[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: log-update

The new version differs by 22 commits.

• c913bf6 4.0.0
• 539c0da Update dependencies
• d1a7d31 Fit lines to terminal height ([Snyk] Security upgrade cli-columns from 3.1.2 to 4.0.0 #46)
• c0dbd25 Require Node.js 10
• 7cb447f 3.4.0
• fefc18b Meta tweaks
• a488df3 Skip render if the output is unchanged ([Snyk] Fix for 1 vulnerabilities #45)
• 8b3d600 Tidelift tasks
• 52732bf 3.3.0
• ca0d89e Remove now moot Windows-specific handling ([Snyk] Security upgrade webpack from 4.25.1 to 4.26.0 #42)
• 1a3ba50 Create funding.yml
• abd40b0 3.2.0
• d5b1f8e Refactor TypeScript definition to CommonJS compatible export ([Snyk] Security upgrade postcss-preset-env from 5.3.0 to 6.0.0 #40)
• 4a91774 3.1.1
• 8528ac5 TypeScript definition - Use `WritableStream` instead of `stream.Writable` ([Snyk] Fix for 1 vulnerabilities #38)
• 7b3d221 Minor TS definition tweak
• 17712c5 3.1.0
• bb3669f Add TypeScript definition ([Snyk] Fix for 1 vulnerabilities #37)
• 433ad00 3.0.0
• 4f8d2a9 Update `wrap-ansi`
• fcb241a Require Node.js 6
• 163e51e Use AVA for testing, test a few more scenarios ([Snyk] Security upgrade webpack from 4.25.1 to 4.26.0 #32)

See the full diff

Package name: stylelint

The new version differs by 250 commits.

• cf2f45f 13.7.0
• 797cc84 Prepare 13.7.0
• fb4287c Prepare changelog
• d725b88 Update dependencies
• 9401f56 Update CHANGELOG.md
• 2b7e8ad Deprecate *-blacklist/*-requirelist/*-whitelist (#4892)
• 181f3d9 Fix some path / glob problems (#4867)
• 3cfc658 Update CHANGELOG.md
• 0a17b64 Add a reportDescriptionlessDisables flag (#4907)
• 5446be2 Fix CHANGELOG.md format via Prettier (#4910)
• 260e743 Fix callbacks in tests (#4903)
• d0a150e Update CHANGELOG.md
• 2c4d77f Fix false positives for trailing combinator in selector-combinator-space-after (#4878)
• e2da124 Add coc-stylelint (#4901)
• fd1875d Update CHANGELOG.md
• e124033 Add support for *.cjs config files (#4905)
• 858dcd5 Add a reportDisables secondary option (#4897)
• 40e60ce Support multi-line disable descriptions (#4895)
• 03f494d faster levenshtein (#4874)
• a5b8277 Update CHANGELOG.md
• 9e1edfa Fix TypeError for custom properties fallback in length-zero-no-unit (#4860)
• 1e52251 Update CHANGELOG.md
• 53f5c18 Add autofix to *-no-vendor rules (#4859)
• 23c0e81 Bump @ stylelint/postcss-css-in-js from 0.37.1 to 0.37.2 (#4888)

See the full diff

Package name: typed-css-modules

The new version differs by 85 commits.

• d445226 0.6.4
• 8d7734c Merge pull request pin @types/node version to ~9.6.5 dojo/cli-build-app#91 from dacevedo12/master
• 9095bd6 update vulnerable deps
• 7b200ab 0.6.3
• 7070137 Merge pull request [Snyk] Security upgrade typed-css-modules from 0.3.1 to 0.6.4 #83 from reflector-six/allow-file-postprocessors
• 193f693 Document new postprocessor option for writeFile
• 2241e3d allow file postprocessors
• 9bb5cbe 0.6.2
• 95640f1 Merge pull request [Snyk] Security upgrade express from 4.16.2 to 4.20.0 #82 from Quramy/fix-yargs-version-usage
• 20d8dae fix: don't give function to yargs.version
• 9abf9c2 0.6.1
• 712241b Merge pull request [Snyk] Security upgrade express from 4.16.2 to 4.20.0 #79 from akshayas/asrivatsa_yargs_upgrade
• 0f54e9a Upgrades yargs to 12.0.5 to address mem memory leak issue
• 0f77167 modify scripts
• 8b38c19 0.6.0
• f427f19 modify
• 39453a7 Merge pull request [Snyk] Fix for 2 vulnerabilities #75 from gdelmas/provide-run-api
• 42945b3 Merge branch 'master' of https://github.com/Quramy/typed-css-modules
• 8f6c8eb Merge pull request [Snyk] Fix for 2 vulnerabilities #74 from gdelmas/promisify-glob
• 425f977 Merge pull request [Snyk] Security upgrade webpack-pwa-manifest from 3.7.1 to 4.1.1 #72 from Quramy/using-ts-jest
• 62e001b update
• 4dd0e4f Merge branch 'master' of https://github.com/Quramy/typed-css-modules into using-ts-jest
• a9602f3 Merge pull request [Snyk] Security upgrade html-webpack-plugin from 3.2.0 to 4.0.0 #73 from gdelmas/build-and-pack
• 46a3126 export cli functionality via API

See the full diff

Package name: webpack-hot-middleware

The new version differs by 35 commits.

• e140693 2.25.1
• 3d5018a Merge pull request Bump npm-registry-fetch from 4.0.3 to 4.0.5 in /test-app dojo/cli-build-app#413 from nttibbetts/replace-ansi-html
• 90551e5 use public npm registry, not private one
• adeeade fix: replace ansi-html with ansi-html-community to fix vulnerability
• f0ffa4c Resolve weird desync in package lock
• 0f5e3e9 Use old-style require syntax to keep the linter happy
• aa38d42 Bump ansi/html encoding deps
• 2c31df1 Bump example dependencies
• d156bbc Simplify CI setup
• 0635d00 Replace istanbul with nyc
• 04fa8c8 Apply prettier formatting updates
• b81cfd5 Update eslint and prettier
• c98216a Upgrade test dependencies
• cb29abb 2.25.0
• bbffbe6 Merge branch 'master' of github.com:webpack-contrib/webpack-hot-middleware
• 82dd483 Merge pull request Use base as base path for serve dojo/cli-build-app#360 from jimblue/master
• e2b49ff improved client overlay style
• c430265 2.24.4
• fe33d59 Merge pull request Source maps do not work when using a base path with the development server dojo/cli-build-app#355 from okcoker/ansi-color-fix
• 331ad96 Merge branch 'master' into ansi-color-fix
• f6609e4 Bump deps to sort audit out
• e605d10 Fix ansi colors
• 036bf30 Merge pull request Only create DTS for css modules dojo/cli-build-app#354 from Hacksign/master
• f2b477d Resolve Code under example folder do not work. webpack-contrib/webpack-hot-middleware#353

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic