[Snyk] Fix for 4 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579147	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579152	Yes	No Known Exploit
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-TAR-1579155	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: prop-types

The new version differs by 60 commits.

• fa6fbb7 15.6.2
• 5115f5c Merge pull request Add permalink to messages elastic/kibana#180 from jaller94/master
• 2ac742c Merge pull request Display the version of Kibana on pages elastic/kibana#171 from barrymichaeldoyle/master
• a7a5a64 Merge pull request The Fields module should be able to overflow by expanding, just like the Table elastic/kibana#194 from facebook/no-fbjs
• d6c9c5c Preserve "Invariant Violation" name
• 07d1b47 Remove fbjs dependency
• 3c99d57 Remove trailing spaces
• a36cda8 Move explanation of `isRequired` and show it in `PropTypes.shape`
• ba3da12 Show that shapes can have required properties
• 2bde8eb Add example for `PropTypes.exact`
• d65f80e Updated vars to consts and lets in PropTypesProductionStandalone-test.js
• c10c93f Updated vars to consts and lets in PropTypesDevelopmentStandalone-test.js
• 8e2b34e Updated vars to consts and lets in PropTypesDevelopmentReact15.js
• c5527c8 Updated vars with consts and lets in PropTypesProductionReact15-test.js
• 7cc8c81 Add 15.6.1 to CHANGELOG
• 5df7296 15.6.1
• b7d03ce Point readme to correct docs for production builds (HITS panel : new features, new design elastic/kibana#153)
• a94243f Update the repository location (Color bars elastic/kibana#148)
• 77c62a7 Fix failing tests (Kibana still read/writes to kibana-int index even if the index is changed in config.js elastic/kibana#129)
• 644844c Merge pull request Improve pie and trends panels ... elastic/kibana#140 from flarnie/master
• 0b5db12 Add `CODE_OF_CONDUCT`
• a6900f0 Add CONTRIBUTING.md
• 492e230 Update README.md with improved importing for CDNs (Hits/pie panel : list view with percent and "order by" capability elastic/kibana#104)
• 155f4cc v15.6.0 for real

See the full diff

Package name: react-ace

The new version differs by 11 commits.

• 7ec4507 Merge pull request removed eventBus completely, fix field list auto complete elastic/kibana#286 from securingsincity/upgrade-to-5.3.0
• a9c6a73 5.3.0 release
• 2e36fb2 Merge pull request Empty line histogram with single-item facet result elastic/kibana#280 from M-ZubairAhmed/master
• 80179f8 rebased with latest change
• c9273b0 Merge pull request Added terms panel & fixed CLA link elastic/kibana#284 from layershifter/chore/react-16
• ffc2273 Update CHANGELOG.md
• e0334ba chore(package): update to react 16
• a661bb8 react-test-render version changed to ^15.0.1
• 2f6461b Merge pull request Time filters as longs, panelMeta object, moved add button, removed old group settings, remove status from panel object elastic/kibana#281 from securingsincity/greenkeeper/sinon-4.0.1
• 935eba5 removed react from dependency
• e86b24b chore(package): update sinon to version 4.0.1

See the full diff

Package name: tar

The new version differs by 250 commits.

• 3e35515 4.4.18
• 52b09e3 fix: prevent path escape using drive-relative paths
• bb93ba2 fix: reserve paths properly for unicode, windows
• 2f1bca0 fix: prune dirCache properly for unicode, windows
• 9bf70a8 4.4.17
• 6aafff0 fix: skip extract if linkpath is stripped entirely
• 5c5059a fix: reserve paths case-insensitively
• fd6accb 4.4.16
• 53cea6e tests: run (and pass) on windows
• 166cfc0 fix: refactoring to pass tests on Windows
• ce5148e fix: refactoring to pass tests on Windows
• 3f2e2da fix: normalize paths on Windows systems
• e29a665 fix: properly prefix hard links
• fd2a38d chore: WriteEntry cleaner write() handling
• 7b2acc5 update deps
• 83bb22c WriteEntry backpressure
• 0dcc5b2 chore: track fs state on WriteEntry class, not in arguments
• adf3511 Avoid an unlikely but theoretically possible redos
• d688cad fix: properly handle top-level files when using strip
• ea6f254 unpack: keep path reservations longer
• b2a97e1 Address unpack race conditions using path reservations
• f0fe3aa basic path reservation system
• 843c897 4.4.15
• 46fe350 Remove paths from dirCache when no longer dirs

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic