[Snyk] Fix for 1 vulnerabilities

[Bhanditz]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-util

The new version differs by 4 commits.

• 28c2aa2 3.0.8
• 1034a68 Upgrade: bump dateformat, per https://github.com/removes CLI felixge/node-dateformat#53#issuecomment-245782776 ([Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #130)
• 5a417cf Merge pull request [Snyk] Security upgrade socket.io from 1.7.4 to 3.0.0 #125 from jmeas/patch-1
• 8cdbc07 Remove gutil.beep() from README example

See the full diff

Package name: karma-coverage

The new version differs by 36 commits.

• 32acafa chore(release): 2.0.2 [skip ci]
• bb8f9ee chore: add semantic-release for project - fix Unable to resolve module error when importing from package with only type definitions monounity/karma-typescript#408 (TransformCallback - type 'null' is not assignable to parameter of type 'Error' monounity/karma-typescript#413)
• 9c37de6 chore: add check commit message (Need Help to sort out my issue ''Uncaught SyntaxError monounity/karma-typescript#411)
• 27822c9 ci(test): use eslint as ci command and add all js files to check by eslint (Can't set empty preset list in karma-typescript-es6-transform settings monounity/karma-typescript#410)
• 1adb27a ci: drop node 8, adopt node 12 (Since karma-typescript 5.3.0/Acorn 8.0.0 options.ecmaVersion is required monounity/karma-typescript#409)
• 4962a70 fix(reporter): update calls to match new API in istanbul-lib-report fix Weird import / bundling issue when using date-fns monounity/karma-typescript#398 (fix / improve readability of coverage check logic monounity/karma-typescript#403)
• fc6e289 refactor: remove isAbsolute and replace with path.isAbsolute (Custom Watermark Thresholds monounity/karma-typescript#405)
• 83bafc3 refactor: replace migrate coffee unit tests to modern JS (Syntax Error in bundle file on subsequent karma runs monounity/karma-typescript#407)
• 49f174d refactor: onRunComplete method to upgrade on new major version of Istanbul (Bump minimist from 0.0.8 to 1.2.5 in /examples/angularjs monounity/karma-typescript#406)
• 4cfa697 chore: Update dev Dependencies eslint and load-grunt-tasks (Bump lodash from 4.17.15 to 4.17.19 in /examples/typescript-1.8.10 monounity/karma-typescript#387)
• 5cf931a fix: remove information about old istanbul lib (Custom Watermarks monounity/karma-typescript#404)
• 352254a chore(deps): bump handlebars from 4.1.2 to 4.5.3 (fix: exit if the coverage threshold is not met monounity/karma-typescript#399)
• 0ee780c chore(deps): bump lodash.template from 4.4.0 to 4.5.0 (Bump lodash from 4.17.15 to 4.17.19 in /examples/mocha monounity/karma-typescript#392)
• d18cde4 chore(deps-dev): bump eslint from 2.13.1 to 4.18.2 (Not able to Generate istanbul coverage in json format monounity/karma-typescript#397)
• 55aeead Update Source Map Handling (Bump acorn from 6.3.0 to 7.4.0 in /examples/angularjs monounity/karma-typescript#394)
• b23664e Added debug msg whether coverage is in reporters (Bump lodash from 4.17.15 to 4.17.19 in /examples/angular2 monounity/karma-typescript#396)
• d3f53e3 chore(all): Migrate to ES6 (Bump lodash from 4.17.15 to 4.17.19 in /examples/typescript-1.6.2 monounity/karma-typescript#385)
• 9c8a222 Make travis file simpler (Bump lodash from 4.17.15 to 4.17.19 in /examples/typescript-latest monounity/karma-typescript#386)
• b76db9e Remove unused dateformat dependency (Bump lodash from 4.17.15 to 4.17.19 in /examples/gulp monounity/karma-typescript#384)
• 075ece0 Remove unused istanbul dependency (Feature use ngcc compiler instead of tsc compiler monounity/karma-typescript#382)
• 9184fc0 chore: release v2.0.1
• 57d4bd3 chore(deps): npm audit fix --force; update travis.yml (Stop on compile error monounity/karma-typescript#380)
• 0e2800b chore: release v2.0.0
• 99c0c35 chore: update contributors

See the full diff

Package name: log4js

The new version differs by 250 commits.

• 45eca69 3.0.0
• 7597c52 Merge pull request #755 from log4js-node/inspect-deprecated
• 16b8754 fix: removed semver dep, not needed
• 20a6b29 fix: removed the custom inspect thing as it was only need for node < 6
• 58cd7d2 chore: added node v10 to the travis builds, removed v7
• 7f2b1c2 docs: fixed references to external appenders
• dcdf2ad Merge pull request #754 from log4js-node/version-3.x
• 8c8eea5 test: fixed up the types test
• 8ad2c39 2.11.0
• 24d2663 Merge pull request #753 from log4js-node/remove-logfaces-udp
• 467f670 chore: removed the logFaces-UDP appender
• 2db6bb0 Merge branch 'master' into version-3.x
• e605365 Merge pull request #752 from log4js-node/deprecate-logfaces-udp
• db9271b chore: deprecated logFaces-UDP
• 6031257 Merge pull request #748 from log4js-node/remove-logFaces-HTTP
• 3a56566 chore: removed logFaces-HTTP appender
• 06c56b4 chore: turned off unused locals complaint for types (caused by levels)
• 5618fdb Merge branch 'master' into version-3.x
• 111fced Merge pull request #747 from log4js-node/deprecate-logfaces-http
• 29a238a chore: deprecated logFaces-HTTP appender
• 83440fa Merge pull request #745 from nicojs/744-fix-levels-typing
• 18ad653 fix(typings): correctly type the `levels` property
• 6b60cd9 Merge pull request #742 from log4js-node/remove-logstash-http
• 16603ca chore: removed logstash-http appender

See the full diff

Package name: remap-istanbul

The new version differs by 24 commits.

• 981dac8 Release 0.10.0
• a50dbf6 Drop dependency on deprecated `gulp-util` ([Snyk] Security upgrade log4js from 1.1.1 to 6.4.0 #158)
• 9ed0670 Removed typo ([Snyk] Security upgrade karma from 1.5.0 to 5.0.8 #156)
• 8342b28 Allow null file name ([Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #153)
• 18ba8f6 Add warnMissingSourceMaps parameter ([Snyk] Fix for 1 vulnerabilities #150)
• 50b3f4f checking if origFileName is defined before using it to build a file path ([Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #152)
• 1e3046d Release 0.9.5
• 866abe7 Remap sources when remapping filenames ([Snyk] Security upgrade d3-ng2-service from 1.23.3 to 2.0.0 #145)
• af8a0b5 Release 0.9.4
• ed3bee6 Add support for remapping filenames ([Snyk] Fix for 1 vulnerabilities #144)
• 834e898 Release 0.9.3
• 343f8cd Release 0.9.2
• 2eb3bee Support files with multiple sourceMappingURL ([Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #142)
• 72ef8e2 Remove typings folder ([Snyk] Fix for 1 vulnerabilities #139)
• 9479027 Ignore unused files ([Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #138)
• b7a5795 fix for issue [Snyk] Security upgrade karma from 1.7.1 to 2.0.0 #61 ([Snyk] Security upgrade karma from 1.5.0 to 5.0.8 #133)
• d123249 Fixes [Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #136 ([Snyk] Security upgrade karma from 1.5.0 to 5.0.8 #137)
• 7d1117b bump version to 0.9.1
• b010d7c Fix regression where path is resolved incorrectly ([Snyk] Security upgrade karma from 1.7.1 to 2.0.3 #135)
• a08125d Update to 0.9.0
• 93429a5 fix: dont overwrite sources array if there is more than one source ([Snyk] Security upgrade karma from 1.5.0 to 4.2.0 #120)
• 53e89b8 Avoid reading sourcemaps in js file if it is already in fileCoverage.inputSourceMap ([Snyk] Security upgrade socket.io from 1.7.4 to 3.0.0 #125)
• 6e40c3a fixes [Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #126, prepend sourceRoot to source file paths ([Snyk] Security upgrade karma from 1.5.0 to 5.0.8 #127)
• ba8fe42 fixes [Snyk] Security upgrade karma from 1.7.1 to 2.0.0 #53, document reportOptions for writeReport command ([Snyk] Fix for 2 vulnerabilities #124)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)