[Snyk] Fix for 1 vulnerabilities

[londonprojects]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: browser-sync

The new version differs by 14 commits.

• 2b55728 v2.26.9
• 2bf8812 v2.26.8
• 0f3cc0b fix: npm audit fixes (root)
• ba1f09f fix: npm audit fixes
• d89252a Merge pull request #1749 from ProLoser/securityFix
• df81272 Merge pull request #1771 from tolulawson/master
• 64f87b9 Merge pull request #1768 from fozzleberry/bump-http-proxy-1.18.1
• 43dc459 Merge pull request #1725 from nitinbansal1989/master
• 894d031 -- Corrected codesync tagline
• 0667104 used correct syntax on bump
• 938e611 bumped node engines to >= 8.0.0
• 20a0334 bumped http proxy to >=1.18.1
• c103029 Security fix for #1649
• 864c9f1 upgrade chokidar version

See the full diff

Package name: gulp-nodemon

The new version differs by 10 commits.

• 7fcbc06 NPM audit. Closes #176.
• 5100088 Merge pull request #174 from JacksonGariety/dependabot/npm_and_yarn/diff-3.5.0
• 7c0c02e Merge pull request #173 from JacksonGariety/dependabot/npm_and_yarn/growl-1.10.5
• fe95e64 Merge pull request #172 from JacksonGariety/dependabot/npm_and_yarn/mixin-deep-1.3.2
• a8d4391 Merge pull request #171 from JacksonGariety/dependabot/npm_and_yarn/lodash-4.17.15
• 3b01d33 Bump diff from 1.0.8 to 3.5.0
• 5bd5530 Bump growl from 1.8.1 to 1.10.5
• c5f4120 Bump mixin-deep from 1.3.1 to 1.3.2
• f634d93 Bump lodash from 2.4.2 to 4.17.15
• 028d498 Version bump

See the full diff

Package name: nunjucks

The new version differs by 7 commits.

• 53d1223 Release v3.2.1
• 93129bf Replace yargs with commander
• 17691da Chokidar bump
• 40dfdf0 Remove dead link
• cefb1cf Prevent optional dependency Chokidar from loading when not watching
• 1485a44 Add badges in README.md
• 2246457 Add Mozilla Code of Conduct file

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic