[Snyk] Upgrade @octokit/rest from 18.5.5 to 18.12.0

[snyk-bot]

Snyk has created this PR to upgrade @octokit/rest from 18.5.5 to 18.12.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 24 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2021-10-07.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	375/1000 Why? CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-SIMPLEGET-2361683	375/1000 Why? CVSS 7.5	Proof of Concept
	Remote Code Execution (RCE) SNYK-JS-SHELLQUOTE-1766506	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	375/1000 Why? CVSS 7.5	No Known Exploit
	Information Exposure SNYK-JS-NODEFETCH-2342118	375/1000 Why? CVSS 7.5	No Known Exploit
	Denial of Service (DoS) SNYK-JS-JPEGJS-570039	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1243891	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @octokit/rest

• 18.12.0 - 2021-10-07
  

  18.12.0 (2021-10-07)

  Features

  • .actions.downloadWorkflowRunAttemptLogs(), .actions.getWorkflowRunAttempt(), .repos.generateReleaseNotes(), .checks.rerequestRun(). Graduate nebula, zzzax, switcheroo, baptiste previews. Removes defunkt /repos/{owner}/{repo}/actions/runs/{run_id}/retry endpoint. Renames methods to have consistent AuthenticatedUser() suffix, deprecates previous method names (#125) (4daa9f3)
• 18.11.4 - 2021-09-30
  

  18.11.4 (2021-09-30)

  Bug Fixes

  • removes defunkt endpoints: GET /repos/{owner}/{repo}/community/code_of_conduct, DELETE /reactions/{reaction_id}. encrypted_value and key_id parameters are required for .rest.actions.{createOrUpdateEnvironmentSecret,setSelectedReposForOrgSecret}(). access_token parameter is required for .rest.apps.deleteAuthorization(). Previews graduated: ant-man, flash, scarlet-witch, squirrel-girl (#122) (9c02e7d)
• 18.11.3 - 2021-09-30
  

  18.11.3 (2021-09-30)

  Bug Fixes

  • deps: bump minimal version of @ octokit/plugin-paginate-rest to v2.16.4 to prevent typescript compile errors (#120) (fca1907)
• 18.11.2 - 2021-09-27
  

  18.11.2 (2021-09-27)

  Bug Fixes

  • luke-cage preview graduated (#119) (38a823f)
• 18.11.1 - 2021-09-24
  

  18.11.1 (2021-09-24)

  Bug Fixes

  • typescript: graduate previews dorian, inertia, london, lydian, wyandotte (#116) (f1e2416)
• 18.11.0 - 2021-09-22
  

  18.11.0 (2021-09-22)

  Features

  • octokit.rest.repos.{enable,disable}LfsForRepo(), octokit.rest.repos.mergeUpstream({ owner, repo, branch }) (916a8bb)
• 18.10.0 - 2021-08-31
  

  18.10.0 (2021-08-31)

  Features

  • typescript: .packages.deletePackageForUser(), .packages.deletePackageVersionForUser(), .packages.restorePackageForUser(), .packages.restorePackageVersionForUser(), .secretScanning.listAlertsForOrg() (#105) (40aeaff)

  Bug Fixes

  • typescript: fix type for labels parameter in .issues.{add,set}Labels() (#105) (40aeaff)
• 18.9.1 - 2021-08-16
  

  18.9.1 (2021-08-16)

  Bug Fixes

  • deps: update dependency @ octokit/plugin-rest-endpoint-methods to v5.8.0 (1b9ca1e)
• 18.9.0 - 2021-08-03
  

  18.9.0 (2021-08-03)

  Features

  • typescript: allow_auto_merge parameter when creating / updating a repository. Search: owner in repository items may no longer be null (#95) (c26c4fe)
• 18.8.0 - 2021-08-02
  

  18.8.0 (2021-08-02)

  Features

  • .rest.repos.createAutolink(), .rest.repos.listAutolinks(), .rest.repos.getAutolink(), .rest.repos.deleteAutolink() (#94) (13df9e7)
• 18.7.2 - 2021-07-30
• 18.7.1 - 2021-07-23
• 18.7.0 - 2021-07-21
• 18.6.8 - 2021-07-20
• 18.6.7 - 2021-07-04
• 18.6.6 - 2021-06-30
• 18.6.5 - 2021-06-30
• 18.6.4 - 2021-06-29
• 18.6.3 - 2021-06-26
• 18.6.2 - 2021-06-24
• 18.6.1 - 2021-06-23
• 18.6.0 - 2021-06-12
• 18.5.6 - 2021-06-01
• 18.5.6-beta.1 - 2021-06-01
• 18.5.5 - 2021-05-28

from @octokit/rest GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs