[Snyk] Upgrade cspell from 5.2.4 to 5.4.0

[snyk-bot]

Snyk has created this PR to upgrade cspell from 5.2.4 to 5.4.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 23 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2021-05-05.

Release notes

Package name: cspell

• 5.4.0 - 2021-05-05
  

  v5.4.0

• 5.3.12 - 2021-04-06
  

  v5.3.12

• 5.3.11 - 2021-04-03
  

  v5.3.11

• 5.3.10 - 2021-04-02
  

  v5.3.10

• 5.3.9 - 2021-03-19
  

  v5.3.9

• 5.3.8 - 2021-03-17
  

  v5.3.8

• 5.3.7 - 2021-03-05
  

  v5.3.7

• 5.3.7-alpha.3 - 2021-03-05
  

  v5.3.7-alpha.3

• 5.3.7-alpha.2 - 2021-03-05
  

  v5.3.7-alpha.2

• 5.3.7-alpha.1 - 2021-03-05
  

  v5.3.7-alpha.1

• 5.3.7-alpha.0 - 2021-03-05
• 5.3.6 - 2021-03-05
• 5.3.5 - 2021-03-05
• 5.3.4 - 2021-03-01
• 5.3.3 - 2021-02-26
• 5.3.2 - 2021-02-26
• 5.3.1 - 2021-02-25
• 5.3.0 - 2021-02-25
• 5.3.0-alpha.4 - 2021-02-25
• 5.3.0-alpha.3 - 2021-02-23
• 5.3.0-alpha.2 - 2021-02-22
• 5.3.0-alpha.1 - 2021-02-19
• 5.3.0-alpha.0 - 2021-02-18
• 5.2.4 - 2021-01-28

from cspell GitHub release notes

Commit messages

Package name: cspell

• a8c5912 v5.4.0
• d6977fe ci: Workflow Bot -- Update ALL Dependencies (Fix printed schema descriptions that end with a double quote (") graphql/graphql-js#1205)
• 1738993 Revert "Revert "fix: Correctly handle leading and trailing single quote"" (Improve dedent (fixes #1202) graphql/graphql-js#1203)
• 07df750 ci: Workflow Bot -- Update ALL Dependencies (Issues with the dedent string tag used for testing graphql/graphql-js#1202)
• 47ececf Revert "fix: Correctly handle leading and trailing single quote"
• 41152e1 fix: Correctly handle leading and trailing single quote
• 61bcd67 build(deps-dev): bump @ types/node from 14.14.43 to 15.0.1 (graphqlSync doesn't support mutations graphql/graphql-js#1195)
• 2ce2410 feat: Support `package.json` as a configuration location. (DRY with lists tests graphql/graphql-js#1178)
• 192acfc ci: Workflow Bot -- Update ALL Dependencies ([WIP] Transfrorm schema API graphql/graphql-js#1199)
• 8cc26d7 ci: run lint on every pull_request (RFC: inputUnion type graphql/graphql-js#1196)
• 8e03d2f build(deps-dev): bump ts-json-schema-generator from 0.90.0 to 0.91.0 (Update prettier graphql/graphql-js#1191)
• 30fa454 ci: Workflow Bot -- Update ALL Dependencies (Allow use of legacy names for schema validation graphql/graphql-js#1194)
• f0bc24b ci: Workflow Bot -- Update ALL Dependencies (master) (Add 'introspectionFromSchema' utility function graphql/graphql-js#1187)
• c47350d ci: Workflow Bot -- Update ALL Dependencies (Simplify 'BooleanValue' print graphql/graphql-js#1180)
• 25fec74 ci: Workflow Bot -- Update ALL Dependencies (Fix docstring for GraphQLError.extensions graphql/graphql-js#1176)
• c059ef7 build(deps-dev): bump eslint-plugin-promise from 4.3.1 to 5.1.0 (Simplify Unknown Args Validation graphql/graphql-js#1147)
• 222184a build(deps-dev): bump ts-loader from 8.1.0 to 9.1.0 (Issue with Flow 0.61.0 and graphql function graphql/graphql-js#1177)
• 43c19ac ci: Workflow Bot -- Update ALL Dependencies (Rebase of "Schema scalar of type" graphql/graphql-js#1173)
• 0056c5c build(deps-dev): bump ts-json-schema-generator from 0.89.3 to 0.90.0 (DRY with MaybePromise graphql/graphql-js#1164)
• 2156760 ci: Workflow Bot -- Update ALL Dependencies (Add MVP of mocha-like benchmark tests graphql/graphql-js#1167)
• 0afcb14 ci: Workflow Bot -- Update ALL Dependencies (Add test case for failing parsing graphql/graphql-js#1166)
• 8843256 chore: Point to cspell-dicts issues for typos (Flow type visitor and validation rules. graphql/graphql-js#1155)
• fc25695 ci: Workflow Bot -- Update ALL Dependencies (Robust type info graphql/graphql-js#1143)
• d7ad81c ci: Workflow Bot -- Update ALL Dependencies (CustomScalarType validation and GraphQLError handling graphql/graphql-js#1142)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mistaken-pull-closer]

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
ce447d20-bf61-11eb-911a-ab97a13bf198

[guardrails]

⚠️ We detected 4 security issues in this pull request:

Mode: paranoid | Total findings: 4 | Considered vulnerability: 4

Vulnerable Libraries (4)

Severity	Details
Medium	browserslist@4.16.1 upgrade to >4.16.4
Medium	hosted-git-info@2.8.8 upgrade to `>=2.8.9
High	lodash@4.17.20 upgrade to >=4.17.21
High	y18n@4.0.0 upgrade to >=5.0.5

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.