[Snyk] Fix for 8 vulnerabilities

[testrockytesting]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Override Protection Bypass npm:qs:20170213	Yes	No Known Exploit
	694/1000 Why? Mature exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) npm:string:20170907	Yes	Mature

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: https-proxy-agent

The new version differs by 15 commits.

• 6c50a9a Release 2.0.0
• b7b2bfa rename https-proxy-agent.js to index.js
• 64e1e42 update dependencies and remove semver-specific test case
• e732af7 remove console.log() call
• 11d4458 update `agent-base` to v4
• 7c65dd0 remove `extend` dependency
• bdad2dc drop Node versions < v4 from Travis-CI
• 839bd29 ⬆️ update minimum version of debug dependency
• fd7e81b opts/options
• e1420c1 test Node.js 5, 6, 7 and 8 on Travis
• 6bbbef7 travis: test io.js 1, 2, 3 and Node.js v4
• 121449b README: remove outdated `secureEndpoint` reference
• 4338d6c README: remove `secureEndpoint` docs, add `headers`
• f2b1080 https-proxy-agent: add support for proxy "headers"
• 277c006 test: remove console.log() call

See the full diff

Package name: twilio

The new version differs by 250 commits.

• 07891d5 Release 3.41.0
• 3120c68 [Librarian] Regenerated @ b99d9f1d3667442d965805ac71bf6185ee04b82c
• c76264e fix: remove the lock file since this is a library
• d073d8c fix: Page JSON parsing and integration tests (static content directory howdyai/botkit#546)
• ef0d339 fix: add overloaded TS definitions for non-required params (Facebook share button integration howdyai/botkit#545)
• 465d158 fix: Add method overload to VoiceResponse.prototype.play (How to access Messenger User Profile? howdyai/botkit#544)
• 747a091 fix: don't re-parse parsed JSON (Order of messages from multiple bot.replyWithTyping() is not correct in Messenger .. howdyai/botkit#543)
• 6266910 feat: migrate from deprecated request module to axios (Fixed spelling howdyai/botkit#542)
• 5249e3b [Librarian] Regenerated @ ee964c66599ebcd125eb411ba410bde1e62b3503
• ad2e98b Release 3.40.0
• ec54ee2 [Librarian] Regenerated @ ee964c66599ebcd125eb411ba410bde1e62b3503
• 5a65128 docs: add url parameter documentation in twilio.webhook() (Highlighted "default" as part of the actions howdyai/botkit#541)
• 6d96611 fix: proper indentation (Slack - Interactive Message requires request url howdyai/botkit#534)
• 3b07aca docs: guide for enabling lazy loading (FIX RTM RETRY AND RECONNECT LOGIC howdyai/botkit#532)
• 25ec77d feat: Faster requiring using optional lazy loading (slackbutton_bot.js redirectUri Bug Fix howdyai/botkit#526)
• deca8ff Release 3.39.5
• f8f368c [Librarian] Regenerated @ 59055a0e4517ecbe8ab584e0f9b38f2a70cd94a8
• 3d0e4a1 Release 3.39.4
• 2d7f7fa [Librarian] Regenerated @ 0d359fdcea150a7f3ec36771ffeb0bd2bf34ea1d
• 412b484 [Librarian] Regenerated @ d279b32f822f241b774d58939b2c4c04ca4152e9
• 1294266 [Librarian] Regenerated @ d279b32f822f241b774d58939b2c4c04ca4152e9
• 0d96c5b [Librarian] Regenerated @ d279b32f822f241b774d58939b2c4c04ca4152e9
• 1286866 [Librarian] Regenerated @ d279b32f822f241b774d58939b2c4c04ca4152e9
• 548eed3 [Librarian] Regenerated @ d279b32f822f241b774d58939b2c4c04ca4152e9

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Poisoning
🦉 Prototype Override Protection Bypass
🦉 More lessons are available in Snyk Learn