[Snyk] Security upgrade archiver from 5.3.2 to 7.0.0

[screwball22]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/electron-builder-squirrel-windows/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	141/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Local, EPSS: 0.01055, Social Trends: No, Days since published: 90, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.35, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: archiver

The new version differs by 64 commits.

• 6ff0d12 bump version for release
• 3299298 Update CHANGELOG.md
• fad089b Lock file maintenance (feat: support CFBundleTypeRole for MacOS CFBundleURLTypes electron-userland/electron-builder#736)
• c7d3c0f Update dependency yauzl to v3 (Hidden 'dotfiles' within an extraResources folder aren't copied electron-userland/electron-builder#733)
• 9480f25 Update dependency readable-stream to v4 (fix: file already in use error during unzip electron-userland/electron-builder#695)
• b787d86 Update dependency mocha to v10 (CircleCi fails to build electron-userland/electron-builder#692)
• 320f3cb Update dependency rimraf to v5 (App install location electron-userland/electron-builder#693)
• c735d9c Update docusaurus monorepo to v2.4.3 (The base package release does not exist electron-userland/electron-builder#713)
• cbce84c Update dependency archiver-utils to v5 (MS Authenticode and Apple Gatekeeper signing electron-userland/electron-builder#730)
• 38187ae Update dependency zip-stream to v6 (Pre-install target setup electron-userland/electron-builder#734)
• e104aac Update dependency buffer-crc32 to v1 (empty directories (that are not specified in build.files) are being copied electron-userland/electron-builder#732)
• b9d5ea1 Update dependency tar-stream to v3.1.7 (Nodemailer module cannot be found after packaging electron-userland/electron-builder#731)
• f1a10e4 Drop support for node v12 (Installing a new version leaves the old version electron-userland/electron-builder#735)
• 4dba2cf bump version for release
• 290e3fc Update CHANGELOG.md
• 66c5c8f Update CHANGELOG.md
• 2632b1b Update dependency zip-stream to v5.0.2 (AppImage support for passing of Categories for .desktop file electron-userland/electron-builder#727)
• b4291f6 Update release-drafter/release-drafter action to v6 (Warning when using entitlements.mas.plist electron-userland/electron-builder#729)
• eb573c7 Update actions/setup-node action to v4 ("npm run dist" fails when behind a proxy electron-userland/electron-builder#728)
• cf516ea Update actions/checkout action to v4.1.1 (Unable to Build Linux installer on a Windows Maschine electron-userland/electron-builder#725)
• fc89393 Update release-drafter/release-drafter action to v5.25.0 (Path To Long Exception if Version >5.1.12 electron-userland/electron-builder#726)
• add657d Update actions/setup-node action to v3.8.2 (Cleanup fail after build electron-userland/electron-builder#724)
• 8dba715 Update dependency tar to v6.2.0 (Squirrel.Windows : Name cannot begin with the '3' character, hexadecimal value 0x33 electron-userland/electron-builder#707)
• 2d8e561 Update dependency chai to v4.4.1 (NSIS perMachine fails if UAC prompt is enabled electron-userland/electron-builder#712)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[stale]

Is this still relevant? If so, what is blocking it? Is there anything you can do to help move it forward?

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs.