[Snyk] Security upgrade mongodb-schema from 8.2.2 to 9.0.0

[dtrunley-snyk]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	Yes	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-LODASH-567746	Yes	Proof of Concept
	704/1000 Why? Has a fix available, CVSS 9.8	Prototype Pollution SNYK-JS-LODASH-590103	Yes	No Known Exploit
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	579/1000 Why? Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	Yes	No Known Exploit
	434/1000 Why? Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	Yes	No Known Exploit
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mongodb-schema

The new version differs by 38 commits.

• 01d70e2 9.0.0
• f4147ea Update package-lock.json
• c4e8dba Bump lodash from 4.17.20 to 4.17.21 ([Snyk(Unlimited)] Upgrade from thebespokepixel/string to thebespokepixel/string #149)
• 983b2d1 Bump cli-table from 0.3.4 to 0.3.5 ([Snyk(Unlimited)] Upgrade sgr-composer from 0.5.0 to 0.5.3 #151)
• a1f3342 Bump mocha from 8.3.0 to 8.3.2 ([Snyk(Unlimited)] Upgrade truwrap from 0.8.1 to 0.8.4 #152)
• 88b20c2 Reduce the usage of lodash (round 2) ([Snyk(Unlimited)] Upgrade node-uuid from 1.4.0 to 1.4.8 #145)
• 33e0f51 Update Github workflow location
• 68a401b Added github workflow to exec. unit tests ([Snyk(Unlimited)] Upgrade qs from 0.0.6 to 0.6.6 #144)
• beb4387 Bump mocha from 3.5.3 to 8.2.1 ([Snyk(Unlimited)] Upgrade debug from 2.0.0 to 2.6.9 #124)
• d73f838 Added promise support for library ([Snyk(Unlimited)] Upgrade from thebespokepixel/es-tinycolor to thebespokepixel/es-tinycolor #140)
• 39af582 End support for legacy Node.js versions 🩺 ([Snyk(Unlimited)] Upgrade sgr-composer from 0.5.0 to 0.5.3 #136)
• 17bbff4 Bump mongodb from 3.5.2 to 3.5.3 ([Snyk] Upgrade qs from 0.0.6 to 0.6.6 #84)
• 21a2fc7 Bump mongodb-js-precommit from 2.2.0 to 2.2.1 ([Snyk] Upgrade qs from 0.0.6 to 0.6.6 #82)
• 8997b3e Bump debug from 2.6.9 to 4.1.1 ([Snyk-local] Fix for 1 vulnerable dependencies #68)
• 915ba85 build(deps): Bump mongodb-ns from 2.0.0 to 2.2.0 ([Snyk] Fix for 13 vulnerable dependencies #79)
• b6e367a build(deps-dev): [Security] Bump bson from 0.5.7 to 1.0.5 ([Snyk] Fix for 3 vulnerable dependencies #77)
• 069b051 build(deps): Bump stats-lite from 2.1.1 to 2.2.0 ([Snyk-local] Fix for 1 vulnerable dependencies #70)
• ecdbdf0 build(deps): Bump ms from 0.7.3 to 2.1.2 ([Snyk-local] Fix for 1 vulnerable dependencies #66)
• 2f41b46 Bump mongodb-js-precommit from 2.0.0 to 2.2.0 ([Snyk] Fix for 13 vulnerable dependencies #71)
• e06e39a chore(deps): Bump mongodb-extended-json from 1.10.0 to 1.11.0 ([Snyk] Fix for 35 vulnerable dependencies #75)
• 79fd908 build(deps): Bump mongodb from 3.1.4 to 3.5.2 ([Snyk-dev] Fix for 14 vulnerable dependencies #76)
• 8cbcd32 Bump mongodb-collection-sample from 4.4.2 to 4.5.1 ([Snyk-local] Fix for 1 vulnerable dependencies #67)
• 6194cd3 chore(deps): Bump js-yaml from 3.12.0 to 3.13.1 ([Snyk] Fix for 1 vulnerable dependencies #74)
• 00666cf chore(deps-dev): Bump eslint-config-mongodb-js from 3.0.1 to 5.0.3 ([Snyk-local] Fix for 3 vulnerable dependencies #72)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic