[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • node_modules/string.prototype.trimstart/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aud

The new version differs by 19 commits.

• a12bbd8 v2.0.0
• cb70cd9 [Deps] update `npm-lockfile`
• ad0bde5 [Fix] pin `colors`
• 0c41fdd [Breaking] add "exports"
• 1e8d387 [Refactor] use `fs.promises` instead of `util.promisify`; use built-in `copyFile`
• f18f1ed [Deps] update `semver`, `tmp`
• b52962b [Breaking] update to `npm-lockfile` v3
• 60e4f8b [Refactor] copy `getProjectTempDir` from `npm-lockfile` v2, since v3 removes it
• 324a287 [Refactor] use `colors` instead of `chalk`
• 5a63833 [Tests] filter out npm warnings, redux
• d78214e [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `tape`
• 2627cfa [Tests] filter out npm warnings
• 56ca7ad [meta] add `audit-level`
• ac56080 [Deps] update `npm-lockfile`
• 4d6cf90 [Tests] add `nyc`
• 37e4cf1 [actions] reuse common workflows
• 6112fa0 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `auto-changelog`, `safe-publish-latest`, `tape`
• 211e00e [meta] broaden engines support to >= 10
• b748956 [actions] update workflows

See the full diff

Package name: auto-changelog

The new version differs by 49 commits.

• 94266e6 2.4.0
• c227823 yarn upgrade
• 417354c Logical handling of --starting-version ([Snyk] Fix for 3 vulnerabilities #227)
• 66e554b Trim commit subject ([Snyk] Fix for 16 vulnerabilities #225)
• 73a2524 feat(commits.js): added niceDate format of commits ([Snyk] Fix for 11 vulnerabilities #206)
• dbd36d5 --ending-version fixes
• c2bb8c5 Add ending-version option
• 3e25b8c Do not sort tags when sorting via --append-git-tag
• 9d271fc Bump packages
• 5d914d4 2.3.0
• f6a8ab1 Remove --sort=-creatordate from git tag logic
• 1b29530 Remove unused sortTags syntax
• 26e7d9c Remove lodash.uniqby
• a80e311 Add minor boolean to test data
• 20bb145 Add --append-git-tag
• 2f7c3ab Add --hide-empty-releases
• a7fba3c Add --starting-date
• 6592ef2 Support absolute paths for --handlebars-setup
• de35cfa Fix unreleased version diff
• b854fc0 Fix v prefix logic
• 2bdc772 Fix getSubject edge case
• d27152d Apply ignoreCommitPattern earlier in the parsing logic
• 44e8085 feat: add support for minor/preminor versions for custom templates ([Snyk] Fix for 2 vulnerabilities #185)
• 7404570 Feat: add sortCommits by subject and subject-desc ([Snyk] Security upgrade tap from 7.1.2 to 15.0.0 #186)

See the full diff

Package name: eslint

The new version differs by 210 commits.

• 3dd6741 7.0.0
• 9a722f9 Build: changelog update for 7.0.0
• b98d8bd Upgrade: eslint-release@2.0.0 (#13271)
• 4c0b028 Fix: remove Node.js and CommonJS category from build process (#13242)
• 401a687 Chore: fix rules list for prereleases (#13230)
• 4ef6158 Breaking: espree@7.0.0 (#13270)
• b5c8d73 Docs: update 7.0.0 migration guide for consistency (#13267)
• 356fdb4 Docs: add migration guide (#12692)
• 015edf6 Sponsors: Sync README with website
• fdfa364 7.0.0-rc.0
• 8d1b4db Build: changelog update for 7.0.0-rc.0
• 0b1d65a Update: Improve report location for array-callback-return (refs #12334) (#13109)
• d85e291 Fix: yoda left string fix for exceptRange (fixes #12883) (#13052)
• 2ce6bed Chore: added tests for nested arrays (#13145)
• d3aac53 Update: report backtick loc in no-unexpected-multiline (refs #12334) (#13142)
• 8e7a2d9 Fix: func-call-spacing "never" reports wrong message (fixes #13190) (#13193)
• bcafd0f Update: Add ESLint API (refs New: ESLint Class Replacing CLIEngine eslint/rfcs#40) (#12939)
• 3eeae56 Upgrade: some (dev) deps (#13155)
• 6b7030b Chore: Run tests on Node.js v14 (#13210)
• ebc28d7 Fix: Remove default .js from --ext CLI option (#13176)
• 5c1bdeb Update: Improve report location for getter-return (refs #12334) (#13164)
• 56d2bee Docs: fix typos (#13204)
• e13256e Chore: use espree.latestEcmaVersion in config-initializer (#13157)
• e4f57b7 Chore: add nested array tests for array-element-newline (#13161)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)