[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • script/package.json
  • script/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: eslint

The new version differs by 250 commits.

• 3dd6741 7.0.0
• 9a722f9 Build: changelog update for 7.0.0
• b98d8bd Upgrade: eslint-release@2.0.0 (Atom editor crashes on startup atom/atom#13271)
• 4c0b028 Fix: remove Node.js and CommonJS category from build process (Atom crashes when trying to add a project folder with a corrupt .git/index atom/atom#13242)
• 401a687 Chore: fix rules list for prereleases (Use yarn to download packages atom/atom#13230)
• 4ef6158 Breaking: espree@7.0.0 (Syntax Highlighting breaks after certain length of line atom/atom#13270)
• b5c8d73 Docs: update 7.0.0 migration guide for consistency (Window reload key unusable in v1.13.0-beta4 atom/atom#13267)
• 356fdb4 Docs: add migration guide (Split screen horizontal / floating windows atom/atom#12692)
• 015edf6 Sponsors: Sync README with website
• fdfa364 7.0.0-rc.0
• 8d1b4db Build: changelog update for 7.0.0-rc.0
• 0b1d65a Update: Improve report location for array-callback-return (refs When searching acorss a project it should be possible to copy the text of the search result for reference atom/atom#12334) (Uncaught Error: Could not call remote function 'emit'. Check that the function signature is corre... atom/atom#13109)
• d85e291 Fix: yoda left string fix for exceptRange (fixes Always return Disposable from maintain{Config,Grammar} atom/atom#12883) (Problem with saving.  atom/atom#13052)
• 2ce6bed Chore: added tests for nested arrays (Feature Request: Drag and drop files from the tree view into browser to open in browser (similar to how the open file tabs can be dragged in) atom/atom#13145)
• d3aac53 Update: report backtick loc in no-unexpected-multiline (refs When searching acorss a project it should be possible to copy the text of the search result for reference atom/atom#12334) (Syntax Highlight Error after "&" atom/atom#13142)
• 8e7a2d9 Fix: func-call-spacing "never" reports wrong message (fixes /usr/bin/atom: line 111: 13463 Segmentation fault  atom/atom#13190) (Atom crashed.. atom/atom#13193)
• bcafd0f Update: Add ESLint API (refs New: ESLint Class Replacing CLIEngine eslint/rfcs#40) (test pull request atom/atom#12939)
• 3eeae56 Upgrade: some (dev) deps (Shake Screen effect of Active Power Mode Package in Gnome Classic is not working atom/atom#13155)
• 6b7030b Chore: Run tests on Node.js v14 (Screen goes blue after switching workspace in Linux atom/atom#13210)
• ebc28d7 Fix: Remove default .js from --ext CLI option (RPM Install: error while loading shared libraries: libXss.so.1: cannot open shared object file: No such file or directory atom/atom#13176)
• 5c1bdeb Update: Improve report location for getter-return (refs When searching acorss a project it should be possible to copy the text of the search result for reference atom/atom#12334) (Portable version for macOS atom/atom#13164)
• 56d2bee Docs: fix typos (After updating to 1.12.1 the command line binaries were no longer present. atom/atom#13204)
• e13256e Chore: use espree.latestEcmaVersion in config-initializer (beta7 stuck on Installing autocomplete-css@0.13.1  atom/atom#13157)
• e4f57b7 Chore: add nested array tests for array-element-newline (Additional license clarification and update license year atom/atom#13161)

See the full diff

Package name: npm

The new version differs by 250 commits.

• 30a9844 7.21.0
• 0b2cd9d update AUTHORS
• 06461ec docs: changelog for v7.21.0
• 771a1cb chore(tests): fix snapshots
• 71cdfd8 spdx-license-ids@3.0.10
• 94f92de make-fetch-happen@9.0.5
• 7ac621c smart-buffer@4.2.0
• 218caca is-core-module@2.6.0
• ff6626a fix(docs): update npm-publish access flag info
• b6f40b5 tar@6.1.10
• e9e5ee5 @ npmcli/arborist@2.8.2
• 991a3bd read-package-json@4.0.0
• f077724 init-package-json@2.0.4
• 68a19bb fix(error-message): look for er.path not er.file
• ff34d6c feat(cache): initial implementation of ls and rm
• 8183976 normalize-package-data@3.0.3
• df57f0d @ npmcli/run-script@1.8.6
• 487731c fix(logging): sanitize logged argv
• 7a58264 chore(ci): check that docs are up to date in ci
• 22f3bbb chore(docs): add more 'autogenerated' comments
• 4314490 fix(docs): revert auto-generated portion of docs
• 32e88c9 fix(did-you-mean): switch levenshtein libraries
• 59b9851 7.20.6
• 2591e67 update AUTHORS

See the full diff

Package name: stylelint

The new version differs by 250 commits.

• c789336 Prepare 10.0.0
• 70c63e0 Update CHANGELOG.md
• 9b76cec Fix autofix for single-line comments within maps in value-keyword-case (Atom has excessive battery impact compared to other apps on Mac OS Yosemite atom/atom#4019)
• 49fa75f Update CHANGELOG.md
• 6308199 Update CHANGELOG.md
• 4ca75e7 Throw error on non-existent files unless allow-empty-input is enabled (📝 fix TextEditor::delete() doc atom/atom#3965)
• 5811b65 chore(package): update prettier to version 1.17.0 (Way to completely disable a certain key shortcut? atom/atom#4025)
• 7c8d769 Replace Node.js legacy API for URL parsing. Fixes 🐧 .desktop file without capital letter atom/atom#3803 (Possible to change the html's bg to be dynamically set on theme apply/change? atom/atom#4024)
• 77c70b5 Update dependencies (Chocolatey lags upgrade notice atom/atom#4013)
• a8f93d6 fix(package): update micromatch to version 4.0.0 (can't install atom on centos 6.5 Failed dependencies: libgnome-keyring atom/atom#4015)
• bfbf462 Update CHANGELOG.md
• 9efd6f4 Remove `styled` and `jsx` syntax options (/* */ comment on a single line inside braces keeps trying to un-indent atom/atom#4009)
• 6ab5e1f Update CHANGELOG.md
• 2b73704 Add ignore: ["comments"] to block-no-empty (Installation: libgnome-keyring dependency error on Red Hat 6.5 atom/atom#4008)
• b6f3057 Update CHANGELOG.md
• 81f4139 Drop Node.js 6 support (Upgrade to atom-shell@0.19.1 atom/atom#4006)
• b4dc965 Fix documentation typos and mistakes (Deprecate exports atom/atom#3922)
• d66354d Update CHANGELOG.md
• 4ec7170 Fix false negatives for `isStandardSyntaxDeclaration` (Add .dmg for OSX atom/atom#3933)
• a174409 fix(package): update string-width to version 4.0.0 (Lag with Plain Text atom/atom#3991)
• bdd3685 Update CHANGELOG.md
• e92d5e0 Fix false positives for negative numbers in function-calc-no-invalid (Ubuntu - welcome.md  atom/atom#3921)
• 59681a0 Update CHANGELOG.md
• 35c3f5a Apply rule in the order defined in `lib/rules/index.js` (Update the app icon on OS X to fit with the new Yosemite UI style atom/atom#3923)

See the full diff

Package name: yargs

The new version differs by 250 commits.

• aa09faf chore: release 15.0.1 (Clean up atom.pasteboard atom/atom#1480)
• 6a9ebe2 fix(deps): cliui, find-up, and string-width, all drop Node 6 support (Remove _ and fs from atom exports atom/atom#1479)
• 5cc2b5e chore: release 15.0.0 (Can't decrease font size atom/atom#1462)
• 62a114a force build
• 1840ba2 feat: expose `Parser` from `require('yargs/yargs')` (Remove some packages from core build. atom/atom#1477)
• afd5b48 fix(docs): update boolean description and examples in docs (Windows todo list atom/atom#1474)
• c10c38c feat(deps)!: yargs-parser now throws on invalid combinations of config (Detecting file type from shebangs doesn't work if there's a space atom/atom#1470)
• 0cba424 build: switch to release-please for releases (Rename ~/.atom/user.css to ~/.atom/styles.css atom/atom#1471)
• 445bc58 chore: update engines to note Node 6 is dropped ("Invalid regular expression" errors are not caught when searching atom/atom#1469)
• 52d875a test: add additional test for 1459
• 12c82e6 fix: stop-parse was not being respected by commands (Add source map support in dev mode atom/atom#1459)
• b4812ac test: add tests for argsert warning to display positional information (Add View suffix to Gutter & SelectList atom/atom#1468)
• 10f10ee test: cover missing filter arg in obj-filter ( Upgrade to atom-shell@v0.8.6 atom/atom#1467)
• cb0396f build: switch to c8 for coverage (Make CLI installation easier. atom/atom#1464)
• ebee59d fix!: update to yargs-parser with fix for array default values (The error console pops up sometimes because I run Atom as a user who isn't in the admin group (so I atom/atom#1463)
• 5120aec test: adds missing array choice regression test ("Sign into GitHub" (which should probably be "Sign in to GitHub") doesn't work at all for me, and my atom/atom#1447)
• 2ba8ce0 chore!: drop Node 6 support (Cannot read property 'classList' of undefined atom/atom#1461)
• cb64329 build: configure release-please
• 0d3642b refactor!: remove package.json-based parserConfiguration (Coffee script node module isn't always installed atom/atom#1460)
• 9adf22e doc(webpack): webpack example (Defer I/O for package requires until they're actually used atom/atom#1436)
• 7e1c8fc Add missing french translation (Use file suffix to load specific platform keybindings. atom/atom#1456)
• b1b156a fix(docs): TypeScript import to prevent a future major release warning (Allow folds to be toggled by clicking icons in the gutter atom/atom#1441)
• bc3c4d1 chore(release): 14.2.0
• 4d21520 feat(deps): introduce yargs-parser with support for unknown-options-as-args (Save with no panes open throws error atom/atom#1440)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic