[Snyk] Fix for 7 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-CSSWHAT-3035488	No	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit
	584/1000 Why? Has a fix available, CVSS 7.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	Yes	No Known Exploit
	509/1000 Why? Has a fix available, CVSS 5.9	Denial of Service (DoS) SNYK-JS-JSYAML-173999	Yes	No Known Exploit
	619/1000 Why? Has a fix available, CVSS 8.1	Arbitrary Code Execution SNYK-JS-JSYAML-174129	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: chalk

The new version differs by 53 commits.

• 3fca615 2.0.0
• f66271e Add tagged template literal (include option is not working addyosmani/critical#163)
• 23ef1c7 fix linter errors
• c015568 add rainbow example
• 09fb2d8 Re-implement `chalk.enabled` (Use cssnano instead CleanCSS addyosmani/critical#160)
• 608242a spoof supports-color
• 18f2e7c add host information output
• 523b998 Revert "TEMPORARY: emergency travis CI fix (see comments)"
• 54975fb TEMPORARY: emergency travis CI fix (see comments)
• 1d73b21 Improve readme
• 6f4d6b3 Bump dependencies
• 8702496 Remove `chalk.styles`
• 0412cdf Minor code improvements
• 249b9ac ES2015ify the codebase
• cb3f230 Add RGB (256/Truecolor) support (added penthouse timeout option addyosmani/critical#140)
• dbae68d Update dependent package count in the readme (Travis: add explicitly node.js 4 and 6. addyosmani/critical#154)
• 9b60021 Drop support for Node.js 0.10 and 0.12
• 0d21449 check parent builder object for enabled status (add support for link preload hrefs addyosmani/critical#142)
• 5a69476 add XO badge
• 492f11f add example file
• 4ce73b6 make XO happy
• 7c02cf4 Add log statement to chalk examples (Cssrelpreload addyosmani/critical#129)
• 835ca3d You've just reached 10,000 dependent modules. (CSHTML file instead of HTML addyosmani/critical#122)
• 74c087d minor doc improvements (Vinyl addyosmani/critical#120)

See the full diff

Package name: filter-css

The new version differs by 17 commits.

• 066e421 1.0.0
• 56a0874 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #5 from XhmikosR/dev-2
• 4a2e65f cli.js: refactor
• 706ecdf Merge pull request [Snyk Update] New fixes for 1 vulnerable dependency path #4 from XhmikosR/dev
• c995ab6 Tweak tests more.
• ec7aac9 cli.js: add missing shebang
• 715973e Move `getValue()` to the global scope
• 245160d Reduce lodash usage.
• e63cc2e Fix Windows tests
• e47435d Tweak readme.md
• adcc132 Switch to GitHub Actions CI.
• f11745a Switch to xo.
• c901f6c Update all dependencies.
• 3439b55 Enforce LF for all files.
• c8dfb34 Remove update-notifier.
• ef97657 Split npm scripts.
• 110f55e ES6-ify and require Node.js 6.x

See the full diff

Package name: oust

The new version differs by 4 commits.

• 40853e4 v0.5.0.
• a5ce6ad Update all the stuff, drop Node.js < 6 support, ES6-ify codebase. ([Snyk] Fix for 1 vulnerabilities #21)
• 3942af1 Bump package
• 8e6bd80 Add filter functionality ([Snyk] Fix for 1 vulnerabilities #17)

See the full diff

Package name: postcss-image-inliner

The new version differs by 25 commits.

• 8c2386c 2.0.2
• 7cea88f Bump deps
• 3feac8a [2.x] Update dependencies. (Fix underlying shared fs.read array addyosmani/critical#219)
• 27cbe33 Update dependencies.
• 0808d7e 2.0.1
• 6611aa8 fix: uses npm install on appveyor node 6
• e9a3993 Adds windows tests for 2.x
• 69f01b4 Merge remote-tracking branch 'patchstream/2.x' into v2.x
• 61ec964 Add a .gitattributes file and enforce LF.
• 618596e Remove the moot .npmignore file. (Remote URL doesn't work addyosmani/critical#211)
• 262a89c Test more Node.js versions on Travis.
• a30d313 Lint test/test.js.
• 4c4264d Remove gulp and use npm scripts.
• 6d55a9d Remove yarn.lock
• 6c5ffac Update dependencies to fix security vulnerabilities.
• addc368 Fixes vulnerabilities
• b9deca0 v2.0.0
• 6c82f5d Bump deps
• 3377090 Bump dependencies
• f9628ae bump deps
• f224781 Add strict mode
• adcf5ce bump deps
• 97032ae chore(package): update request to version 2.80.0 (Critical and self-signed certificates addyosmani/critical#171)
• 723347d chore(package): update bluebird to version 3.5.0 (Deleting tmp files addyosmani/critical#170)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 Open Redirect
🦉 More lessons are available in Snyk Learn