[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/snyk/node_modules/request/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: eslint

The new version differs by 250 commits.

• a7985a6 6.0.0
• be74dd9 Build: changelog update for 6.0.0
• 81aa06b Upgrade: espree@6.0.0 (#11869)
• 5f022bc Fix: no-else-return autofix produces name collisions (fixes #11069) (#11867)
• ded9548 Fix: multiline-comment-style incorrect message (#11864)
• cad074d Docs: Add JSHint W047 compat to no-floating-decimal (#11861)
• 41f6304 Upgrade: sinon (#11855)
• 167ce87 Chore: remove unuseable profile command (#11854)
• c844c6f Fix: max-len properly ignore trailing comments (fixes #11838) (#11841)
• 1b5661a Fix: no-var should not fix variables named 'let' (fixes #11830) (#11832)
• 4d75956 Build: CI with Azure Pipelines (#11845)
• 1db3462 Chore: rm superfluous argument & fix perf-multifiles-targets (#11834)
• c57a4a4 Upgrade: @ babel/polyfill => core-js v3 (#11833)
• 65faa04 Docs: Clarify prefer-destructuring array/object difference (fixes #9970) (#11851)
• 81c3823 Fix: require-atomic-updates reports parameters (fixes #11723) (#11774)
• aef8ea1 Sponsors: Sync README with website
• 4f48f5a 6.0.0-rc.0
• 6bad650 Build: changelog update for 6.0.0-rc.0
• f403b07 Update: introduce minKeys option to sort-keys rule (fixes #11624) (#11625)
• 87451f4 Fix: no-octal should report NonOctalDecimalIntegerLiteral (fixes #11794) (#11805)
• e4ab053 Update: support "bigint" in valid-typeof rule (#11802)
• e0fafc8 Chore: removes unnecessary assignment in loop (#11780)
• 20908a3 Docs: removed '>' prefix from from docs/working-with-rules (#11818)
• 1c43eef Sponsors: Sync README with website

See the full diff

Package name: karma-coverage

The new version differs by 36 commits.

• 32acafa chore(release): 2.0.2 [skip ci]
• bb8f9ee chore: add semantic-release for project - fix [Snyk] Security upgrade update-notifier from 0.5.0 to 6.0.0 #408 ([Snyk] Security upgrade @google-cloud/profiler from 2.0.2 to 4.1.3 #413)
• 9c37de6 chore: add check commit message ([Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.1 #411)
• 27822c9 ci(test): use eslint as ci command and add all js files to check by eslint ([Snyk] Security upgrade update-notifier from 5.1.0 to 6.0.0 #410)
• 1adb27a ci: drop node 8, adopt node 12 ([Snyk] Security upgrade update-notifier from 0.6.3 to 6.0.0 #409)
• 4962a70 fix(reporter): update calls to match new API in istanbul-lib-report fix [Snyk] Security upgrade got from 5.7.1 to 11.8.5 #398 ([Snyk] Security upgrade snyk from 1.101.1 to 1.230.7 #403)
• fc6e289 refactor: remove isAbsolute and replace with path.isAbsolute ([Snyk] Security upgrade snyk from 1.101.1 to 1.230.7 #405)
• 83bafc3 refactor: replace migrate coffee unit tests to modern JS ([Snyk] Security upgrade semver from 2.3.2 to 4.3.2 #407)
• 49f174d refactor: onRunComplete method to upgrade on new major version of Istanbul ([Snyk] Security upgrade cryptiles from 2.0.5 to 3.0.0 #406)
• 4cfa697 chore: Update dev Dependencies eslint and load-grunt-tasks ([Snyk] Security upgrade python from 3.6-slim to 3.8-slim #387)
• 5cf931a fix: remove information about old istanbul lib ([Snyk] Security upgrade django from 1.6.1 to 2.2.28 #404)
• 352254a chore(deps): bump handlebars from 4.1.2 to 4.5.3 ([Snyk] Security upgrade package-json from 1.2.0 to 7.0.0 #399)
• 0ee780c chore(deps): bump lodash.template from 4.4.0 to 4.5.0 ([Snyk] Security upgrade python from 3.6-slim to 3.7-slim #392)
• d18cde4 chore(deps-dev): bump eslint from 2.13.1 to 4.18.2 ([Snyk] Security upgrade latest-version from 2.0.0 to 6.0.0 #397)
• 55aeead Update Source Map Handling ([Snyk] Security upgrade got from 3.3.1 to 11.8.5 #394)
• b23664e Added debug msg whether coverage is in reporters ([Snyk] Security upgrade package-json from 2.4.0 to 7.0.0 #396)
• d3f53e3 chore(all): Migrate to ES6 ([Snyk] Security upgrade sanitize from 4.6.2 to 5.2.1 #385)
• 9c8a222 Make travis file simpler ([Snyk] Security upgrade django from 1.6.1 to 1.8.16 #386)
• b76db9e Remove unused dateformat dependency ([Snyk] Fix for 2 vulnerabilities #384)
• 075ece0 Remove unused istanbul dependency ([Snyk] Fix for 2 vulnerabilities #382)
• 9184fc0 chore: release v2.0.1
• 57d4bd3 chore(deps): npm audit fix --force; update travis.yml ([Snyk] Fix for 2 vulnerabilities #380)
• 0e2800b chore: release v2.0.0
• 99c0c35 chore: update contributors

See the full diff

Package name: rimraf

The new version differs by 52 commits.

• 3b6b098 4.0.0
• e0cffea ci: reduce workload even more
• 0e6646d ci: remove unnecessary lint filter
• 546e017 update action versions
• 6d88a65 tone down benchmark intensity
• 842a8d2 fix benchmark workflow yaml
• 1b91697 chore: add copyright year to license
• 08bbb06 rewrite in TS, export hybrid, update changelog, docs
• 1b3f46e drop support for node versions below 14
• 2e1f003 gh actions workflow for benchmarks
• 52f9370 tests for retry-busy behavior
• 188e3ed don't test on very old node versions
• d1d5495 test for fix-eperm
• e7501cd prettier formatting
• 40f64ec windows: only fall back to move-remove when absolutely necessary
• b6f7819 update tap
• 99496cd test: run posix test on windows, why not?
• 51d43c1 benchmarks
• 6b8aa29 doc: correct os.tmp default
• 4b228c9 do not ever actually try to rmdir /
• 2442655 consolidate all the spellings of 'opt' into one
• d4eec2e add cli script
• 0c82d74 accept strings, arrays of strings, and no other types
• ad4f2db Do not rimraf /, override with preserveRoot:false

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.