[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: nyc

The new version differs by 127 commits.

• bebf4d6 chore(release): 15.0.0
• 2931730 chore: Update to final releases of dependencies (query: how to call a function written in 1 file from other file hubotio/hubot#1245)
• d44ff19 chore: Update node-preload and use process-on-spawn (Azure deployment instructions hubotio/hubot#1243)
• 5258e9f feat: Filenames relative to project cwd in coverage reports (unable to load scripts for hubot hubotio/hubot#1212)
• 6039f29 chore: Unpin test-exclude, update to latest pre-releases (Improve systemd example init script. hubotio/hubot#1240)
• f3c9e6c chore: Temporarily pin test-exclude (Replace log with npm log hubotio/hubot#1239)
• 28ed746 chore: Lazy load modules that are rarely/never needed in test processes. (How to trigger a chain? hubotio/hubot#1232)
• 7307626 chore: Remove cp-file module (#803 breaks tests that assume receive is sync hubotio/hubot#1230)
• dfd629d fix: Better error handling for main execution, reporting (Docker support hubotio/hubot#1229)
• 549c953 chore: Update dependencies, pin find-cache-dir (docs: add link to symphony adapater hubotio/hubot#1228)
• a1dee03 chore: Update yargs (Coffeescript Interpreter Oddities hubotio/hubot#1224)
• 8078a79 chore: Fix 404 in README.md. (Hubot 2.19.0 attempts to load hubot-scripts-stock without depending on it hubotio/hubot#1220)
• 7a02cb7 chore: Add enterprise language (Turn off 1 on 1 conversations hubotio/hubot#1217)
• ea94c7f chore: Remove unused functions (Does hubot have a similar feature/workaround to botkit's conversation feature? (& making hubot forget responses) hubotio/hubot#1218)
• 53c66b9 docs: `npm home nyc` goes to github master branch README (Send private message (DM) to user, not id hubotio/hubot#1201)
• cf5e5d3 chore: Update dependencies
• 8411a26 fix: Correct handling of source-maps for pre-instrumented files (Add link to adapter for Symphony hubotio/hubot#1216)
• f890360 docs: Fix URL to default excludes in README.md (Update chef links and add runit as a init system hubotio/hubot#1214)
• 3726bbb chore: Update to async version of istanbul-lib-source-maps (Optionally require pmx for http analysis through pm2 hubotio/hubot#1199)
• 0efc6d1 chore: Tweak arguments for async coverage data readers (Was middleware intended to work on the HTTP path? hubotio/hubot#1198)
• cc77e13 chore: Add `use strict` to all except fixtures (lolz hubotio/hubot#1197)
• bcbe1df chore: Update dependencies (Fixed broken link on the deploying to hubot page hubotio/hubot#1196)
• 2735ee2 chore: 100% coverage (robot.brain.save() does not make the data persistent. hubotio/hubot#1195)
• fd40d49 feat: Use @ istanbuljs/schema for yargs setup (Run function after delay hubotio/hubot#1194)

See the full diff

Package name: semantic-release

The new version differs by 132 commits.

• 45695b9 fix(package): update @ semantic-release/commit-analyzer to version 8.0.0
• 3c7b114 fix(package): update @ semantic-release/release-notes-generator to version 9.0.0
• f2b5826 fix(package): update @ semantic-release/npm to version 7.0.0
• c48bd3a fix(package): update @ semantic-release/github to version 7.0.0
• bc97537 test: fix copy/paste typo in test titles
• c7e461d docs: add `@ saithodev/semantic-release-gitea` to community plugins
• ef1b8a0 chore(package): update ava to version 3.1.0
• bec57cd chore: require Node.js >=10.18
• c6b1076 fix: correct error when remote repository has no branches
• b54b20d fix: use `--no-verify` when testing the Git permissions
• 88fe819 docs: fix typo
• 559c152 docs(README): update minimal required Node version / FAQ link (Need help. Newbie. hubotio/hubot#1422)
• 31e7876 docs(travis): build on all branches by default
• 8c0490d docs: replacing firefox plugin in the list (Doc parser: don't strip comment leader twice hubotio/hubot#1416)
• 6b5b02e fix: fetch tags on repo cached by the CI
• 28b5480 docs: correct plugin execution order
• 3739ab5 fix(package): update env-ci to version 5.0.0
• 11665b2 chore(package): update dependencies
• 0785a84 fix: update plugin versions
• 152bf45 Merge remote-tracking branch 'origin/beta'
• 3ba8f2a Merge remote-tracking branch 'origin/master' into beta
• 9772563 fix: look also for previous prerelease versions to determine the next one
• 61665be fix: correct log when adding channel to tag
• a8747c4 fix: verify is branch is up to date by comparing remote and local HEAD

See the full diff

Package name: standard

The new version differs by 250 commits.

• 9c505a9 13.0.0
• 7f3dd5d eslint-config-standard-jsx@7.0.0
• 8cfb0ee eslint-config-standard@13.0.0
• e235cb5 changelog 13.0.0
• f125f0c add link to security disclosure policy
• bd44694 add nodejs logo; change logos to 4 per row
• f7f98bf Update CHANGELOG.md
• 5e6315c remove badge
• e3862be Update AUTHORS.md
• f796995 13.0.0-0
• 16ffaef Update CHANGELOG.md
• c1f817e bump deps
• ffb0b8e travis: drop node 6, add node 12
• d5565b5 Update CHANGELOG.md
• 4dcd00a add Nuxt.js logo
• ee3104d compress logos
• 6e077d7 standard
• d33bfe9 Merge pull request we start here personal / public  hubotio/hubot#1308 from munierujp/update_japanese_documents
• dd8fe00 Create FUNDING.yml
• 318bfac readme/changelog: global installation changes
• 329a2e0 readme: fix typescript instructions
• db61e3f Update CHANGELOG.md
• 7c661eb Automatically pass on Node 6 or earlier
• 0cfc932 Update Japanese document for 40d1d5e

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.