[Snyk] Fix for 1 vulnerabilities

[ekmixon]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: del

The new version differs by 47 commits.

• cd0543e 6.0.0
• 6c99805 Require Node.js 10
• 1df5280 Readme tweaks
• 4acd962 Add tip about deleting subdirectories (Better Event Testing epochjs/epoch#116)
• 1a0c36c Add mention of GitHub Sponsors
• 1e0d705 Tidelift tasks
• 892ce2a Make it clear that it recursively deletes directories (The Ability to copy entire line of codes in a code box  epochjs/epoch#113)
• 728cb7c Fix benchmark
• 557c1fa 5.1.0
• 12c443d Meta tweaks
• 01da91f Allow non-glob patterns with backslash on Windows (Swapped vertical and horizontal on the basic bar chart epochjs/epoch#100)
• 9c72270 Add benchmarks (Document Bar Chart Horizontal / Vertical Swap epochjs/epoch#101)
• 1299747 Use graceful-fs (Setting a fixed domain for the y axis epochjs/epoch#108)
• f509a89 Update dependencies (Closes #24; Added Core Unit Tests epochjs/epoch#109)
• ca05c65 Sort removed files (Custom Duration for Real-Time Plots epochjs/epoch#102)
• 51662ac Reverse order back for the returned paths (Unified Data Model epochjs/epoch#99)
• 902b594 Meta tweaks
• ffbf4c4 Fix the `cwd` option (Closes #95; Added Zepto Adapter epochjs/epoch#96)
• 8efdbcd Prevent race condition on macOS when deleting files (Zepto Adapter epochjs/epoch#95)
• 9e7550b Add note about backward-slashes
• c071180 5.0.0
• a73462c Meta tweaks
• 6f96d2d Update globby to version 10 (New Chart: Step Line epochjs/epoch#64)
• 6e23f6a Tidelift tasks

See the full diff

Package name: gulp-mocha

The new version differs by 16 commits.

• be439ff 4.0.0
• f9de4ec Cleanup Add hasOwnProperty guard epochjs/epoch#151
• 3e55175 Spawn Mocha instead of using its API (Add hasOwnProperty guard epochjs/epoch#151)
• 212def2 3.0.1
• bcdabff trying out something new
• de45b26 3.0.0
• ab510ce meta tweaks
• 9bb2505 Bump mocha dependency (Misleading omission in "Getting Started" section of the website epochjs/epoch#139)
• f2cac8b Merge pull request Updated bower.json to valid format epochjs/epoch#111 from Coaxial/fix/shared-state-warning
• efc4880 Merge pull request Remove isVisible Hacks epochjs/epoch#114 from seanzer/fail-on-exception
• 01ed2cb maintainer needed
• 898f748 Close Unit Tests - Basic Plots epochjs/epoch#120 PR: Test on Node.js v4 and v5.
• bffdb4c switch to `req-cwd` module
• 225d355 Update readme.md
• 65ec625 Report errors during test as failures
• e349184 Add watch task warning, close Miscellaneous Changes epochjs/epoch#110

See the full diff

Package name: gulp-sass

The new version differs by 42 commits.

• 5775044 Update CHANGELOG.md
• 978b8f6 Update to major version 5 (#802)
• 10eae93 Update changelog for 4.1.1
• 947b26c Upgrade lodash to fix a security issue (#776)
• 8d6ac29 Update changelog
• 43c0547 4.1.0
• ebe3ec6 Set appropriate file stat times (#763)
• 7ab018e Migrate to the lodash package
• fa670c6 4.0.2
• fefa00e Revert package.json version bump
• 98254d2 Fix README typos
• 8a14419 Continue loading Node Sass by default
• 938afbe Add a note about synchronous versus asynchronous speed
• 7cc2db1 Make this package implementation-agnostic
• 643f73b Add documentation for synchronous code options
• 0b3c7e7 4.0.1
• daca90d Merge pull request #681 from DKvistgaard/master
• 71471c2 Declaring logError as function instead of arrow function.
• 450a7b8 4.0.0
• e9b1fe8 Fix node versions in appveyor.yml
• 44be409 Merge pull request #667 from dlmanning/next
• 7656eff Adopt airbnb eslint preset
• 1293169 Bump autoprefixer@^8.1.0, gulp-postcss@^7.0.1
• 9fa817b Bump gulp-sourcemaps@^2.6.4

See the full diff

Package name: node-sass

The new version differs by 250 commits.

• 7105b0a 5.0.0 (#3015)
• 0648b5a chore: Add Node 15 support (#2983)
• e2391c2 Add a deprecation message to the readme (#3011)
• 6a33e53 chore: Don't upload artifacts on PRs
• d763506 chore: Only run coverage on main repo
• d4ebe72 build(deps): update actions/setup-node requirement to v2.1.2
• 2bebe05 build(deps-dev): bump rimraf from 2.7.1 to 3.0.2
• f877689 chore: Don't double build DependaBot PRs
• b48fac4 chore: Add weekly DependaBot updates
• 91c40a0 Remove deprecated process.sass API
• 1f6df86 Replace lodash/assign in favor of the native Object.assign
• 522828a Remove workarounds for old Node.js versions
• 40e0f00 chore: Remove second NPM badge
• ab91bf6 chore: Remove Slack badge
• 6853a80 chore: Cleanup status badges
• fb1109c chore: Bump minimum engine version to v10
• d185440 chore: Add basic Node version support policy
• db25736 chore: Bump node-gyp to 7.1.0
• 2c5b110 chore: Bump cross-spawn to v7.0.3
• 38b9633 chore: Update Istanbul to NYC
• d63b5bf chore: Bump mocha to v8.1.3
• d0d8865 chore: Skip constructor tests on v14.6+
• ee3984d chore: Hoist test ESLint config
• feee448 chore: Remove disabled and recommended rules

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[secure-code-warrior-for-github]

Micro-Learning Topic: Race condition (Detected by phrase)

Matched on "race condition"

What is this? (2min video)

A race condition is a flaw that produces an unexpected result when the timing of actions impact other actions.

Try a challenge in Secure Code Warrior