[Snyk] Upgrade resolve from 1.8.1 to 1.22.3

[jakeherp]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade resolve from 1.8.1 to 1.22.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 29 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2023-04-14.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: resolve

• 1.22.3 - 2023-04-14
  
  • [Refactor] deprecated lib/core.js now uses data from is-core-module also
  • [Deps] update is-core-module
• 1.22.2 - 2023-04-05
  
  • [Refactor] deprecated lib/core.js now uses is-core-module
  • [meta] cp core.json on prepack instead of prepublishOnly
  • [Deps] update is-core-module
  • [Dev Deps] update @ ljharb/eslint-config, aud, tape, array.prototype.map
• 1.22.1 - 2022-06-17
  
  • [Fix] support windows virtual drive paths (#284)
  • [Deps] update is-core-module
  • [meta] use npmignore to autogenerate an npmignore file
  • [meta] do not publish appveyor.yml
  • [Dev Deps] update eslint, @ ljharb/eslint-config, tape
  • [Test] add tests for "main": false
  • [Tests] fix tests on node v12.0-12.2
  • [Test] add some sync coverage
  • [Test] fix incorrect require.resolve paths logic; enable these tests
  • [Tests] avoid tests breaking on node 11.11 - 11.13
• 1.22.0 - 2022-01-22
  
  • [New] add default support for paths to include $HOME/.node_{modules,libraries} (#273)
  • [Deps] update is-core-module
• 1.21.1 - 2022-01-21
  
  • [Fix] bin/resolve: allow npx resolve usage
  • [Dev Deps] update eslint, @ ljharb/eslint-config, aud, tape
  • [Tests] add tests comparing resolve.sync to require.resolve
• 1.21.0 - 2022-01-03
  
  • [New] add top-level granular entry points
  • [New] add simple CLI util (#94)
  • [Refactor] sync: Do not throw on missing files in isFile/isDirectory (#256)
  • [Deps] update is-core-module, path-parse
  • [readme] pull in changes from default branch
  • [readme] remove defunct travis badge; update badges
  • [meta] backport FUNDING.yml
  • [meta] skip deleted files in eclint check
  • [meta] use prepublishOnly, for npm 7+
  • [actions] reuse common workflows
  • [actions] pull in workflows from default branch
  • [actions] use node/install instead of node/run; use codecov action
  • [Tests] backport appveyor.yml
  • [Tests] add coverage for a malformed package.json
  • [Tests] only run eclint on intended files
  • [Tests] add coverage for absolute paths
  • [Tests] invalid_main fixture had an invalid "name" field
  • [Dev Deps] update eslint, @ ljharb/eslint-config, array.prototype.map, safe-publish-latest, tape
  • [Dev Deps] update eslint, @ ljharb/eslint-config, aud, tape
• 1.20.0 - 2021-02-11
  
  • [New] add readPackage and readPackageSync (#236)
  • [Deps] update is-core-module
  • [meta] do not publish github action workflow files
  • [meta] create SECURITY.md
  • [meta] do not fail when aud is running and deps are not present
  • [meta] fix indentation in lib/core.json
  • [Dev Deps] update eslint, @ ljharb/eslint-config, array.prototype.map, aud, tape
  • [Tests] skip npm ls check on older nodes
• 1.19.0 - 2020-11-10
  
  • [New] sync/async: add 'includeCoreModules' option (#233)
  • [readme] Add possible error types (#232)
  • [Deps] update is-core-module
  • [Dev Deps] update aud, eslint
  • [meta] add Automatic Rebase and Require Allow Edits workflows
  • [Tests] comment out node 15 in appveyor; it’s not available yet
  • [Tests] add node 15 to appveyor, fix "latest npm" logic
  • [Tests] migrate tests to Github Actions
• 1.18.1 - 2020-10-19
• 1.18.0 - 2020-10-19
• 1.17.0 - 2020-04-22
• 1.16.1 - 2020-04-17
• 1.16.0 - 2020-04-15
• 1.15.1 - 2020-02-05
• 1.15.0 - 2020-01-22
• 1.14.2 - 2020-01-07
• 1.14.1 - 2019-12-19
• 1.14.0 - 2019-12-18
• 1.13.1 - 2019-11-26
• 1.13.0 - 2019-11-25
• 1.12.3 - 2019-11-26
• 1.12.2 - 2019-11-22
• 1.12.1 - 2019-11-22
• 1.12.0 - 2019-08-01
• 1.11.1 - 2019-06-03
• 1.11.0 - 2019-05-15
• 1.10.1 - 2019-04-24
• 1.10.0 - 2019-01-21
• 1.9.0 - 2018-12-17
• 1.8.1 - 2018-06-17

from resolve GitHub release notes

Commit messages

Package name: resolve

• d3332a2 v1.22.3
• 5e3fbba [Deps] update `is-core-module`
• 122bb64 [Refactor] deprecated `lib/core.js` now uses data from `is-core-module` also
• c2f9ce2 v1.22.2
• ed8f81b [Refactor] deprecated `lib/core.js` now uses `is-core-module`
• 1454fdf [Dev Deps] update `@ ljharb/eslint-config`, `aud`, `tape`
• 531b6f6 [Dev Deps] update `array.prototype.map`
• 39c7143 [meta] cp core.json on prepack instead of prepublishOnly
• 04ca704 [Deps] update `is-core-module`
• 6960e34 [Dev Deps] update `aud`, `tape`
• 94978fe [Deps] update `is-core-module`
• 8eea601 v1.22.1
• cf1d4cc [Test] add tests for `"main": false`
• 3ab1da8 [Tests] fix tests on node v12.0-12.2
• e9e764c [Test] add some `sync` coverage
• 232bff4 [Test] fix incorrect `require.resolve` paths logic; enable these tests
• f5cf55d [Tests] avoid tests breaking on node 11.11 - 11.13
• 0008477 [Fix] support windows virtual drive paths
• d06a8dc [meta] use `npmignore` to autogenerate an npmignore file
• d171f96 [Dev Deps] update `@ ljharb/eslint-config`
• 412518e [Deps] update `is-core-module`
• 761e1d6 [Dev Deps] update `eslint`, `@ ljharb/eslint-config`, `tape`
• 134d1fe [meta] do not publish `appveyor.yml`
• cd52b64 v1.22.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs