[Snyk] Fix for 1 vulnerabilities

[Fkherif]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @atomist/automation-client

The new version differs by 24 commits.

• 2c3e820 Version: increment after 1.0.1 release
• d609ef3 Autofix: Third party licenses
• fa835fe Prepare 1.0.1 release
• 4881201 Autofix: Third party licenses
• 44fadb9 Revert "Roll back TypeScript to 2.9"
• a1ea60f Autofix: Third party licenses
• b8ee5e0 Roll back TypeScript to 2.9
• 27c2b04 Autofix: Third party licenses
• eb251b7 Upgrade TypeScript, remove test coverage
• ef0fc95 Fix use of process.cwd()
• 99108f8 Fix issue with Objects not having hasOwnProperty
• 8560c9f Changelog: #396 to added
• 9b4a4f6 Merge pull request #396 from atomist/nortissej/some-apidoc-on-fingerprint
• 5833860 Fix filename handling
• d458e9d Fix circular resolution of env vars
• d33d9cf No, timing is better for this metric
• f273aaa Event loop delay back to gauge
• cefafa8 Switch event loop delay to a timer
• 55ebd49 Fix property access on heavy instance
• bb5ebe8 Autofix: Third party licenses
• 08deb2a Report event loop deplay metric
• 6f92839 Update the API Doc to reflect configuration load from index.ts (#398)
• b77fba6 Changelog: add release 1.0.0-RC.2
• 27c3deb Just apidocs

See the full diff

Package name: @atomist/sdm

The new version differs by 51 commits.

• 01575c0 Version: increment after 1.0.1 release
• b14c57c Autofix: Third party licenses
• 381920d Prepare 1.0.1 release
• ffdd823 Prepare 1.0.1 release
• dc831b1 Update TypeScript
• 73ee4b0 Make details optional in AutoCodeInspection goal
• 25ca60a Change reportToSlack default back to true for backwards compatibility
• 165150f Polish creation of AutoCodeInspetion goal
• 25ff40a Changelog: #294 to added
• 97ca6cd Changelog: #570 to changed
• 94c29d6 Replace `Promise<any>` with `Promise<void>` (#570)
• 69c1027 Add author to PR
• 454a5f3 Add merge status and commiter info to PR
• 96765e7 Autofix: tslint
• 36123f7 Changelog: 04da438 to added
• 04da438 Allow to disable sending of review errors to slack
• fb1a00f Replace all spaces
• 941778e Changelog: 687a9ed to changed
• 687a9ed Add externalUrls on ExecuteGoalResult and deperate targetUrls
• dae48c3 Fix green color on success message
• 2710eb4 Deprecate githubTeamVoter in favor of gitHubTeamVoter
• 12416cb Changelog: 1cb71e2 to added
• 1cb71e2 Add slackQuestionMessage
• 68342c4 Allow to provide name to withTransform

See the full diff

Package name: @atomist/sdm-core

The new version differs by 20 commits.

• 83c7c24 Version: increment after 1.0.0 release
• 76c766c Autofix: Third party licenses
• b126c6a Prepare 1.0.1 release
• 35ccbd1 Add author to PR
• 2f8224b Add merge status and commiter info to PR
• 7ffc124 Autofix: Third party licenses
• d57343c Update sdm
• d735710 Autofix: Third party licenses
• b41dd02 Adopt goal decision manager
• fed0f6a Fix credentials provider to validate the token first
• 3635721 Use timing instead of gauge
• 6011983 Delint
• a3bfcae Changelog: [Snyk] Fix for 18 vulnerabilities #79 to fixed
• 7583221 Use GraphQL endpoint from configuration
• b058f05 Add goal round_trip metric to statsd reporting
• 6827929 Changelog: bcbc3b0 to added
• bcbc3b0 Use incoming event and command to retrieve token
• 46e3c23 Move comment
• be35108 Fix credentialsProvider
• 94dcb5a Changelog: add release 1.0.0-RC.2

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)