[Snyk] Security upgrade convict from 4.2.0 to 6.2.4

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	606/1000 Why? Recently disclosed, Has a fix available, CVSS 6.4	Denial of Service (DoS) SNYK-JS-CONVICT-3228003	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: convict

The new version differs by 150 commits.

• e4964f2 chore(release): publish new version 6.2.4
• fb602fb fix-imperfect-prototype-pollution-fix (#411)
• 9ca2d82 chore: Don't create CHANGELOG files manually
• 23b5722 docs: Update CONTRIBUTING about auto-CHANGELOG
• 0785e99 Fix lerna.json file
• de1629a fix: Consistent use of quotes in output (#405)
• 18d9115 chore: Switch from Lerna to Workspaces+Lerna-Lite (#404)
• deef5d7 v6.2.3
• 5e64b53 More recent Ubuntu dist for Travis CI build
• 1ea0ab1 More more complete fix for prototype pollution
• c7acb02 Update info regarding publishing on NPM
• 4da12f8 v6.2.2
• 8ad66b5 Update CHANGELOG
• 3b86be0 More complete fix against prototype pollution
• e3173b1 Clearer variable name
• 5eb1314 v6.2.1
• 5ad62d6 Update CHANGELOG
• c682086 fix misspelling of the word optional in the error message (#397)
• bdd8a4e v6.2.0
• f693077 Provide working links in the CHANGELOG
• d90f2f8 Update CHANGELOG
• 11ef47e chore: update dependencies (#390)
• 41e8c4a v6.1.0
• 8d198ef Update CHANGELOG for next 6.1.0 release

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Denial of Service (DoS)