[Snyk] Fix for 4 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @continuous-auth/semantic-release-npm

The new version differs by 250 commits.

• a4b0207 chore: update npm plugin for use with CFA
• 00027b3 chore(deps): update dependency semantic-release to v22.0.6 (build(deps-dev): bump @types/node from 15.0.3 to 15.6.0 electron/rebuild#701)
• 8b42c91 chore(deps): lock file maintenance (build(deps-dev): bump semantic-release from 17.4.2 to 17.4.3 electron/rebuild#700)
• 33ba7a4 chore(deps): update dependency node to v20 (build(deps): bump fs-extra from 9.1.0 to 10.0.0 electron/rebuild#699)
• 86193fc ci(action): update actions/checkout action to v4.1.1 (build(deps-dev): bump mocha from 8.3.2 to 8.4.0 electron/rebuild#698)
• 0be99ba ci(action): update actions/setup-node action to v4 (build(deps-dev): bump @types/chai-as-promised from 7.1.3 to 7.1.4 electron/rebuild#697)
• 3ca7c0a ci(action): update actions/setup-node digest to 1a4442c (build(deps-dev): bump @types/node from 15.0.2 to 15.0.3 electron/rebuild#696)
• f854fa8 chore(deps): lock file maintenance (build(deps-dev): bump @typescript-eslint/parser from 4.22.0 to 4.23.0 electron/rebuild#695)
• 3e4835d chore(deps): update dependency sinon to v17 (build(deps): bump yargs from 16.2.0 to 17.0.1 electron/rebuild#694)
• 1eac2d3 ci(action): update actions/checkout digest to b4ffde6 (build(deps): bump hosted-git-info from 2.7.1 to 2.8.9 electron/rebuild#693)
• 3ff0c64 chore(deps): update dependency sinon to v16.1.3 (build(deps-dev): bump @types/chai from 4.2.16 to 4.2.18 electron/rebuild#692)
• eff22bd chore(deps): update dependency sinon to v16.1.1 (build(deps-dev): bump eslint from 7.24.0 to 7.26.0 electron/rebuild#691)
• 02ee684 chore(deps): lock file maintenance (build(deps-dev): bump electron from 12.0.4 to 12.0.7 electron/rebuild#690)
• 81383e5 chore(deps): update dependency dockerode to v4 (chore: properly check for debug mode for node-gyp loglevel electron/rebuild#689)
• 2416ef8 chore(deps): update dependency sinon to v16.1.0 (build(deps): bump lodash from 4.17.19 to 4.17.21 electron/rebuild#688)
• c559db7 chore(deps): update dependency p-retry to v6.1.0 (build(deps-dev): bump @types/chai from 4.2.16 to 4.2.17 electron/rebuild#687)
• 4258b29 chore(deps): lock file maintenance (build(deps-dev): bump @types/node from 14.14.39 to 15.0.2 electron/rebuild#686)
• 2ee8ab3 chore(deps): update dependency semantic-release to v22.0.5 (build(deps-dev): bump electron from 12.0.4 to 12.0.6 electron/rebuild#685)
• 1fb945d chore(deps): update dependency semantic-release to v22.0.4 (build(deps-dev): bump @types/node from 14.14.39 to 15.0.1 electron/rebuild#684)
• b92c77e chore(deps): update dependency semantic-release to v22.0.2 (build(deps-dev): bump @types/node from 14.14.39 to 15.0.0 electron/rebuild#683)
• b63a6c0 ci(action): update actions/checkout digest to 8ade135 (build(deps-dev): bump eslint from 7.24.0 to 7.25.0 electron/rebuild#682)
• f24083e chore(deps): update dependency semantic-release to v22.0.1 (build(deps): bump node-abi from 2.21.0 to 2.26.0 electron/rebuild#681)
• 3191cfa chore(deps): lock file maintenance (build(deps-dev): bump electron from 12.0.4 to 12.0.5 electron/rebuild#680)
• e8549a5 chore(deps): update dependency semantic-release to v22 (build(deps-dev): bump @types/node from 14.14.39 to 14.14.41 electron/rebuild#678)

See the full diff

Package name: node-gyp

The new version differs by 219 commits.

• 9acb4c7 chore: release 10.0.0
• 3032e10 chore: run tests after release please PR
• 864a979 feat!: use .npmignore file to limit which files are published (#2921)
• 4e493d4 chore: misc testing fixes (#2930)
• d52997e feat: convert internal classes from util.inherits to classes
• 355622f feat: convert all internal functions to async/await
• 1b3bd34 feat!: drop node 14 support (#2929)
• e388255 deps: [email protected] (#2928)
• 059bb6f deps: [email protected] (#2927)
• 4bef1ec deps: [email protected] (#2926)
• 21a7249 chore: add check engines script to CI (#2922)
• 707927c feat(gyp): update gyp to v0.16.1 (#2923)
• d644ce4 docs: update applicable GitHub links from master to main (#2843)
• 4a50fe3 chore: empty commit to add changelog entries from #2770
• 26683e9 chore: GitHub Workflows security hardening (#2740)
• 91fd8ff Python lint: ruff --format is now --output-format
• b3d41ae doc: Add note about Python symlinks (PR 2362) to CHANGELOG.md for 9.1.0 (#2783)
• 5746691 test: update expired certs (#2908)
• d3615c6 Fix incorrect Xcode casing in README (#2896)
• bb93b94 docs: README.md Do not hardcode the supported versions of Python (#2880)
• 0f1f667 fix: create Python symlink only during builds, and clean it up after (#2721)
• 445c28f test: increase mocha timeout (#2887)
• 1bfb083 Fix Python lint error by using an f-string (#2886)
• c9caa2e docs: Update windows installation instructions in README.md (#2882)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)