[Snyk] Upgrade pkg from 4.4.9 to 4.5.1

[snyk-bot]

Snyk has created this PR to upgrade pkg from 4.4.9 to 4.5.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 3 months ago, on 2021-03-26.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	265/1000 Why? CVSS 5.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: pkg

• 4.5.1 - 2021-03-26
  
  • Added documentation about NODE_OPTIONS: #996
  • Bootstrap: adjust for internalModuleReadJSON of newer Node.js: a20111e
  • Bootstrap: support both old and new internalModuleReadJSON: 9598890
  • Chore: add ci, stale workflows and dependabot: #1074
  • Set up and run Prettier over entire codebase.: #1076
  • Drop dependabot.yml in favor of repo settings.: #1092
  • Remove incorrect \?\ prefix on windows and fs.promises fixes: #1095
  • Upgrade ESLint + move to eslint-config-airbnb-base.: #1088
  • Promisified exec and execFile should return a promise with ChildProcess instance attached: #880
  • Chore: make pkg-fetch dep static (temporarily).: #1100
  • Add pkg.outputPath as a configuration option.: #574

  Credits

  Huge thanks to @ SnakeDrak, @ robertsLando, @ hipstersmoothie, @ onip, and @ Symbitic for helping!

• 4.5.0 - 2021-03-22
  
  • Branding change (#939)
  • Update badges in README (#949)
  • update tests test for node 14 CI (#977)
  • Bump lodash from 4.17.15 to 4.17.19 (#945)
  • Added environment var section on Readme (#684)
  • Add missing stat.isSocket (#720)
  • Fix configuration for node-notifier (#1021)
  • Add support for Node native addons (#837)
  • docs: MAKE_JOB_COUNT and PKG_IGNORE_TAG env var (#1053)
  • Bugfix for fs.readdir(), fs.readdirSync() (#992)
  • Replace deprecated assert.equal and assert.deepEqual. (#1063)
  • Update ZEIT to Vercel in package.json. (#1064)
  • Add cross-platform support for dot-node files. (#1066)
• 4.4.9 - 2020-06-28
  

  4.4.9

from pkg GitHub release notes

Commit messages

Package name: pkg

• cceb78a Update release script. ([Snyk] Security upgrade xo from 0.24.0 to 0.42.0 #1102)
• c332fbb 4.5.1
• f08d083 Add pkg.outputPath as a configuration option. ([Snyk] Fix for 1 vulnerabilities #574)
• 165fcd5 chore: make pkg-fetch dep static (temporarily). ([Snyk] Fix for 1 vulnerabilities #1100)
• 9bb4f70 promisified exec and execFile should return a promise with ChildProcess instance attached ([Snyk] Security upgrade webpack from 1.15.0 to 2.2.0 #880)
• e463acc Upgrade ESLint + move to `eslint-config-airbnb-base`. ([Snyk] Fix for 1 vulnerabilities #1088)
• 1c219c8 Remove incorrect \\?\ prefix on windows and fs.promises fixes ([Snyk] Fix for 1 vulnerabilities #1095)
• 663f3f0 Drop dependabot.yml in favor of repo settings. ([Snyk] Fix for 1 vulnerabilities #1092)
• ddf5217 Set up and run Prettier over entire codebase. ([Snyk] Fix for 1 vulnerabilities #1076)
• 31e8bf7 chore: add ci, stale workflows and dependabot ([Snyk] Fix for 1 vulnerabilities #1074)
• 9598890 bootstrap: support both old and new internalModuleReadJSON
• a20111e bootstrap: adjust for internalModuleReadJSON of newer Node.js
• 7423b28 Added documentation about NODE_OPTIONS ([Snyk] Security upgrade tap from 0.4.13 to 1.0.8 #996)
• a9df2bc 4.5.0
• 3b947c8 Add cross-platform support for dot-node files. ([Snyk] Fix for 2 vulnerabilities #1066)
• 55cda5f Update ZEIT to Vercel in package.json. ([Snyk] Fix for 1 vulnerabilities #1064)
• 9024c09 Replace deprecated `assert.equal` and `assert.deepEqual`. ([Snyk] Fix for 1 vulnerabilities #1063)
• c929f4a Bugfix for fs.readdir(), fs.readdirSync() ([Snyk] Security upgrade tap from 7.1.2 to 16.0.0 #992)
• 7a9257a docs: MAKE_JOB_COUNT and PKG_IGNORE_TAG env var ([Snyk] Fix for 1 vulnerabilities #1053)
• a56886b Add support for Node native addons ([Snyk] Fix for 1 vulnerabilities #837)
• d33b1c5 Fix configuration for node-notifier ([Snyk] Fix for 4 vulnerabilities #1021)
• c7deaea Add missing stat.isSocket ([Snyk] Security upgrade xo from 0.24.0 to 0.53.0 #720)
• d6f1d7c Added environment var section on Readme ([Snyk] Security upgrade nyc from 14.1.1 to 15.0.0 #684)
• 52b4933 Bump lodash from 4.17.15 to 4.17.19 ([Snyk] Security upgrade xo from 0.24.0 to 0.42.0 #945)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs