[Snyk] Upgrade cspell from 5.2.4 to 5.4.1

[snyk-bot]

Snyk has created this PR to upgrade cspell from 5.2.4 to 5.4.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 24 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2021-05-11.

Release notes

Package name: cspell

• 5.4.1 - 2021-05-11
  

  v5.4.1

• 5.4.0 - 2021-05-05
  

  v5.4.0

• 5.3.12 - 2021-04-06
  

  v5.3.12

• 5.3.11 - 2021-04-03
  

  v5.3.11

• 5.3.10 - 2021-04-02
  

  v5.3.10

• 5.3.9 - 2021-03-19
  

  v5.3.9

• 5.3.8 - 2021-03-17
  

  v5.3.8

• 5.3.7 - 2021-03-05
  

  v5.3.7

• 5.3.7-alpha.3 - 2021-03-05
  

  v5.3.7-alpha.3

• 5.3.7-alpha.2 - 2021-03-05
  

  v5.3.7-alpha.2

• 5.3.7-alpha.1 - 2021-03-05
• 5.3.7-alpha.0 - 2021-03-05
• 5.3.6 - 2021-03-05
• 5.3.5 - 2021-03-05
• 5.3.4 - 2021-03-01
• 5.3.3 - 2021-02-26
• 5.3.2 - 2021-02-26
• 5.3.1 - 2021-02-25
• 5.3.0 - 2021-02-25
• 5.3.0-alpha.4 - 2021-02-25
• 5.3.0-alpha.3 - 2021-02-23
• 5.3.0-alpha.2 - 2021-02-22
• 5.3.0-alpha.1 - 2021-02-19
• 5.3.0-alpha.0 - 2021-02-18
• 5.2.4 - 2021-01-28

from cspell GitHub release notes

Commit messages

Package name: cspell

• e6a011e v5.4.1
• 85789a1 ci: Update packages (Make 'ASTDefinitionBuilder' responsible only for build types from AST graphql/graphql-js#1230)
• 60975ea fix: correct how dictionaries are disabled (Update flow + "@flow strict" graphql/graphql-js#1229)
• d9dc2dc ci: Workflow Bot -- Update ALL Dependencies (module initialization error with uglify mangle=true graphql/graphql-js#1227)
• e42a51d build(deps): bump fs-extra from 9.1.0 to 10.0.0 (unhandled promise rejection graphql/graphql-js#1223)
• 74e1d9d ci: Workflow Bot -- Update ALL Dependencies (Switch introspection tests to graphqlSync graphql/graphql-js#1225)
• bb3fbd6 build(deps-dev): bump ts-json-schema-generator from 0.91.0 to 0.92.0 (Provide .mjs entry for native ESM graphql/graphql-js#1217)
• 2431682 ci: Workflow Bot -- Update ALL Dependencies (master) (Allow interface type extensions graphql/graphql-js#1222)
• 6bd9cce ci: Workflow Bot -- Update ALL Dependencies (Add 'objectValues' JS util function graphql/graphql-js#1209)
• b12b969 ci: Workflow Bot -- Update ALL Dependencies (More accurate check for cache-hit in memoize3 graphql/graphql-js#1207)
• f255b1f ci: Workflow Bot -- Update ALL Dependencies (Add node v9 to test matrix graphql/graphql-js#1206)
• a8c5912 v5.4.0
• d6977fe ci: Workflow Bot -- Update ALL Dependencies (Fix printed schema descriptions that end with a double quote (") graphql/graphql-js#1205)
• 1738993 Revert "Revert "fix: Correctly handle leading and trailing single quote"" (Improve dedent (fixes #1202) graphql/graphql-js#1203)
• 07df750 ci: Workflow Bot -- Update ALL Dependencies (Issues with the dedent string tag used for testing graphql/graphql-js#1202)
• 47ececf Revert "fix: Correctly handle leading and trailing single quote"
• 41152e1 fix: Correctly handle leading and trailing single quote
• 61bcd67 build(deps-dev): bump @ types/node from 14.14.43 to 15.0.1 (graphqlSync doesn't support mutations graphql/graphql-js#1195)
• 2ce2410 feat: Support `package.json` as a configuration location. (DRY with lists tests graphql/graphql-js#1178)
• 192acfc ci: Workflow Bot -- Update ALL Dependencies ([WIP] Transfrorm schema API graphql/graphql-js#1199)
• 8cc26d7 ci: run lint on every pull_request (RFC: inputUnion type graphql/graphql-js#1196)
• 8e03d2f build(deps-dev): bump ts-json-schema-generator from 0.90.0 to 0.91.0 (Update prettier graphql/graphql-js#1191)
• 30fa454 ci: Workflow Bot -- Update ALL Dependencies (Allow use of legacy names for schema validation graphql/graphql-js#1194)
• f0bc24b ci: Workflow Bot -- Update ALL Dependencies (master) (Add 'introspectionFromSchema' utility function graphql/graphql-js#1187)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mistaken-pull-closer]

Thanks for your submission.

It appears that you've created a pull request using one of our repository's branches. Since this is
almost always a mistake, we're going to go ahead and close this. If it was intentional, please
let us know what you were intending and we can see about reopening it.

Thanks again!

[pull-dog]

*Ruff* 🐶 I wasn't able to find any Docker Compose files in your repository at any of the given paths in the pull-dog.json configuration file, or the default docker-compose.yml file 😩 Make sure the given paths are correct.

Files checked:

• docker-compose.yml

What is this?

Pull Dog is a GitHub app that makes test environments for your pull requests using Docker, from a docker-compose.yml file you specify. It takes 19 seconds to set up (we counted!) and there's a free plan available.

Visit our website to learn more.

Commands

• @pull-dog up to reprovision or provision the server.
• @pull-dog down to delete the provisioned server.

Troubleshooting

Need help? Don't hesitate to file an issue in our repository

Configuration

{
  "isLazy": false,
  "dockerComposeYmlFilePaths": [
    "docker-compose.yml"
  ],
  "expiry": "00:00:00",
  "conversationMode": "singleComment"
}

Trace ID
36c09bc0-c329-11eb-860e-543eb63404c5

[guardrails]

⚠️ We detected 4 security issues in this pull request:

Mode: paranoid | Total findings: 4 | Considered vulnerability: 4

Vulnerable Libraries (4)

Severity	Details
Medium	browserslist@4.16.1 upgrade to >4.16.4
Medium	hosted-git-info@2.8.8 upgrade to `>=2.8.9
High	lodash@4.17.20 upgrade to >=4.17.21
High	y18n@4.0.0 upgrade to >=5.0.5

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.