[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/snyk/node_modules/async/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: karma-browserify

The new version differs by 10 commits.

• 9081a68 chore(project): release v5.0.0
• 3417225 chore(project): add browserify 13 compatibility
• 47b8a43 docs(README): document browserify and watchify dependencies
• ffd145c chore(bro): make watchify an optional dependency
• 84138e2 chore(example): add explicit browserify/watchify versions
• b9ad424 chore(travis): test against stable Node.JS
• 6d91d86 chore(deps): depend on browserify + watchify as peer dependencies
• 1537cd7 Add missing dev dependencies
• 13e74e2 chore(deps): bump dependencies to latest version(s)
• ace2dfb feat(bro): throw bundle error in client

See the full diff

Package name: karma-mocha-reporter

The new version differs by 2 commits.

• f1b2eac chore: Release v2.0.0
• b638643 chore: move karma to peerDependencies

See the full diff

Package name: nyc

The new version differs by 101 commits.

• 7cce643 glob support. better, faster, stronger require hooks. windows fixes
• d15088d fix up README copy slightly
• acd0021 update changelog
• c7bf361 Merge pull request [Snyk] Security upgrade yargs from 11.1.0 to 15.0.1 #87 from bcoe/windows
• 294b911 update changelog
• b43f2b9 make the shim actually execute on Windows
• 8107847 Merge pull request [Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.2 #88 from jamestalmage/restrict-micromatch
• 98e0a9c use a tilde range for micromatch
• 40bb454 Merge pull request [Snyk] Security upgrade yargs from 11.1.0 to 15.0.1 #84 from bcoe/improve-exclude
• 55c4202 update changelog
• 3db354b phew, finally think we've reached a smart consensus
• 580977f slight tweaks to @ Lalem001's hardwork on [Snyk] Security upgrade string-width from 1.0.2 to 5.0.0 #60. Switching out minimatch for micromatch, fixes [Snyk] Security upgrade flask from 0.12.2 to 0.12.3 #54
• 08bb1c9 Merge pull request [Snyk] Security upgrade chalk from 1.1.3 to 2.0.0 #78 from novemberborn/source-map-tests
• 2a20a22 test rewriting coverage path based on source maps
• d4b6393 generate coverage fixture without source maps
• eeaa1dd source-map-fixtures@0.2.0
• 72afa4a Use absolute path in shouldInstrumentFile
• 4bf89ee Update README
• 4536fc1 Update tests
• 7711526 Remove leading `./` from path
• 6274873 Remove trailing `/` before appending `/**`
• c039db4 Exclude any `node_modules` directory, and `test-*.js` file
• 304f878 Update README
• 1b4669c Unit test shouldInstrumentFile and _prepExcludePatterns

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.