[Snyk] Security upgrade dependency-cruiser from 5.2.2 to 9.11.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • package.json

• Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches.
  Find out more.

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: dependency-cruiser

The new version differs by 230 commits.

• 8f1e820 9.11.1
• 2bc9ea9 bugfix(progress-feedback): incremental improvements (Bump lodash from 4.17.11 to 4.17.14 in /site netlify/cli#351)
• 7dc4432 doc(schema): more correct & concise description how to generate the schema
• db7ebf5 build(npm): ⬆️ @ babel/core, @ typescript-eslint/eslint-plugin, @ typescript-eslint/parser, ajv, eslint, lodash, typescript, vue-template-compiler
• 8d6987d bugfix(resolve): also recognize @ types/yadda in package.json if only 'yadda' is imported (getRepoDate: Fix host netlify/cli#352)
• 2abe6fe doc(changelog): adds a CHANGELOG.md file (cli perf tip from rn cli netlify/cli#350)
• e0dba58 bugfix(init-config): use -f instead of redirect for html report
• 88bdfd5 9.11.0
• 4e1df86 build(npm): ⬆️ @ typescript-eslint/eslint-plugin, @ typescript-eslint/parser, get-stream
• bf90513 bugfix(enrich): improve performance of cycle and reachable detection (Add Github login through app.netlify.com netlify/cli#348)
• 381eb00 feature(cli|api): adds progress feedback (set default start command netlify/cli#347)
• 5aa21c3 doc(real-world-samples): regenerate the yarn & react graphs with the new highlighting in place
• 40b3a89 9.10.1
• 60516fc build(npm): ⬆️ @ babel/core, @ typescript-eslint/eslint-plugin, @ typescript-eslint/parser, acorn, eslint-plugin-mocha, mocha
• 96d565f feature(enrich): de-duplicate cyclic violations in the summary (Bug Report: Netlify-Cli Update Version Error Notification During Deployment netlify/cli#341)
• 1d0bffe feature(wrap-stream-in-html): highlight connected edges (Ignore .idea dir netlify/cli#346)
• e56dc89 bugfix(doc): set the prefix for the schema graph to the correct base path
• 744444f doc(cli): mention wrap-stream-in-html earlier (netlify deploy error: certificate is not yet valid netlify/cli#345)
• 08e0925 doc(validate): improve jsdoc
• 3ea4f55 9.9.5
• 97d8950 build(npm): replaces tslint with eslint && ⬆️ @ babel/core, eslint, eslint-config-moving-meadow, mocha, tsconfig-paths-webpack-plugin
• 75cb6b5 refactor(*): replaces some => includes where possible
• 49266f0 refactor(resolve): ensures reading package manifests keeps working in a package.json with exports world
• 7440b16 refactor(resolve): use named functions where possible

See the full diff

With a Snyk patch:

Severity	Priority Score (*)	Issue	Exploit Maturity
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.