Ramda 0.26.1 is vulnerable

[danymarques]

Software versions

• OS: MacOS Monterey 12.4
• Consumer Pact library: @pact-foundation/pact@9.18.0
• Node Version: v14.19.0

Issue Checklist

Please confirm the following:

• I have upgraded to the latest
• I have the read the FAQs in the Readme
• I have triple checked, that there are no unhandled promises in my code and have read the section on intermittent test failures
• I have set my log level to debug and attached a log file showing the complete request/response cycle
• For bonus points and virtual high fives, I have created a reproduceable git repository (see below) to illustrate the problem

Expected behaviour

A green vulnerability scan.

Actual behaviour

Our vulnerability scanning is failing because of ramda. See: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-42581

It would be nice if you could merge this PR: #879 and release a new version as all our pipelines are red now :-(

[mefellows]

Fixed in 5005463.