[Snyk] Fix for 7 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/snyk/node_modules/async/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	584/1000 Why? Has a fix available, CVSS 7.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:hoek:20180212	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	Yes	No Known Exploit
	576/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.1	Uninitialized Memory Exposure npm:tunnel-agent:20170305	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: coveralls

The new version differs by 3 commits.

• 2ed4d09 major version bump for node > 4.x
• 5ebe57f bump version
• 428780c Expand allowed dependency versions to all API compatible versions ([Snyk] Security upgrade actionpack from 4.2.5 to 4.2.11.3 #172)

See the full diff

Package name: jscs

The new version differs by 250 commits.

• e177990 3.0.7
• bc0c425 Misc: add changelog for 3.0.7
• 47d19e1 validateParameterSeparator: notice class methods
• 92fa964 3.0.6
• a14b499 Misc: add 3.0.6 changelog
• 6ae32ac requireDollarBeforejQueryAssignment: do not blow up on reset parameter
• b419c66 Misc: explicitly use latest CST version
• f3cdfac Misc: fix typo in the changelog
• 71dd3dd Misc: bump CST version to 0.4.2
• 67f3cd9 3.0.5
• a5e5bde Misc: add 3.0.5 changelog
• ea2c3f7 Configuration: move hasCorrectExtension to more appropriate place
• 0d027a7 Configuration: Do not set default options if preset is set
• 5885239 Misc: bump CST version to 0.4.0
• ae3666a Docs: remove yandex preset from overview
• dbff270 Docs: add intro delimiter to readme
• c4474c1 Misc: use correct headers in changelog
• 508982c Misc: correct changelog auto-replace result
• 747d058 Misc: correct changelog jscs version
• 8132a87 Misc: changelog should be consistent
• f867612 3.0.4
• 3c64a00 Misc: add 3.0.4 changelog
• 584c556 Tests: do not run integration tests
• 56ca72b maximumLineLength: correctly position error for comment nodes

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution