[Snyk] Upgrade resolve from 1.8.1 to 1.22.0

[snyk-bot]

Snyk has created this PR to upgrade resolve from 1.8.1 to 1.22.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 26 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-01-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: resolve

• 1.22.0 - 2022-01-22
  
  • [New] add default support for paths to include $HOME/.node_{modules,libraries} (#273)
  • [Deps] update is-core-module
• 1.21.1 - 2022-01-21
  
  • [Fix] bin/resolve: allow npx resolve usage
  • [Dev Deps] update eslint, @ ljharb/eslint-config, aud, tape
  • [Tests] add tests comparing resolve.sync to require.resolve
• 1.21.0 - 2022-01-03
  
  • [New] add top-level granular entry points
  • [New] add simple CLI util (#94)
  • [Refactor] sync: Do not throw on missing files in isFile/isDirectory (#256)
  • [Deps] update is-core-module, path-parse
  • [readme] pull in changes from default branch
  • [readme] remove defunct travis badge; update badges
  • [meta] backport FUNDING.yml
  • [meta] skip deleted files in eclint check
  • [meta] use prepublishOnly, for npm 7+
  • [actions] reuse common workflows
  • [actions] pull in workflows from default branch
  • [actions] use node/install instead of node/run; use codecov action
  • [Tests] backport appveyor.yml
  • [Tests] add coverage for a malformed package.json
  • [Tests] only run eclint on intended files
  • [Tests] add coverage for absolute paths
  • [Tests] invalid_main fixture had an invalid "name" field
  • [Dev Deps] update eslint, @ ljharb/eslint-config, array.prototype.map, safe-publish-latest, tape
  • [Dev Deps] update eslint, @ ljharb/eslint-config, aud, tape
• 1.20.0 - 2021-02-11
  
  • [New] add readPackage and readPackageSync (#236)
  • [Deps] update is-core-module
  • [meta] do not publish github action workflow files
  • [meta] create SECURITY.md
  • [meta] do not fail when aud is running and deps are not present
  • [meta] fix indentation in lib/core.json
  • [Dev Deps] update eslint, @ ljharb/eslint-config, array.prototype.map, aud, tape
  • [Tests] skip npm ls check on older nodes
• 1.19.0 - 2020-11-10
  
  • [New] sync/async: add 'includeCoreModules' option (#233)
  • [readme] Add possible error types (#232)
  • [Deps] update is-core-module
  • [Dev Deps] update aud, eslint
  • [meta] add Automatic Rebase and Require Allow Edits workflows
  • [Tests] comment out node 15 in appveyor; it’s not available yet
  • [Tests] add node 15 to appveyor, fix "latest npm" logic
  • [Tests] migrate tests to Github Actions
• 1.18.1 - 2020-10-19
  
  • [Fix] core: remove console warning on require, since the main entry point requires it
  • [Refactor] avoid using extensions in require paths
  • [meta] update auto-generated core.json
  • [meta] add eclint and .editorconfig
  • [Dev Deps] update eslint
  • [Dev Deps] add aud in posttest
• 1.18.0 - 2020-10-19
  
  • [New] extract isCore implementation to is-core-module
  • [New] add new core modules that will be in node v15
  • [readme] soft-deprecate resolve.isCore
  • [Dev Deps] update eslint, @ ljharb/eslint-config, tape
• 1.17.0 - 2020-04-22
  
  • [New] sync/async: add realpath/realpathSync options (#218)
  • [Dev Deps] update tape
• 1.16.1 - 2020-04-17
• 1.16.0 - 2020-04-15
• 1.15.1 - 2020-02-05
• 1.15.0 - 2020-01-22
• 1.14.2 - 2020-01-07
• 1.14.1 - 2019-12-19
• 1.14.0 - 2019-12-18
• 1.13.1 - 2019-11-26
• 1.13.0 - 2019-11-25
• 1.12.3 - 2019-11-26
• 1.12.2 - 2019-11-22
• 1.12.1 - 2019-11-22
• 1.12.0 - 2019-08-01
• 1.11.1 - 2019-06-03
• 1.11.0 - 2019-05-15
• 1.10.1 - 2019-04-24
• 1.10.0 - 2019-01-21
• 1.9.0 - 2018-12-17
• 1.8.1 - 2018-06-17

from resolve GitHub release notes

Commit messages

Package name: resolve

• cd52b64 v1.22.0
• 9bd06c0 [New] add default support for `paths` to include `$HOME/.node_{modules,libraries}` ([Snyk] Security upgrade request from 2.87.0 to 2.88.0 #273)
• e543f9e [Deps] update `is-core-module`
• 1f3dec5 v1.21.1
• 41fbf65 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `aud`, `tape`
• c6307c2 [Fix] `bin/resolve`: allow `npx resolve` usage
• 6f2b872 [Tests] add tests comparing `resolve.sync` to `require.resolve`
• da9e8af v1.21.0
• 14d92b8 [Tests] backport appveyor.yml
• 677ab33 [meta] backport FUNDING.yml
• 6f8d3c4 [Dev Deps] update `eslint`
• 2e23786 [New] add top-level granular entry points
• 613efb2 [New] add simple CLI util ([Snyk] Upgrade aws-sdk from 2.275.1 to 2.595.0 #94)
• e538c8a [meta] skip deleted files in `eclint` check
• d6e0871 [Tests] add coverage for a malformed package.json
• c2b7070 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `array.prototype.map`, `safe-publish-latest`, `tape`
• ebbe162 [actions] reuse common workflows
• dfab53f [Tests] only run `eclint` on intended files
• 931ad2b [Tests] add coverage for absolute paths
• d688575 [Refactor] `sync`: Do not throw on missing files in `isFile`/`isDirectory` ([Snyk] Upgrade aws-sdk from 2.275.1 to 2.697.0 #256)
• 18c5ad5 [Deps] update `is-core-module`
• 3e18d90 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `array.prototype.map`, `tape`
• 09fa26b [actions] pull in workflows from default branch
• f669601 [readme] pull in changes from default branch

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs