fix(deps): update path-to-regex COMPASS-8282

[mabaasit]

Currently there are many tickets on FR dashboard with this vulnerability (from COMPASS-8282 to COMPASS-8287).

Description

Checklist

• New tests and/or benchmarks are included
• Documentation is changed or added
• I have signed the MongoDB Contributor License Agreement (https://www.mongodb.com/legal/contributor-agreement)

Motivation and Context

• Bugfix
• New feature
• Dependency update
• Misc

Open Questions

Dependents

Types of changes

• Backport Needed
• Patch (non-breaking change which fixes an issue)
• Minor (non-breaking change which adds functionality)
• Major (fix or feature that would cause existing functionality to change)

[gribnoysup]

All the tickets mention that we need to update to version 8:

File: packages/compass-query-bar/package.json
Upgrade path-to-regexp to version 8.0.0 or higher.
The minimum required version is 8.0.0.

And I see that this patch updates to latest 1 and latest 6. Will this be enough to resolve these issues?

[mabaasit]

All the tickets mention that we need to update to version 8:

File: packages/compass-query-bar/package.json
Upgrade path-to-regexp to version 8.0.0 or higher.
The minimum required version is 8.0.0.

And I see that this patch updates to latest 1 and latest 6. Will this be enough to resolve these issues?

Yeah this took me long to figure out, but they backpatched this fix to other major version as well, 6.3.0, 3.3.0, 1.9.0

[gribnoysup]

Gotcha, thanks for the context!