[Snyk] Fix for 1 vulnerabilities

[oph-snyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • project_info/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	125/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.08, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: express-handlebars

The new version differs by 250 commits.

• 1e169fe chore(release): 7.0.0 [skip ci]
• 86da3b2 fix: minimum Node v16 (#516)
• 3b08bbb fix(deps): update dependency glob to v9 (#514)
• 8917c9f chore(deps): update devdependency semantic-release to ^20.1.1
• 069c579 chore(deps): update typescript-eslint monorepo to ^5.54.0
• 790869d chore(deps): update devdependency eslint to ^8.35.0
• 4766eed chore(deps): update devdependency @ types/glob to ^8.1.0
• e88c951 chore(deps): update typescript-eslint monorepo to ^5.53.0
• c9d47e9 chore(deps): update devdependency jest-cli to ^29.4.3
• 62d5841 chore(deps): update typescript-eslint monorepo to ^5.52.0
• 16980b5 chore(deps): update devdependency eslint to ^8.34.0
• 2b1be56 chore(deps): update devdependency jest-cli to ^29.4.2
• 2e8c9df chore(deps): update typescript-eslint monorepo to ^5.51.0
• 7b6f9a0 chore(deps): update typescript-eslint monorepo to ^5.50.0
• 1538fbf chore(deps): update devdependency typescript to ^4.9.5
• 0898df3 chore(deps): update devdependency jest-cli to ^29.4.1
• 70539de chore(deps): update devdependency eslint to ^8.33.0
• e83940a chore(release): 6.0.7 [skip ci]
• 1bb2a2f fix(deps): update dependency glob to ^8.1.0 (#489)
• 5dffb89 chore(deps): update devdependency @ types/jest to ^29.4.0
• a983d2d chore(deps): update devdependency semantic-release to ^20.1.0
• 0c5eb2a chore(deps): update devdependency jest-cli to ^29.4.0
• c9986c8 chore(deps): update devdependency semantic-release to ^20.0.4
• 855b6d1 chore(deps): update typescript-eslint monorepo to ^5.49.0

See the full diff

Package name: glob

The new version differs by 173 commits.

• a68703e 9.0.0
• 58159ca test: cwd can be a url
• a547a9c more docs
• 42a3ac7 link to bash manual for Pattern Matching
• 474172d update readme with cwd URL support
• ad3904d update readme with posix class support
• b22fc7d minimatch@7.3.0
• cdd1627 update all the things, remove unused mkdirp types
• 75c6416 Merge branch 'v9'
• fa0cd77 cwd can be a file:// url
• d03ed0a typedoc github action
• 9a5a45a put bench results in readme
• 20b2f88 docs, fix benchmark script
• 4829c88 upgrade ci actions
• 5cbacdd minimatch@7.2.0
• 210310b omit symlinks on windows
• d34c8d5 full test coverage, clean up signals and remove extranous code
• 5f21b46 adding lots of tests, clean up types
• b12e6ba slashes on nodir test
• 75f74b0 more windows test slashes
• 3aa1abd more windows test affordances
• 3e68a7b some windows test affordances
• 8c2e082 feature complete and tests passing
• c3be35a correct ** vs ./** behavior

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.