[Snyk] Fix for 1 vulnerabilities

[CentralIntel]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • script/package.json
  • script/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: npm

The new version differs by 250 commits.

• 30a9844 7.21.0
• 0b2cd9d update AUTHORS
• 06461ec docs: changelog for v7.21.0
• 771a1cb chore(tests): fix snapshots
• 71cdfd8 [email protected]
• 94f92de [email protected]
• 7ac621c [email protected]
• 218caca [email protected]
• ff6626a fix(docs): update npm-publish access flag info
• b6f40b5 [email protected]
• e9e5ee5 @ npmcli/[email protected]
• 991a3bd [email protected]
• f077724 [email protected]
• 68a19bb fix(error-message): look for er.path not er.file
• ff34d6c feat(cache): initial implementation of ls and rm
• 8183976 [email protected]
• df57f0d @ npmcli/[email protected]
• 487731c fix(logging): sanitize logged argv
• 7a58264 chore(ci): check that docs are up to date in ci
• 22f3bbb chore(docs): add more 'autogenerated' comments
• 4314490 fix(docs): revert auto-generated portion of docs
• 32e88c9 fix(did-you-mean): switch levenshtein libraries
• 59b9851 7.20.6
• 2591e67 update AUTHORS

See the full diff

Package name: stylelint

The new version differs by 240 commits.

• 997a618 Prepare 9.7.0
• ee9b8c2 Fix processors docs (Add overlay decorations to text editor API atom/atom#3747)
• be24df2 Update postcss-jsx (Document sort params on atom.io package list atom/atom#3745)
• 6e04323 Added stylelint-selector-no-empty in plugins list (Use package.json engine field to prevent package update or installation atom/atom#3741)
• 768818d Update CHANGELOG.md
• 60c7edd Fix SyntaxError when an empty string is used for a rule's custom message (First project in a newly opened Atom does not open correctly atom/atom#3743)
• 0d35ec6 Fix ESLint error
• 5f995d4 Update CHANGELOG.md
• d080a87 Allow global installed configuration (editor should have a margin-bottom of 100% screen height atom/atom#3642)
• 0d62386 Update CHANGELOG.md
• 857d95f Fix false positives for functional psuedo-classes in selector-max-specificity (Tab key stopped working atom/atom#3711)
• ff5ea0d chore(package): update remark-cli to version 6.0.0 (Adjust font size using Control key with Mouse Scroll Wheel. atom/atom#3737)
• 0fb8b6d Update eslint-config-stylelint (Atom crashes on css.scss file save with Linter atom/atom#3733)
• 8fa9b87 Fix error in tests (Make command registry backward compatible atom/atom#3731)
• 7c14a0e Update CHANGELOG.md
• 62feb43 Add autofix to unit-case rule (Atom adds new line on save. atom/atom#3725)
• 80abeac Update CHANGELOG.md
• 841eff3 Add autofix to selector-descendant-combinator-no-non-space (Support variation sequences atom/atom#3565)
• b639725 Update CHANGELOG.md
• 0180dc5 Add autofix to media-feature-parentheses-space-inside (Toggle-soft-wrap command is broken atom/atom#3720)
• 5d70ec8 Update CHANGELOG.md
• 9878260 Update to postcss-less@3 (Packages flicker when in the settings view in 0.133, Mac OS X atom/atom#3687)
• 87e1ee7 Update flow-bin to the latest version 🚀 (Config gets stuck to default if config.cson has a syntax error atom/atom#3715)
• 7e850b4 Fix failing appveyor test (Unable to rename project's root folder in tree view (Win7) atom/atom#3714)

See the full diff

Package name: yargs

The new version differs by 250 commits.

• a6e67f1 chore(release): 13.2.4
• fc13476 chore: update standard-verison dependency
• bf46813 fix(i18n): rename unclear 'implication failed' to 'missing dependent arguments' (Incrementally load packages with activation events atom/atom#1317)
• a3a5d05 docs: fix a broken link to MS Terminology Search (Attempting to launch atom while it's updating should give me a nice message atom/atom#1341)
• b4f8018 build: add .versionrc that hides test/build
• 0c39183 chore(release): 13.2.3
• 08e0746 chore: update deps (Add the ability to cancel project.scan atom/atom#1340)
• 843e939 docs: make `--no-` boolean prefix easier to find in the docs (Provide a way to trigger a check for available updates. atom/atom#1338)
• 84cac07 docs: restore removed changelog of v13.2.0 (Fix mini editor leak atom/atom#1337)
• b20db65 fix(deps): upgrade cliui for compatibility with latest chalk. (The cursor's really hard to see when it's to the left of a matched search term. It's pretty hard to atom/atom#1330)
• c294d1b test: accept differently formatted output (Run atom CI on windows atom/atom#1327)
• ac3f10c chore: move .hbs templates into .js to facilitate webpacking (Handle native commands in render process atom/atom#1320)
• 0295132 fix: address issues with dutch translation (cmd-w shouldn't be able to close the tree-view. atom/atom#1316)
• 9f2468e doc: clarify parserConfiguration object structure (Add clean script atom/atom#1309)
• e7f2937 chore(release): 13.2.2
• edd0bb5 test: correct test description
• 03a9523 chore: forgoing dropping Node 6 until yargs@14 (Common core commands to workspaceView atom/atom#1308)
• 14920d1 docs: remove --save option as it isn't required anymore (Text Aliasing atom/atom#1301)
• 545c7f1 test: slightly reworded one test
• 4375680 chore(release): 13.2.1
• dfcaa68 test: slight edit to test wording
• 3180224 fix: add zsh script to files array
• 0a96394 fix: support options/sub-commands in zsh completion
• 48249a2 chore(release): 13.2.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.