[Snyk] Security upgrade hubot from 2.19.0 to 3.1.0

[strugee]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	661/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.8	Arbitrary Code Injection SNYK-JS-MORGAN-72579	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept
	816/1000 Why? Mature exploit, Has a fix available, CVSS 8.6	Uninitialized Memory Exposure npm:base64-url:20180512	Yes	Mature
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:fresh:20170908	Yes	No Known Exploit
	399/1000 Why? Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:mime:20170907	Yes	No Known Exploit
	399/1000 Why? Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:negotiator:20160616	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Override Protection Bypass npm:qs:20170213	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: hubot

The new version differs by 192 commits.

• 9b6f46e Update semantic-release to latest
• e882565 Merge pull request #1458 from hubotio/upgrade-npm-before-install
• 4404d12 CI: Another attempt to fix release
• 74866f9 Revert "Merge pull request #1456 from hubotio/make-sure-npx-is-installed"
• c2171db Merge pull request #1456 from hubotio/make-sure-npx-is-installed
• 7157067 CI: Install npx before using it during deploy
• 350519d Merge pull request #1455 from hubotio/travis-deploy-semantic-release
• 8ac6fae CI: Use updated method of using semantic-release with Travis
• e944fa0 Merge pull request #1453 from mistydemeo/upgrade_express
• e1a91de Merge branch 'master' into upgrade_express
• 928aff7 Merge pull request #1454 from mistydemeo/travis_drop_node_4
• 6578447 chore(travis): drop Node 4, add Node 10
• 0a7e70b feat(express): bump express and connect-multiparty
• d0c13d2 Merge pull request #1426 from MikeMcQuaid/patch-1
• e998db9 CONTRIBUTING: note license.
• 8b0b8a9 Merge pull request #1396 from jaythomas/editorconfig
• 48a5fb6 chore(*) add editorconfig
• 7523fb8 Merge pull request #1395 from Eliada/patch-1
• 28a428d Update mocha call to prevent deprecation warning
• 97f8c2f Merge pull request #1390 from slawekzachcial/robot-helpers-delegation
• d1546fe Merge branch 'master' into robot-helpers-delegation
• 6bdf3e2 Merge pull request #1391 from rodrigoaguilera/patch-1
• 7c0fd4d Add Note about the free redis plans of heroku
• 9f6448f Fix robot helpers delegation to adapter and events

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Arbitrary Code Injection
🦉 Prototype Override Protection Bypass
🦉 More lessons are available in Snyk Learn