• c0c7c40 chore(release): 40.0.4 [skip ci]
• 40e56df chore: fix dep check
• d8c3ba1 fix: update versions
• 86f57f7 chore(release): 40.0.3 [skip ci]
• 2a09f6c fix: downgrade semantic-release (Parcel fails to build js-ipfs (and many other things) ipfs/js-ipfs#1344)
• 900d7e7 chore(release): 40.0.2 [skip ci]
• 02e36b6 fix: hard code mocha runner for pw-test (docs: revamp exchange files example ipfs/js-ipfs#1343)
• af18280 chore(release): 40.0.1 [skip ci]
• 57b7642 fix: handle more relative path cases in doc command (feat: Ping ipfs/js-ipfs#1342)
• 4373c38 chore(release): 40.0.0 [skip ci]
• 4ef4b62 deps!: upgrade typescript and typedoc (Reduce memory usage with a Buffer pool ipfs/js-ipfs#1337)
• 48cc141 chore: Update .github/workflows/stale.yml [skip ci]
• 4cac5d3 chore(release): 39.0.13 [skip ci]
• 8f4ab17 fix: when generating api doc link, check typedoc entry point ('npm install ipfs' fails on Windows 10 if Windows login (and user's home path) contains non-ASCII characters ipfs/js-ipfs#1318)
• 4aac80c chore(release): 39.0.12 [skip ci]
• 4c3ab55 fix: allow specifying ci file in check-project (files.add with pull stream does not work ipfs/js-ipfs#1317)
• a994888 chore(release): 39.0.11 [skip ci]
• a95aec3 fix: handle invalid workspace entries (Two peers with same Identity ipfs/js-ipfs#1316)
• 369453f chore: Update .github/workflows/stale.yml [skip ci]
• 8501d5f chore(release): 39.0.10 [skip ci]
• 17c0331 chore: fix linting (feat(bitswap.unwatch) expose bitswap.unwatch to cli and http api ipfs/js-ipfs#1305)
• c8ad457 chore(release): 39.0.9 [skip ci]
• c97f9bf fix: Updated doc-check to generate config + format errors (fix bug: node.files.add do not accept object ipfs/js-ipfs#1255)
• fe1e121 chore(release): 39.0.8 [skip ci]

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[socket-security]

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
aegir	40.0.13	environment	+283	492 MB	npm-service-account-ipfs

[codecov]

Codecov Report

Attention: 12 lines in your changes are missing coverage. Please review.

Comparison is base (8f351a8) 79.04% compared to head (1620044) 68.30%.
Report is 18 commits behind head on master.

Files	Patch %	Lines
packages/ipfs-http-client/src/dht/map-event.js	33.33%	4 Missing ⚠️
packages/ipfs-http-client/src/bootstrap/add.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/bootstrap/clear.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/bootstrap/list.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/bootstrap/reset.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/bootstrap/rm.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/swarm/addrs.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/swarm/local-addrs.js	50.00%	1 Missing ⚠️
packages/ipfs-http-client/src/swarm/peers.js	50.00%	1 Missing ⚠️

Additional details and impacted files

@@             Coverage Diff             @@
##           master     #154       +/-   ##
===========================================
- Coverage   79.04%   68.30%   -10.74%     
===========================================
  Files         557      154      -403     
  Lines       36428     5358    -31070     
  Branches     2923      452     -2471     
===========================================
- Hits        28795     3660    -25135     
+ Misses       7633     1698     -5935     

Flag	Coverage Δ
chrome	68.30% <58.62%> (-0.56%)	⬇️
node	?

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.