[Snyk] Fix for 10 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • standalone-packages/vscode-editor/release/package.json
  • standalone-packages/vscode-editor/release/.snyk

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-ECSTATIC-540354	No	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HIGHLIGHTJS-1048676	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-174116	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	No	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	No	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451540	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-584281	No	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	Yes	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	No	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	Yes	No Known Exploit

Commit messages

Package name: gulp

The new version differs by 134 commits.

• 55eb23a Release: 4.0.0
• 173a532 Docs: Fix the installation instructions
• ec54d09 Docs: Improve note about out-of-date docs
• 03b7c98 Docs: Update recipes to install gulp@next
• 2eba29e Docs: Remove run-sequence from recipes
• 76eb4d6 Docs: Add installation instructions & update badges
• fbc162f Docs: Remove references to gulp-util
• 3011cf9 Scaffold: Normalize repository
• f27be05 Update: Remove graceful-fs from test suite
• 361ab63 Upgrade: Update glob-watcher
• 064d100 Build: Avoid broken node 9
• 057df59 Release: 4.0.0-alpha.3
• c1ba80c Breaking: Upgrade major versions of glob-watcher, gulp-cli & vinyl-fs
• 89acc5c Docs: Improve ES2015 task exporting examples (fix: add vendor prefix for file tab styling codesandbox/codesandbox-client#1999)
• 0ac9e04 Docs: Add "Project structure" section to CONTRIBUTING.md (Reset isForkingSandbox on error codesandbox/codesandbox-client#1859)
• 723cbc4 Docs: Fix syntax in recipe example (Fix(homepage): Second picked sandbox doesn't open in explore codesandbox/codesandbox-client#1715)
• d420a6a Docs: Have gulp.lastRun take a function to avoid task registration (Error: "Invalid regular expression... Range out of order in character class" codesandbox/codesandbox-client#1828)
• 29ece6f Upgrade: Update undertaker
• e931cb0 Docs: Fix changelog typos (Update prettier to 16.6.4 codesandbox/codesandbox-client#1696)
• 477db84 Docs: Add a "BrowserSync with Gulp 4" recipe (Stock vue template has a Babel error codesandbox/codesandbox-client#1659)
• d4ed3c7 Docs: Add options.cwd for gulp.src API (Storybook codesandbox/codesandbox-client#1645)
• 5dc3b07 Docs: Update gulp.watch API to align with glob-watcher
• 0c66069 Breaking: Replace chokidar as gulp.watch with glob-watcher wrapper
• c3dbc10 Docs: Clarify incremental builds example (Search Improvements codesandbox/codesandbox-client#1609)

See the full diff

Package name: http-server

The new version differs by 205 commits.

• 77243e7 0.13.0
• a845834 Update dependency tree
• f2c0dfb update milestone
• aec3911 update security for release
• 1f994c0 Merge pull request Test codesandbox/codesandbox-client#591 from http-party/no_server_headers
• c57654d Merge branch 'master' into no_server_headers
• a4ec10b Merge pull request Temporary fix for full cache storage codesandbox/codesandbox-client#713 from http-party/codeql-bye-bye
• 6b87653 drop codeql
• a7fdf0f remove server header
• cd1afb7 Merge pull request New file, New directory buttons are missing on Android (touch screen) codesandbox/codesandbox-client#706 from zbynek/no-charset-binary
• 46c0ce7 Merge pull request With a circular dependency, TypeError: Cannot redefine property from the bundler codesandbox/codesandbox-client#705 from zbynek/patch-1
• 9c51cb2 Merge branch 'master' into no_server_headers
• cd84a85 revert
• 7830ac2 Remove charset from header of binary files
• b4991b8 Remove line break from LICENSE
• fab3248 Merge pull request Adding Reagent / ClojureScript project support codesandbox/codesandbox-client#704 from zbynek/patch-1
• e9716d1 Account for CRLF in a test
• 0f3e241 Merge pull request Is there a way to edit the name displayed on the profile page? codesandbox/codesandbox-client#642 from skyward-luke/master
• 33fe714 Merge pull request Use document.write to write html files codesandbox/codesandbox-client#702 from http-party/replace-travis
• e9ad269 Replace travis badge
• f09c821 Update node.js.yml
• 2c2ad02 Update node.js.yml
• dad375d Update node.js.yml
• 133a64c Update node.js.yml

See the full diff

Package name: typedoc

The new version differs by 250 commits.

• 28bca92 Disable tests before publish for lts
• 710c724 Create security policy, publish script for lts
• adb53e4 Bump marked from 3.0.2 to 4.0.10
• 7132fee chore: Bump version to 0.21.9
• 3c2f3fa fix: Support highlighting language aliases (Some parts of UI are covered codesandbox/codesandbox-client#1673)
• 56f371c chore: Bump version to 0.21.8
• 7ad5689 chore: Upgrade dependencies
• 1aee313 chore: Bump version to 0.21.7
• da04509 feat: Support for TypeScript 4.4
• 77552ff chore: Bump version to 0.21.6
• 313a4f5 fix: Handle undefined symbols in query types
• 0df9e6c feat: Add support for NO_COLOR environment variable (Console.log broken in Static Template codesandbox/codesandbox-client#1650)
• 9d84e2e chore:Bump version to 0.21.5
• 71ceaaa fix: Implicitly set noEmit unless --emit is provided
• 8f6992a feat: Support Node v12.10 (hidden .env variables in config codesandbox/codesandbox-client#1632)
• 8ff7d32 chore: Bump version to 0.21.4
• 5dfe9de fix: Constructors did not have source information set
• 030cb1e chore: Fix changelog generation for release
• de32c1c chore: Bump version to 0.21.3
• 98331b5 fix: Improve detection for "property methods" to convert as methods
• 5fd7f87 refactor: seal -> freeze
• 8e097ef refactor: Turn on noImplicitOverride compiler option
• f3294cd BREAKING CHANGE: Options may not be set once conversion starts. Enables a small perf improvement.
• b04b3b0 chore: Remove lodash

See the full diff

Package name: uncss

The new version differs by 17 commits.

• a1f81bb 0.17.0
• a82316d Add jsdom options hook (Fix infinite loops codesandbox/codesandbox-client#401)
• 27dc4e7 Updated strictSSL to new jsdom api
• 52c7f86 Update documentation
• 8ee6c11 Fix formatting
• fefd3a3 Allow user to disable strictSSL checking in jsdom request
• d448e3e Use the new grunt-uncss repo URL.
• c0a0072 Upgrade PostCSS to 7.0.16
• 93e8eb9 Updated jsdom to 15.1.0
• e825849 Update "safe" dependencies
• f4d5024 Update .travis.yml
• a65fbef Update tests
• e44bccd Avoid of options mutation (Fix Gatsby Hashes codesandbox/codesandbox-client#391)
• e56e93e Updated devDependencies
• 5580655 Add output option for cli
• 69e9d92 Redirect stdout (console.log) to stderr (Enable decorators in TS projects codesandbox/codesandbox-client#386)
• 63bfede v0.16.2

See the full diff

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	No Known Exploit

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic