[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • node_modules/eslint/node_modules/cross-spawn/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @commitlint/cli

The new version differs by 101 commits.

• 71f0194 v9.0.0
• 5bb6907 docs(readme): add install husky example ([Snyk] Security upgrade ava from 2.4.0 to 6.0.0 #1699)
• 0f0f95a chore: update dependency typescript to v3.8.2 ([Snyk] Fix for 1 vulnerabilities #1002)
• 890df29 chore: update dependency @ types/node to v12.12.28 ([Snyk] Security upgrade standard from 12.0.1 to 13.0.0 #1001)
• 6c9ab78 chore: update dependency @ types/jest to v25.1.3 ([Snyk] Security upgrade mocha from 2.5.3 to 4.0.0 #1000)
• 882e292 chore: update dependency ts-jest to v25.2.1 ([Snyk] Security upgrade codecov from 1.0.1 to 3.2.0 #999)
• c3eb1a7 fix: ignore empty commit messages [Snyk] Fix for 1 vulnerabilities #615 ([Snyk] Fix for 1 vulnerabilities #676)
• 8b394c9 feat(config-conventional): footer/body-max-line ([Snyk] Security upgrade airtap from 0.0.4 to 4.0.0 #436)
• 4443062 feat: add async promise based rules methods into lint ([Snyk] Security upgrade xo from 0.24.0 to 0.42.0 #976)
• 89168b8 chore: update typescript-eslint monorepo to v2.20.0 ([Snyk] Fix for 7 vulnerabilities #998)
• 9d14792 chore: update dependency husky to v4.2.3 ([Snyk] Security upgrade tap from 0.4.13 to 1.0.8 #996)
• 4ee307a fix: update dependency semver to v7.1.3 ([Snyk] Fix for 4 vulnerabilities #995)
• c7cfe37 chore: remove unused configs ([Snyk] Fix for 2 vulnerabilities #991)
• 0404c7d chore: update dependency @ types/node to v12.12.27 ([Snyk] Security upgrade airtap from 0.0.4 to 4.0.3 #994)
• 34c11b8 fix: incorrect use of when in getForcedCaseFn ([Snyk] Fix for 2 vulnerabilities #993)
• 6f80f70 chore: align required globby between packages ([Snyk] Security upgrade tap from 7.1.2 to 16.0.0 #992)
• f379dcc refactor: replace lodash/omit with spread ([Snyk] Fix for 1 vulnerabilities #988)
• d5c601f test: add missing test cases for ensure and is-ignored ([Snyk] Fix for 2 vulnerabilities #987)
• ec4af58 docs: update node version support ([Snyk] Fix for 1 vulnerabilities #986)
• f74e036 chore: upgrade execa to 3.4.0 ([Snyk] Fix for 1 vulnerabilities #984)
• c49a57c feat: passdown argv to lint command ([Snyk] Fix for 10 vulnerabilities #891)
• 01c451c test(config-lerna-scopes): add regression tests ([Snyk] Security upgrade tap from 14.11.0 to 16.0.0 #979)
• 21a91e7 test: eslint setup ([Snyk] Fix for 4 vulnerabilities #981)
• f88f00d fix(config-lerna-scopes): correct lerna in peerDependencies ([Snyk] Fix for 1 vulnerabilities #980)

See the full diff

Package name: eslint

The new version differs by 134 commits.

• a7985a6 6.0.0
• be74dd9 Build: changelog update for 6.0.0
• 81aa06b Upgrade: espree@6.0.0 (#11869)
• 5f022bc Fix: no-else-return autofix produces name collisions (fixes #11069) (#11867)
• ded9548 Fix: multiline-comment-style incorrect message (#11864)
• cad074d Docs: Add JSHint W047 compat to no-floating-decimal (#11861)
• 41f6304 Upgrade: sinon (#11855)
• 167ce87 Chore: remove unuseable profile command (#11854)
• c844c6f Fix: max-len properly ignore trailing comments (fixes #11838) (#11841)
• 1b5661a Fix: no-var should not fix variables named 'let' (fixes #11830) (#11832)
• 4d75956 Build: CI with Azure Pipelines (#11845)
• 1db3462 Chore: rm superfluous argument & fix perf-multifiles-targets (#11834)
• c57a4a4 Upgrade: @ babel/polyfill => core-js v3 (#11833)
• 65faa04 Docs: Clarify prefer-destructuring array/object difference (fixes #9970) (#11851)
• 81c3823 Fix: require-atomic-updates reports parameters (fixes #11723) (#11774)
• aef8ea1 Sponsors: Sync README with website
• 4f48f5a 6.0.0-rc.0
• 6bad650 Build: changelog update for 6.0.0-rc.0
• f403b07 Update: introduce minKeys option to sort-keys rule (fixes #11624) (#11625)
• 87451f4 Fix: no-octal should report NonOctalDecimalIntegerLiteral (fixes #11794) (#11805)
• e4ab053 Update: support "bigint" in valid-typeof rule (#11802)
• e0fafc8 Chore: removes unnecessary assignment in loop (#11780)
• 20908a3 Docs: removed '>' prefix from from docs/working-with-rules (#11818)
• 1c43eef Sponsors: Sync README with website

See the full diff

Package name: jest

The new version differs by 250 commits.

• 75006e4 v29.0.0
• 7c82a9f chore: update jest-watch-typeahead again
• 352ff29 chore: update changelog for release
• 33ad8c3 docs: Jest 29 blog post (#13103)
• dda77e5 docs: collapse 28.0 and 28.1 docs (#13104)
• c0dc84c chore: update jest-watch-typeahead
• 05f6217 fix: support deep CJS re-exports when using ESM (#13170)
• 490fd88 chore: update yarn (#13169)
• 98936a2 docs: Update Enzyme links to use new URL (#13166)
• 187566a feat(pretty-format): allow to opt out from sorting object keys with `compareKeys: null` (#12443)
• ae2bed7 chore: tweak regex used in e2e tests (#13129)
• 8c56d74 docs: Update Configuration.md for added special notes on usage scenarios for pnpm. (#13115)
• fb1c53d feat(jest-config)!: remove undocumented `collectCoverageOnlyFrom` option (#13156)
• 075b489 fix: ignore `EISDIR` when resolving symlinks (#13157)
• 3bef02e feat(@ jest/test-result, @ jest/types)!: replace `Bytes` and `Milliseconds` types with `number` (#13155)
• 4def94b v29.0.0-alpha.6
• 0f00d4e fix: replace non-CLI `rimraf` usage (#13151)
• 6a90a2c fix: Allow updating inline snapshots when test includes JSX (#12760)
• 983274a feat: Let `babel` find config when updating inline snapshots (#13150)
• d2ff18a chore: make prettierPath optional in `SnapshotState` (#13149)
• 7d8d01c feat(circus): added each to failing tests (#13142)
• a5b52a5 chore(types): separate MatcherContext, MatcherUtils and MatcherState (#13141)
• 79b5e41 chore: get rid of peer dep warning in website
• 812763d chore: enable 'no-duplicate-imports' (#13138)

See the full diff

Package name: lint-staged

The new version differs by 77 commits.

• 072924f Merge pull request [Snyk] Fix for 1 vulnerabilities #724 from okonet/beta
• f9e128d docs: Improve config section documentation
• e1cd6ba Merge branch 'master' into beta
• af58e6e docs: refine examples formatting ([Snyk] Security upgrade jest from 25.5.4 to 27.0.0 #767)
• 82bee06 Merge branch 'master' into beta
• af4604a docs: Improve documentation on the --debug flag ([Snyk] Security upgrade karma from 1.7.1 to 5.0.8 #766)
• bd3721f Merge branch 'master' into beta
• 8bdeec0 feat: throw error to prevent empty commits unless --allow-empty is used ([Snyk] Security upgrade lerna from 3.22.1 to 6.5.0 #762)
• 2cd1d37 docs: add funding property to package.json linking to Open Collective ([Snyk] Security upgrade mocha from 2.3.4 to 4.0.0 #763)
• 056723b docs: Document how to deal with eslintignore warnings ([Snyk] Security upgrade nyc from 13.3.0 to 15.0.0 #759)
• 30b4809 fix: error handling skips dropping backup stash after internal git errors
• da22cf2 fix: handle git MERGE_* files separately; improve error handling
• 20d5c5d feat: support async function tasks
• f2a2702 Merge branch 'master' into beta
• 1b64239 fix: fail with a message when backup stash is missing
• 9913bb2 test: do not write file into repo during test run
• d091f71 fix: correctly recover when unstaged changes cannot be restored
• f8ddfc2 fix: restore metadata about git merge before running tasks
• 22ba124 refactor: minor optimizations
• f3ae378 fix: better workaround for git stash --keep-index bug
• 33b9752 docs: improve example perfomance by returning single command ([Snyk] Security upgrade tap from 12.7.0 to 15.0.0 #753)
• 083b8e7 fix: automatically add modifications only to originally staged files
• 814b9df feat: bump Node.js version dependency to at least 10.13.0 ([Snyk] Fix for 1 vulnerabilities #747)
• 0eedacd test: remove non-working concurrency tests for now

See the full diff

Package name: rimraf

The new version differs by 40 commits.

• 3b6b098 4.0.0
• e0cffea ci: reduce workload even more
• 0e6646d ci: remove unnecessary lint filter
• 546e017 update action versions
• 6d88a65 tone down benchmark intensity
• 842a8d2 fix benchmark workflow yaml
• 1b91697 chore: add copyright year to license
• 08bbb06 rewrite in TS, export hybrid, update changelog, docs
• 1b3f46e drop support for node versions below 14
• 2e1f003 gh actions workflow for benchmarks
• 52f9370 tests for retry-busy behavior
• 188e3ed don't test on very old node versions
• d1d5495 test for fix-eperm
• e7501cd prettier formatting
• 40f64ec windows: only fall back to move-remove when absolutely necessary
• b6f7819 update tap
• 99496cd test: run posix test on windows, why not?
• 51d43c1 benchmarks
• 6b8aa29 doc: correct os.tmp default
• 4b228c9 do not ever actually try to rmdir /
• 2442655 consolidate all the spellings of 'opt' into one
• d4eec2e add cli script
• 0c82d74 accept strings, arrays of strings, and no other types
• ad4f2db Do not rimraf /, override with preserveRoot:false

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.