[Snyk] Fix for 1 vulnerabilities

[pantsel]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @slack/client

The new version differs by 65 commits.

• ce06b1e Merge pull request error when registering a new user on local #473 from slackapi/dev-v4
• cbd9d21 Merge branch 'master' into dev-v4
• 8fac7d5 v4.0.0
• b4f4f8b generate documentation
• fa70a8d IncomingWebhook implementation
• d621134 remove examples dir, export declaration files
• 81d9b04 updates readme and guides for new API
• 8db2e2c updates documentation generation instructions
• fdf7b51 update finity, remove superfluous comments from jsdoc
• 45cf343 basic doc generation is working
• 8e4ae7e Merge branch 'dev-v4' into ts2jsdoc
• 4ae19d5 adds TLSOptions, new RTMClient events for parity
• cae00fa POC
• abe015b adds migration guide content for WebClient
• b8b4c63 code organization and pulling out comments to build the migration guide
• f25a6a8 implements loglevel plugin API to prefix messages with log level and logger name
• 0a325ee rename keep-alive.ts -> KeepAlive.ts
• 4e16be2 implement configurable replyAckOnReconnectTimeout in RTMClient
• 5185e5e rtm message sending based on a queue for outgoing messages and cancelable promises for replies
• 662a577 a basic echo program using rtm works! tweaked keepalive and integrated into rtmclient
• dc59265 RTMClient connects! implemented connecting state in statemachine with substate transitions. commented out KeepAlive for simplicity while refactoring, but will re-enable soon.
• f28d69d adds stronger definition for errors from WebClient and uses this information in RTMClient
• ec91168 simplify statemachine config functions by removing RTMClientStateMachine interface extension
• cbaf7a1 an early state machine implementation for the RTM client

See the full diff

Package name: sails

The new version differs by 250 commits.

• 6e73a65 1.0.0
• 5f1d8b3 1.0.0-49
• 616e4e1 Insist on the latest sails-generate.
• 6ab0a5a 1.0.0-48
• 1e28823 Lifting with --redis now sets @ sailshq/connect-redis and @ sailshq/socket.io-redis.
• 9f29a03 Change approach from what was begun in 520a3c8cac5db1d9698c50efff82e476ec64fca8 so that we maintain the correct package name for the purpose of require().
• 520a3c8 Tolerate '@ sailshq/connect-redis' as session adapter.
• e2813f5 1.0.0-47
• 6768743 Tweak warning message.
• ce95c84 Update comments to reflect that req.setLocale() is fully supported as of Sails v1.0 and beyond.
• 0753a99 Trivial
• 3bdd786 Tweak troubleshooting tips.
• e8f9bee Check dev-dependencies for sails-hook-grunt
• e8493a6 1.0.0-46
• d1b6061 run tests on Node 9
• b3afed7 Fix issue with CSRF black/whitelists and routes containing optional params when the requested URL contains a querystring but NOT the optional param (whew!)
• 663527f Fix test error output
• 69ead96 Revert 35ae3ccba472bf4a8edb8ffd7d579d18391d1ba0 in favor of clarifying some of the wording.
• 35ae3cc Experiment with customizable www path
• a89d7a4 extrapolate www path
• a2a0789 Tolerate sails-hook-grunt specified in devDependencies when running sails www
• 0b42c59 Don't attempt to create a Redis connection if "client" is provided.
• 1700788 Update LICENSE.md
• 9c532dc Merge pull request #4267 from luislobo/patch-3

See the full diff

Package name: socket.io-redis

The new version differs by 87 commits.

• ed83ba9 chore(release): 5.3.0
• 7a19075 feat: add support for Redis Cluster
• 597a8d1 chore: add docker-compose.yml file
• 2500964 test: add Node.js 10, 12 and 13 in the test matrix
• f257303 chore: add package-lock.json file
• d6242d9 chore: bump debug to version 4.1.0 (konga docker container is down after some idle time #306)
• a1cebc8 [chore] Bump ioredis to version 4.0.0 (Fix typo in README.md #291)
• 6d787fb [chore] Remove support for Node.js 4
• 8fe4e03 [docs] Fix Cluster example in the README
• e9cbe30 [docs] Fix Sentinel example in the README (Grunt is using lot of cpu #276)
• 353870b [chore] Bump debug to version 3.1.0
• 91fb8ed [docs] Add an example with Sentinel in the README
• 5fe5dad [docs] Update README.md about requestsTimeout (Unable to add a Route to a Service #258)
• f27d2b8 [chore] Release 5.2.0
• 142f742 [docs] Add note about compatibility (Feature/ldap #238)
• ba2b2e6 [chore] Bump redis to version 2.8.0 (New Install konga from 0.11 to 0.12 #244)
• 37e28df [feat] Increase default requestsTimeout to 5000 ms (konga is not connecting to kong on port 8001 #243)
• b97c96d [chore] Bump notepack.io to version 2.1.2 (Update README.md #242)
• d6586a1 [docs] Add an example with ioredis (Support for oAuth 2.0 Introspection Plugin #231)
• f978d24 [chore] Release 5.1.0
• dfe1401 [chore] Bump dependencies (Konga freezes when starting #227)
• b3ad4ad [feat] Add support for ArrayBuffer (add route bug fix #226)
• 4f08b1a [fix] Use the requestid from response when deleting requests (DataModel.load() failed - status: 500 #225)
• c743d61 [chore] Release 5.0.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)