[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-JSBEAUTIFY-2311652	Yes	No Known Exploit
	471/1000 Why? Recently disclosed, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: knex

The new version differs by 250 commits.

• eb136f1 Merge branch 'master' of https://github.com/tgriesser/knex
• 2072163 Update version in changelog (Mobile settings do not open on the correct page TryGhost/Ghost#3138)
• f28ae7a Merge branch 'master' of https://github.com/tgriesser/knex
• f757e36 Bump version to 0.16.4 (npm weird error 135 TryGhost/Ghost#3137)
• 18532b2 Bump version to 0.16.4
• 286d84b Prepare for 0.16.4-next3 release (Move setup to the API TryGhost/Ghost#3136)
• 1948c3d Add boolean as a column name in join (node-pre-gyp install --fallback-to-build fails TryGhost/Ghost#3121)
• fe6083e Support nullable timestamps on MySQL (Users API: deleting users TryGhost/Ghost#3100)
• b15ee3d make unionAll()'s call signature match union() (Mobile Interactions TryGhost/Ghost#3055)
• e7ed005 Fix queryContext not being passed to raw queries (Close notifications on user action properly. TryGhost/Ghost#3111)
• 11fdc0c Add missing clearOrder & clearCounters types ([Ember.js] Don't change the URL on the content screen TryGhost/Ghost#3109)
• 7ecbcd5 Update changelog and version number (Add off as a noop function to touch editor. TryGhost/Ghost#3108)
• 5fea86e Update dependencies (Mobile editor transition broken TryGhost/Ghost#3107)
• 19926d8 [Fix word count in ember. TryGhost/Ghost#3033] fix: sqlite3 drop/renameColumn() breaks with postProcessResponse ([Ember.js] Trim title on editor screen TryGhost/Ghost#3040)
• 24fcf27 Fix transaction support for migrations (Post Settings Menu: Author dropdown TryGhost/Ghost#3084)
• de1c934 Include 'string' as accepted Knex constructor type definition (Disable success notification for feature/unfeature action TryGhost/Ghost#3105)
• 0aacab5 Fix for [Ember.js] Calls to post API should all have include=tags TryGhost/Ghost#2998 - Migrator & TypeScript (Hide settings/apps unless apps:true is in config.js TryGhost/Ghost#3041)
• fcd21d9 Add command for executing tests on SQLite (Missing hrefs on <a> tags TryGhost/Ghost#3101)
• 1da56a3 Update mssql dev dep to v5 stable (User API Permissions: Restrict based on role TryGhost/Ghost#3096)
• b9a648c Format code (does codemirror#4.0.1 exist? TryGhost/Ghost#3088)
• 0db7859 add test that clearing offset (Label 'for' attribute value literal have no delimiter TryGhost/Ghost#2954)
• f3f0750 Make TS stubs modern (User & Roles API: Invite a user TryGhost/Ghost#3080)
• 68723e0 Update changelog (Multi-User admin UI: Who can see what. TryGhost/Ghost#3086)
• 1b39d67 Tests for drop-and-recreate with async/await (User & Roles API: Who can invite what role TryGhost/Ghost#3083)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution