[Snyk] Fix for 5 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change
	Information Disclosure SNYK-JS-KINDOF-537849	Yes
	Directory Traversal SNYK-JS-NODEGIT-542720	No
	Improper Handling of Alternate Data Stream SNYK-JS-NODEGIT-542721	No
	Improper Handling of Alternate Data Stream SNYK-JS-NODEGIT-542722	No
	Improper Link Resolution Before File Access SNYK-JS-NODEGIT-542723	No

Commit messages

Package name: forever

The new version differs by 25 commits.

• 008766f Add linting (#1053)
• a5b97ae add '--version' to help text (#1041)
• 3c09b6f Update async to 1.x.x (#1052)
• c551947 Update async (#1051)
• dda79a6 Update dependencies (#1050)
• 70259bc Drop support for Node < 6 (#1049)
• 8b41d16 Bump version in package-lock.json
• 2f6d4e0 Only publish necessary files
• 067c758 Bump version to 1.0.1, update changelog
• bce5991 Update forever-monitor (#1047)
• 0ef5100 Fix CI (#1048)
• e10127d Add information about the fact that no output is appended to the logs after forever stop/stopall is called (#1015)
• 8a5e12c Add list of supported columns (#1029)
• eabc5ef Replace travis with circleci (#1030)
• 0f60947 Update changelog for 1.0.0
• 936af1f [dist] Version bump. 1.0.0
• 28689b5 [dist] Version bump. 0.15.4
• ad1df0c [dist] Add package-lock.json
• e2e4970 [doc] Update contributors.
• a11d6f9 Update utile to get rid of security warning (#1022)
• 01fb537 Propagate error when failing to create directories on startup (#1017)
• 6ff9344 Remove dependency on timespan (#1014)
• 1580152 [fix] use fs.unlinkSync (#979)
• c78e3df Add example for referencing -l -o and -e parameters from within a JSON config file (#869)

See the full diff

Package name: nodegit

The new version differs by 250 commits.

• bdae091 Fix workflow for node 8 npm issue
• 0de3294 Bump to v0.26.3
• 36856a1 Merge pull request #1743 from implausible/security-fixes
• b5769a2 Bring in security patches from libgit2
• 1047f66 Bupm to v0.26.2
• 0683f2b Update README.md for inactive maintainers
• b66dd42 Merge pull request #1728 from implausible/feature/commit-walk-commit-models
• d7c9860 Use const qualifier more; use static_cast for void *
• 6ecd368 commitWalk optionally returns plain objects with gpgSignature data
• ee7b26c Bump to v0.26.1
• 7468f5e Merge pull request #1723 from implausible/bump/libgit2
• 0ff6470 Bump libgit2 to latest fork of master
• 372635a Merge pull request #1722 from implausible/fix/optional-parameter-on-update-tips
• cd55298 updateTips: optional param and normalizeOptions
• 0228707 Enable builds on tags
• 3699ee9 Bump to v0.26.0
• b6e5fac In testing, retry npm install because of unsolved race condition
• d071af0 Merge pull request #1720 from implausible/fix/async-remote-functions
• 46a3456 Merge pull request #1719 from implausible/patch/libssh2
• 95e0518 GitRemote upload and updateTips are async
• 129492d Update libssh2 to 1.9
• f2fea6a Merge pull request #1717 from henkesn/rebase-inmemory
• ee79dcb Add test for in-memory rebase
• b495715 Fix rebase using in-memory index

See the full diff

Package name: nunjucks

The new version differs by 250 commits.

• 9a0ce36 3.13 release - fix typo in CHANGELOG
• c2de0e4 Release 3.1.3
• 4d8a4cc Update chokidar optionalDependency. Fixes #1103
• d140280 Update CONTRIBUTING.md to reflect supported node releases [ci skip]
• af6427d Update CHANGELOG
• 1b76fb8 Update package.json engines to reflect supported node versions
• 8afacce Add unit tests for {% if x is [not] defined %}. refs #1110
• 248cf56 Fix "Invalid type: Is" error when using {% if x is defined %}
• 2eaea16 Drop node v4 support, add node v9
• 8041120 Include file/lineno in TemplateError message. fixes #1087, #1095
• 1b4558d Merge pull request #1090 from TheDancingCode/forceescape
• f478b06 Add "forceescape" filter
• de49d33 Merge pull request #1089 from gingerrific/master
• 3ab849c Update remaining src links
• dedb978 Update API.md links to use correct paths
• 323dabe Fix postinstall-build packaging issue, v3.1.2
• 9f1b7da Prepare for next release
• 6f3e4a3 v3.1.1
• eed7b2d Fix bug that broke template caching. fixes #1074
• db8e3c3 Fix error when running npm install nunjucks --no-bin-links
• 2c97201 try/catch require of chokidar to make it truly optional
• a65d3b8 bower forbids minified js in the main property
• 2c98065 Add nunjucks folder to bower.json ignore
• 470181d Prepare for next release

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic