[Snyk] Fix for 6 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-451341	No
	Insecure use of /tmp folder npm:cli:20160615	No
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	No
	Denial of Service (DoS) npm:mem:20180117	Yes
	Regular Expression Denial of Service (DoS) npm:minimatch:20160620	No
	Regular Expression Denial of Service (ReDoS) npm:ms:20170412	No

Commit messages

Package name: body-parser

The new version differs by 53 commits.

• b2659a7 1.18.2
• 6339bf7 perf: remove argument reassignment
• d5f9a4a deps: [email protected]
• d041563 1.18.1
• 9efa9ab deps: content-type@~1.0.4
• f1ef6cc deps: [email protected]
• e438db5 deps: [email protected]
• 15c3585 deps: [email protected]
• adfa01c 1.18.0
• 0632e2f Include the "type" property on all generated errors
• b8f97cd Include the "body" property on verify errors
• c659e8a tests: add test for err.body on json parse error
• 4e15325 tests: reorganize json error tests
• 5bd7ed5 tests: reorganize json strict option tests
• 3cb380b tests: store server on mocha context instead of variable shadowing
• 29c8cd0 docs: document too many parameters error
• 7b9cb14 Use http-errors to set status code on errors
• 29a27f1 docs: fix typo in jsdoc comment
• 448dc57 Fix JSON strict violation error to match native parse error
• 87df7e6 tests: add leading whitespace strict json test
• 1841248 deps: [email protected]
• e666dbe deps: http-errors@~1.6.2
• c2a110a deps: [email protected]
• a1a2e31 build: [email protected]

See the full diff

Package name: marked

The new version differs by 123 commits.

• 26ae990 Release v0.7.0 (#1519)
• 204926c 0.7.0
• 15a6b4f 🗜️ minify [skip ci]
• 0ee3aa9 Merge pull request #1515 from UziTech/link-label-security
• cc9efe4 🗜️ minify [skip ci]
• e987a4d fix tests
• ded5e24 update link
• 7faa999 add test
• ac1e57c use correct options in specs (#1511)
• 63935f9 🗜️ minify [skip ci]
• 0276ad7 silent tests
• 1f4c17f Merge branch 'master' into spec-options
• 6bae3a2 Link parenthesis (#1509)
• 2a1bbed Sanitize hardening (#1504)
• 59ec6fb fix calculation
• 2b63f3b add test
• b78e498 update deprecation warning
• 44dbeeb remove tables option
• d2e85d9 fix fences
• 7ed2692 fix testing with node 4
• 7bc6e3f add comment
• f478dfb move tables to gfm
• 8ccc1f1 improve paragraph
• ba2eedd improve lheading

See the full diff

Package name: tap

The new version differs by 19 commits.

• 7a20037 12.0.2
• cf95e01 bump nyc and standard
• 7f54124 Bump deps for security and bugfixes
• f323cdc 12.0.1
• 6745ecf fix test regression in node <10
• 39f73f9 docs(coverage): browser launching details
• 3336514 Fix interse typo in asserts docs
• c1070a7 Add twing to the 100 club
• 51ae4f2 Do not run coverage report if ended with a signal
• d5f7b12 12.0.0
• 5de8801 Update tsame and tmatch, resolve request security vuln
• a62dfcf 11.1.5
• d930902 upgrade deps to avoid security warnings
• fae29d0 make tests pass in node v10
• f9d64f6 don't include internal filenames in snapshots
• 5303417 avoid custom inspect deprecation warning
• e374e7c add dotenv to the tap 100 list
• 8635bfb 11.1.4
• 3346fc1 Don't require argv file list if specified in taprc

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic