[Snyk] Security upgrade boxen from 0.3.1 to 1.2.0

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/clite/node_modules/update-notifier/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: boxen

The new version differs by 28 commits.

• 6b55cd2 1.2.0
• 0b23e34 Meta tweaks
• 16958bb Update termsize to 1.2.0 ([Snyk] Security upgrade django from 1.6.1 to 1.6.3 #25)
• 44d8487 Update chalk to 2.0.1 ([Snyk] Security upgrade django from 1.6.1 to 1.8.16 #26)
• 61a6375 1.1.0
• 422d4b1 Update `ansi-align` dependency to 2.0.0 ([Snyk] Security upgrade yarn from 1.17.1 to 1.17.3 #17)
• fb47a16 Use `nyc` to report code coverage and make sure all lines covered ([Snyk] Security upgrade npmconf from 0.0.24 to 2.1.3 #18)
• e73c06d 1.0.0
• fc205a4 Bump dependencies
• b2378fa 0.8.1
• 9edae05 fix tests when run in a child process
• ccac328 improve terminal column detection
• 010f02e Enable running within a child process ([Snyk] Security upgrade actionpack from 4.2.5 to 4.2.11.3 #14)
• ca284b3 0.8.0
• d7a92e3 [BREAKING] ES2015ify and shed some dependencies \o/
• 87367b0 0.7.0
• cb0daf4 Add `float` option ([Snyk] Security upgrade node from 12 to 14.17.2-buster-slim #12)
• 1b6f02f fix XO lint issue
• b40d45a 0.6.0
• 728e182 add `align` option ([Snyk] Security upgrade python from 2.7-slim to 3.7.10-slim #11)
• 52c8544 0.5.1
• 781b3fd Merge pull request [Snyk] Upgrade snyk-module from 3.1.0 to 3.2.0 #10 from sindresorhus/msg-bg-color
• aa00389 Correct error message for illegal backgroundColor
• 223e511 0.5.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)