[Snyk] Security upgrade log4js from 2.5.3 to 2.6.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: log4js

The new version differs by 34 commits.

• 6598898 2.6.0
• 5056695 chore: bumped mailgun version
• e2cc585 chore: bumped mailgun version
• 7d82f82 Merge branch 'jdell64-log4js-update-#706'
• 5cb96dd chore: fixed up coverage due to new tap version
• d7f788c chore: update deps
• 3a5389a Merge branch 'master' of https://github.com/log4js-node/log4js-node
• 797c4a9 fix(#706): fixes security vulns
• 26d4af8 fix #702 - broken logstashUDP link
• 3cb9337 chore: pinned version of streamroller to 0.7.0, avoid bug in 0.8.2
• 3409541 Merge pull request #701 from log4js-node/sighup-leak
• e0d4f5d test: bump up timeout on sighup test to make it more reliable maybe
• 2c94c6e fix: #700
• 65685a2 Merge pull request #697 from log4js-node/mailgun-deprecation
• 7f65f51 chore: deprecated the mailgun appender
• d9097e9 Merge pull request #682 from log4js-node/deprecate-logstash
• a376f63 chore: deprecated logstashUDP
• 178e95e Merge pull request #678 from log4js-node/deprecate-hipchat
• 35aa894 chore: deprecated hipchat appender
• 7a005a4 docs: clarified util.format usage
• 1cee342 Merge pull request #677 from alex-sherwin/feature/docs-util-format-blurb-675
• dae2c0a fixes #675 - added docs blurb about delegation to util.format
• 2c75220 Merge pull request #673 from log4js-node/stacktrace-bug
• a901861 fix(#671): fixes serialisation of errors with properties

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution