[Snyk] Security upgrade @bugsnag/js from 5.1.0 to 6.0.0

[adifaidz]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @bugsnag/js

The new version differs by 32 commits.

• e4544aa v6.0.0
• 3924e98 chore: Update changelog
• 6eb4197 fix: Alias correct lerna command
• 3569ecc Merge pull request #478 from bugsnag/remove-request-dependency-rebased
• 9a49dc0 Merge pull request #480 from bugsnag/yarn-peer-dependency-warning-fix
• 10c3b6e Merge pull request #479 from bugsnag/dedupe-browser-bundle
• c959b7b test: Remove unused scenario fixtures
• 1457209 test: Update outdated test steps
• ddd8662 test: Update network alias in docker-compose.yml
• b48b0be build(yarn): Prevent erroneous peerDependency warnings
• c6c5a4e docs: Add 5 to 6 section in upgrade guide
• 5750b4b fix(delivery-node): Treat all 2XX status codes as a success
• b96c9c0 chore: Update changelog
• 010b610 fix(config): Allow boolean values in `agent` config
• 76f20a8 test(delivery-node): Add more unit tests for new delivery lib
• b78460c feat(delivery-node): Remove dependency on request
• f18be65 Re-enable and fix proxy tests
• 1548119 Merge branch 'next' into bengourley/dedupe-browser-bundle
• db127b4 Switch CI to buildkite (#476)
• 276e8ed fix(browser): Dedupe external deps from bundle
• 7f70946 Merge pull request #468 from bugsnag/next
• 192f2f3 v5.2.0
• 03c0dc5 chore: Update changelog for release
• 21a1b08 Merge pull request #466 from bugsnag/auto-breadcrumb-config-bug

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Prototype Pollution