[Snyk] Security upgrade aegir from 37.12.1 to 42.2.0

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aegir

The new version differs by 208 commits.

• af54374 chore(release): 42.2.0 [skip ci]
• 5dbd120 feat: switch to @ anolilab/multi-semantic-release (chore(deps): bump it-filter from 1.0.3 to 2.0.0 libp2p/js-libp2p#1450)
• b8c8996 chore(release): 42.1.3 [skip ci]
• 1a3dffc fix: add missing @ types/mdast dep (chore(deps): bump it-merge from 1.0.4 to 2.0.0 libp2p/js-libp2p#1445)
• 889b03a fix: remove premove and merge-options (chore(deps): bump it-map from 1.0.6 to 2.0.0 libp2p/js-libp2p#1449)
• 3474407 chore(release): 42.1.2 [skip ci]
• 3794628 fix: update check-config command to handle release-please monorepos (chore(deps): bump it-all from 1.0.6 to 2.0.0 libp2p/js-libp2p#1448)
• 4d8c8fb chore(release): 42.1.1 [skip ci]
• c5b96a3 fix: point to esbuild bundle analysis tool instead of bundlebuddy (chore(deps): bump it-drain from 1.0.5 to 2.0.0 libp2p/js-libp2p#1447)
• c948321 chore(release): 42.1.0 [skip ci]
• b705c13 feat: support cname for docs publishing (Can't discover/connect new peers using webrtc-star on v0.39.5 libp2p/js-libp2p#1442)
• dd98696 chore(release): 42.0.1 [skip ci]
• 4dde4a3 deps: bump eslint-plugin-jsdoc from 46.10.1 to 48.0.2 (fix: regenerate protobuf defs libp2p/js-libp2p#1439)
• 313cd61 deps: bump c8 from 8.0.1 to 9.0.0 (fix: enable identify service all the time libp2p/js-libp2p#1440)
• 95493be chore(release): 42.0.0 [skip ci]
• a66384a fix!: check for missing production dependencies (chore(deps): bump multiformats from 9.9.0 to 10.0.0 libp2p/js-libp2p#1426)
• f8e63d3 chore(release): 41.3.5 [skip ci]
• 57934c9 deps: bump p-queue from 7.4.1 to 8.0.1 (chore(deps-dev): bump @libp2p/mplex from 6.0.2 to 7.0.0 libp2p/js-libp2p#1433)
• 8189645 deps: bump undici from 5.28.2 to 6.2.1 (chore(deps-dev): bump @libp2p/tcp from 4.1.0 to 5.0.0 libp2p/js-libp2p#1429)
• aa3eabe chore(release): 41.3.4 [skip ci]
• e1c4dfc deps: bump lilconfig from 2.1.0 to 3.0.0 (fix!: remove @libp2p/components libp2p/js-libp2p#1427)
• cfae15f deps(dev): bump @ types/gh-pages from 5.0.1 to 6.1.0 (chore(deps-dev): bump @libp2p/websockets from 4.0.1 to 5.0.0 libp2p/js-libp2p#1431)
• 85abe2a deps: bump uint8arrays from 4.0.10 to 5.0.1 (Identify Service isn't enabled if only using webtransport libp2p/js-libp2p#1428)
• 9869be9 deps: bump p-map from 6.0.0 to 7.0.1 (chore(deps-dev): bump @libp2p/pubsub from 4.0.1 to 5.0.0 libp2p/js-libp2p#1435)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[socket-security]

New dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
aegir	42.2.0	environment	+205	506 MB	npm-service-account-ipfs