[Snyk] Upgrade resolve from 1.17.0 to 1.22.8

[snyk-io]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade resolve from 1.17.0 to 1.22.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 15 versions ahead of your current version.

• The recommended version was released 7 months ago, on 2023-10-10.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	169/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00045, Social Trends: No, Days since published: 9, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.81, Score Version: V5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: resolve

• 1.22.8 - 2023-10-10
  
  • [Tests] rename innocent test project to avoid flawed security scanners
  • [Tests] skip some tests for a broken require.resolve in node v8.9, v9.0-v9.2
• 1.22.7 - 2023-10-10
  
  • [Tests] avoid publishing "malformed package.json" test to avoid flawed security scanners
• 1.22.6 - 2023-09-15
  
  • [Fix] allow npx resolve to work (#316)
  • [actions] use reusable rebase action
• 1.22.5 - 2023-09-14
  
  • [Fix] fix npx resolve by handling symlinks (#315)
  • [Dev Deps] update array.prototype.map
• 1.22.4 - 2023-08-04
  
  • Revert "[Refactor] deprecated lib/core.js now uses data from is-core-module also"
  • [Deps] update is-core-module
  • [Dev Deps] update @ ljharb/eslint-config, aud, semver, tape
  • [meta] commit published core.json data
• 1.22.3 - 2023-04-14
  
  • [Refactor] deprecated lib/core.js now uses data from is-core-module also
  • [Deps] update is-core-module
• 1.22.2 - 2023-04-05
  
  • [Refactor] deprecated lib/core.js now uses is-core-module
  • [meta] cp core.json on prepack instead of prepublishOnly
  • [Deps] update is-core-module
  • [Dev Deps] update @ ljharb/eslint-config, aud, tape, array.prototype.map
• 1.22.1 - 2022-06-17
  
  • [Fix] support windows virtual drive paths (#284)
  • [Deps] update is-core-module
  • [meta] use npmignore to autogenerate an npmignore file
  • [meta] do not publish appveyor.yml
  • [Dev Deps] update eslint, @ ljharb/eslint-config, tape
  • [Test] add tests for "main": false
  • [Tests] fix tests on node v12.0-12.2
  • [Test] add some sync coverage
  • [Test] fix incorrect require.resolve paths logic; enable these tests
  • [Tests] avoid tests breaking on node 11.11 - 11.13
• 1.22.0 - 2022-01-22
  
  • [New] add default support for paths to include $HOME/.node_{modules,libraries} (#273)
  • [Deps] update is-core-module
• 1.21.1 - 2022-01-21
• 1.21.0 - 2022-01-03
• 1.20.0 - 2021-02-11
• 1.19.0 - 2020-11-10
• 1.18.1 - 2020-10-19
• 1.18.0 - 2020-10-19
• 1.17.0 - 2020-04-22

from resolve GitHub release notes

Commit messages

Package name: resolve

• b829872 v1.22.8
• bce4768 [Tests] rename innocent test project to avoid flawed security scanners
• f0930c0 [Tests] skip some tests for a broken `require.resolve` in node v8.9, v9.0-v9.2
• 75d3bb9 v1.22.7
• 8d58ef9 [Dev Deps] update `tape`
• 9e6f936 [Tests] avoid publishing "malformed package.json" test to avoid flawed security scanners
• 2ae67c1 v1.22.6
• 343ea44 [Fix] allow `npx resolve` to work (New Vyper plugin version NomicFoundation/hardhat#316)
• 4441c5f [actions] use reusable rebase action
• 7f3ebd0 v1.22.5
• d56d217 [Fix] fix `npx resolve` by handling symlinks ([buidler-vyper] Handle missing Docker socket NomicFoundation/hardhat#315)
• a08d8a8 [Dev Deps] update `array.prototype.map`
• 37504d6 v1.22.4
• 5cb0ecc [Deps] update `is-core-module`
• 2829c04 [Dev Deps] update `@ ljharb/eslint-config`, `aud`, `semver`, `tape`
• 7f99437 Revert "[Refactor] deprecated `lib/core.js` now uses data from `is-core-module` also"
• 775fd8e [meta] commit published core.json data
• d3332a2 v1.22.3
• 5e3fbba [Deps] update `is-core-module`
• 122bb64 [Refactor] deprecated `lib/core.js` now uses data from `is-core-module` also
• c2f9ce2 v1.22.2
• ed8f81b [Refactor] deprecated `lib/core.js` now uses `is-core-module`
• 1454fdf [Dev Deps] update `@ ljharb/eslint-config`, `aud`, `tape`
• 531b6f6 [Dev Deps] update `array.prototype.map`

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.