[Snyk] Fix for 1 vulnerabilities

[street-lit]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: babel-loader

The new version differs by 13 commits.

• 321852e Merge branch 'release/6.0.0'
• e7565ee Add @ malyw 's guide to upgrade babel
• 862b7b1 Update travis badge url
• ff3bc7a Update dependencies.
• fc2bfe4 Merge branch 'shinnn-travis-ci' into develop
• a6f3fc0 Change options to query. Increase timeout interval
• 94d6308 Merge remote-tracking branch 'werk85/master' into develop
• f4e40c5 README updated
• 0823f6a Upgraded to Babel 6
• bb110a8 set up Travis CI
• f84ef50 Merge branch 'develop' of github.com:babel/babel-loader into develop
• 719eb70 Merge branch 'hotfix/5.3.1' into develop
• 6b33020 Merge branch 'release/5.3.0' into develop

See the full diff

Package name: standard

The new version differs by 232 commits.

• 39a54d3 6.0.0
• 3afcc2c CHANGELOG.md for 6.0.0
• 0b71b07 [email protected]
• 4b725bd lock to latest deps
• 0a9a77b [email protected]
• 48fb60c add eslint-config-standard-jsx
• 8802ea7 run standard on ourselves
• 6fbd66d test: add --disabled flag to run disabled tests
• 910eaa5 depend on eslint-plugin-promise
• f0d1983 Remove React-specific rules (fixes #351)
• 8a095f1 readme: add one more gotcha
• fbb66c4 package.json
• 44b551a remove one more usage of `win-spawn`
• f1ad085 eslint@^2.0.0-rc.0
• 1cdd9f5 clone test: ignore git output
• 22971ce use cross-spawn-async
• 3e2001d add standard-format instructions to --format
• 60d4a87 install babel in dev-deps for test repos that need it
• 134de73 use standard-packages@3
• f149307 cleanup
• 3c86923 remove standard-format. fixes #340
• 9b3a14d test: add --quiet option
• c59a55c test: test 500+ standard packages
• cb625b4 test: add command line --help test

See the full diff

Package name: stylus-loader

The new version differs by 4 commits.

• bb87204 2.0.0
• f1619a9 Add 2.0.0 to release history
• e8b2d8a Revert "Revert "Remove stylus from direct dependencies""
• f34f756 Add 1.6.1 to release history

See the full diff

Package name: surge

The new version differs by 134 commits.

• 86f3b43 changes default message on card input
• 693f773 Merge branch 'onfido-improvement/clean-dependencies'
• e1a474a Fixed insecure dev dependency nixt
• 826926d removed unused du dependency
• b6d0794 Fixed versions for inquirer and mocha in package.json
• a81e5b5 increased test timeouts to make them pass
• 129b396 Bumped insecure dependencies
• 1b947a5 Merge branch 'master' of github.com:sintaxi/surge
• aca262d updates project output
• 4044eb8 updates tests
• bdb46ab removes deprecated libs
• 27993f0 adds plan for list
• bf65219 changes tar
• 2aa8cb8 cleanup helpers & formatting
• 8d95b3a adds version to account request
• 01544cc resets ssl flow
• 6d8f225 improves tests
• d52c010 improves list output
• 945a7cf shows auth info
• 2329738 repairs basic tests
• 72cd482 adds time ago in words
• 2c138ba adjusted formatting
• 2c5a35b working upgrade flow with edge client
• 3b24a2b much improved plan selector and flow

See the full diff

Package name: yeticss

The new version differs by 90 commits.

• 8f796e8 Merge pull request #118 from andyet/v7-4-0
• f152f0e eliminate error when building colors.jade
• 2b92ce2 improve button documentation
• 1023c98 update version in package.json
• 7184536 update deps
• cf408fe Update dependencies
• 4a48847 small button padding
• 1de2a0d enable all button variations to work in button-group
• 9ebd28e Grid tweaks
• 7d19ff2 navigation dropdown width fix
• 66a8792 ignore DS_Store
• dfdbd7f Merge pull request #116 from andyet/lf/remove-lift-nsp
• a11e539 remove other logos
• 23deb1f remove lift and nsp logos, logo cleanup
• 7dfdce4 fix(navigation.styl) navigation dropdown width fix
• fcf3b79 chore(docs) document .grid-flex-cell-centered
• 0652983 chore(gitignore) add package-lock.json to .gitignore
• 75f8414 feature(grid.styl) Allow for centering of grid cells
• 11578bc [fix] enable all button variations to work in button-group
• a341ba0 [dist] update jade version
• 4e4d1d7 [ux] small button padding
• ea18475 [dis] update dependencies
• 6da1a7b [dist] ignore package-lock
• 2d26096 Add webpack 2 details

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)