[Snyk] Fix for 1 vulnerabilities

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/node-lint-md-cli-rollup/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: remark-preset-lint-node

The new version differs by 63 commits.

• 76e7b96 1.14.0
• 6300df3 chore: udpate prohibited strings to 1.5.1 ([Snyk] Fix for 1 vulnerabilities #86)
• 0c360d7 feat: enable remark-lint-no-literal-urls ([Snyk] Security upgrade mocha from 5.0.4 to 10.1.0 #83)
• 6a10c01 Bump prettier from 2.0.4 to 2.0.5 ([Snyk] Fix for 1 vulnerabilities #85)
• 1b31328 Bump prettier from 2.0.3 to 2.0.4 ([Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #84)
• e20a653 build: Update remark dependencies ([Snyk] Fix for 1 vulnerabilities #82)
• 4380ba5 Bump remark-preset-lint-recommended from 3.0.4 to 4.0.0 ([Snyk] Security upgrade tap from 10.7.3 to 14.6.8 #73)
• a2d7614 Bump remark-lint-final-definition from 1.0.4 to 2.0.0 ([Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #78)
• b3c5e74 Bump remark-lint-fenced-code-marker from 1.0.4 to 2.0.0 ([Snyk] Fix for 1 vulnerabilities #81)
• dbffc17 Bump remark-lint-table-cell-padding from 1.0.5 to 2.0.0 ([Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #80)
• 7f264f7 Bump remark-lint-checkbox-character-style from 1.0.4 to 2.0.0 ([Snyk] Security upgrade mocha from 6.2.3 to 10.1.0 #79)
• 28826ad Bump remark-lint-no-heading-indent from 1.0.4 to 2.0.0 ([Snyk] Security upgrade mocha from 5.2.0 to 10.1.0 #77)
• 9044998 Bump remark-lint-maximum-line-length from 1.2.2 to 2.0.0 ([Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #75)
• 0c96228 Bump remark-lint-no-multiple-toplevel-headings from 1.0.5 to 2.0.0 ([Snyk] Security upgrade mocha from 5.2.0 to 10.1.0 #74)
• 5d2d77c Bump remark-lint-fenced-code-flag from 1.0.4 to 2.0.0 ([Snyk] Security upgrade tap from 12.7.0 to 14.6.8 #72)
• ead4134 Bump lockfile-lint from 3.0.5 to 4.2.2 ([Snyk] Fix for 1 vulnerabilities #55)
• e4cf245 chore: Run npm upgrade
• 8bea7d5 Bump remark-lint-blockquote-indentation from 1.0.3 to 1.0.4
• 156eb21 Bump remark-lint from 6.0.5 to 6.0.6
• f1c1fd5 Bump remark-lint-unordered-list-marker-style from 1.0.3 to 1.0.4
• eeea3bf Bump remark-lint-list-item-indent from 1.0.4 to 1.0.5
• a345c7d Bump remark-lint-no-shell-dollars from 1.0.3 to 1.0.4
• c2bbf23 Bump remark-lint-table-cell-padding from 1.0.4 to 1.0.5
• 835e107 Bump remark-lint-first-heading-level from 1.1.4 to 1.1.5

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[socket-security]

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
call-limit	1.1.1	None	+0	7.4 kB	iarna
rollup-plugin-typescript2	0.20.1	eval, filesystem, environment	+0	4.27 MB	ezolenko
archy	1.0.0	None	+0	8.42 kB	substack