[Snyk] Upgrade nodemon from 1.12.1 to 1.19.4

[snyk-bot]

Snyk has created this PR to upgrade nodemon from 1.12.1 to 1.19.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 61 versions ahead of your current version.
• The recommended version was released 6 months ago, on 2019-10-15.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:sshpk:20180409	Proof of Concept
	Prototype Pollution npm:extend:20180424	No Known Exploit
	Prototype Pollution npm:deep-extend:20180409	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-174125	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-FSTREAM-174725	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:tough-cookie:20170905	No Known Exploit
	Uninitialized Memory Exposure npm:stringstream:20180511	Mature
	Prototype Pollution SNYK-JS-UNDEFSAFE-548940	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	Proof of Concept
	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:braces:20180219	Proof of Concept

Release notes

Package name: nodemon

• 1.19.4 - 2019-10-15
  

  1.19.4 (2019-10-15)

  Bug Fixes

  • Replace jade references by pug (7d6c1a8), closes #1595
• 1.19.3 - 2019-09-29
  

  1.19.3 (2019-09-29)

  Bug Fixes

  • to avoid confusion like in #1528, always report used extension (eead311)
• 1.19.2 - 2019-09-03
  

  1.19.2 (2019-09-03)

  Bug Fixes

  • langauge around "watching" (#1591) (12b66cd)
• 1.19.1 - 2019-05-25
  

  1.19.1 (2019-05-25)

  Bug Fixes

  • ensure signal is sent to exit event (13afac2)
• 1.19.0 - 2019-05-01
  

  1.19.0 (2019-05-01)

  Bug Fixes

  • disable fork only if string starts with dash (886527f), closes #1554
  • Quote zero-length strings in arguments (#1551) (2973afb)

  Features

  • add message event (20ccb62)
  • add TypeScript to default execPath (#1552) (64b474e)
• 1.18.11 - 2019-04-08
  

  1.18.11 (2019-04-08)

  Bug Fixes

  • hard bump of [email protected] (aa41ab2)
• 1.18.10 - 2019-02-08
  

  1.18.10 (2019-02-08)

  Bug Fixes

  • bump chokidar (fb0c078), closes #1522 #1208
• 1.18.9 - 2018-12-14
  

  1.18.9 (2018-12-14)

  Bug Fixes

  • rs in node@11 (#1493) (dd0b96a)
• 1.18.8 - 2018-12-10
  

  1.18.8 (2018-12-10)

  Bug Fixes

  • docker leaving running pids (via pstree) (735afd5), closes #1447 #1477 #1484
• 1.18.7 - 2018-11-27
  

  1.18.7 (2018-11-27)

  Bug Fixes

  • remove deep ps-tree dep (b35c532), closes #1451
  • upgrade pstree to remove vulnerability (21e052e), closes #1463 #1469 #1464
• 1.18.6 - 2018-11-05
• 1.18.5 - 2018-10-26
• 1.18.4 - 2018-08-29
• 1.18.3 - 2018-07-17
• 1.18.2 - 2018-07-13
• 1.18.2-alpha.1 - 2018-07-12
• 1.18.1 - 2018-07-11
• 1.18.1-alpha.2 - 2018-07-11
• 1.18.1-alpha.1 - 2018-07-10
• 1.18.0 - 2018-07-10
• 1.17.5 - 2018-05-23
• 1.17.5-alpha.2 - 2018-05-08
• 1.17.5-alpha.1 - 2018-05-07
• 1.17.4 - 2018-05-05
• 1.17.4-alpha.2 - 2018-05-05
• 1.17.4-alpha.1 - 2018-05-05
• 1.17.3 - 2018-03-31
• 1.17.2 - 2018-03-13
• 1.17.1 - 2018-02-27
• 1.17.0 - 2018-02-27
• 1.16.1 - 2018-02-27
• 1.16.0 - 2018-02-27
• 1.15.2-alpha.2 - 2018-02-27
• 1.15.2-alpha.1 - 2018-02-26
• 1.15.1 - 2018-02-19
• 1.15.0 - 2018-02-15
• 1.14.12 - 2018-02-01
• 1.14.11 - 2018-01-11
• 1.14.10 - 2018-01-09
• 1.14.9 - 2018-01-08
• 1.14.9-alpha.1 - 2018-01-06
• 1.14.8 - 2018-01-06
• 1.14.8-alpha.1 - 2018-01-05
• 1.14.7 - 2017-12-31
• 1.14.6 - 2017-12-29
• 1.14.5 - 2017-12-29
• 1.14.4 - 2017-12-29
• 1.14.3 - 2017-12-22
• 1.14.2 - 2017-12-22
• 1.14.1 - 2017-12-20
• 1.14.0 - 2017-12-20
• 1.13.3 - 2017-12-16
• 1.13.2 - 2017-12-15
• 1.13.1 - 2017-12-15
• 1.13.0 - 2017-12-15
• 1.12.7 - 2017-12-13
• 1.12.6 - 2017-12-13
• 1.12.5 - 2017-12-05
• 1.12.4 - 2017-12-04
• 1.12.3 - 2017-12-04
• 1.12.2 - 2017-12-04
• 1.12.1 - 2017-09-15

from nodemon GitHub release notes

Commit messages

Package name: nodemon

• 7d6c1a8 fix: Replace `jade` references by `pug`
• 74c8749 chore: test funding.yml change
• c1a8b75 chore: update funding
• d5b9891 test: ensure ignore relative paths
• eead311 fix: to avoid confusion like in #1528, always report used extension
• 12b66cd fix: langauge around "watching" (#1591)
• 2e6e2c4 docs: README Grammar (#1601)
• 5124ae9 Merge branch 'master' of github.com:remy/nodemon
• 95fa05a chore: git card
• d84f421 chore: adding funding file
• 13afac2 fix: ensure signal is sent to exit event
• d088cb6 chore: update stalebot
• 20ccb62 feat: add message event
• 886527f fix: disable fork only if string starts with dash
• 64b474e feat: add TypeScript to default execPath (#1552)
• 2973afb fix: Quote zero-length strings in arguments (#1551)
• aa41ab2 fix: hard bump of [email protected]
• fb0c078 fix: bump chokidar
• 16cb277 chore: Merge branch 'master'
• df3e08d docs: update clear console advice
• 82c5c18 docs: center logo (#1495)
• dd0b96a fix: `rs` in node@11 (#1493)
• 3dfd5cc chore: Merge branch 'master'
• 735afd5 fix: docker leaving running pids (via pstree)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}