Updating vuln packages --dependabot

[KaranSaini]

Ran npm audit fix to update some vulnerable packages and updated proxy-agent (another vulnerable package --dependabot). Ran tests with the command npm run test and they all passed.

Updating these dependencies and publishing the package should remove pac-resolver dependabot notifications from all the repos depending on this package, once updated.

Sidenote:

• The trim-newlines package cannot be updated to a non-vulnerable version as it is being used by the xunit-file package which is at version 1.0.0 and has not been updated for the past 5 years.

[tklipa01]

Could we also fix the vulns related to xunit-file since its high sev? It seems like we can just remove xunit-file, i dont see it being used anywhere.

[KaranSaini]

Good catch! I removed xunit-file with the command npm uninstall xunit-file and ran the tests, which all passed as usual.

[tklipa01]

LGTM 👍