[Snyk] Fix for 1 vulnerabilities

[xhad]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: glob

The new version differs by 11 commits.

• 3a7e71d v5.0.15
• 841fda0 use latest minimatch
• 4ba54a8 Skip some tests on Windows, make others pass
• 3936e1e Build: Add build for node v4
• c47d451 v5.0.14
• 821fac8 Handle ENOTSUP for sync glob as well as async
• 9625618 Test for when readdir raises ENOTSUP
• 0a2b519 Generate fixtures more effectively, with -O instead of eval
• f96190b Use js for benchmark cleanup
• 957fd93 Fix some 'use strict' errors
• bf3381e Treat ENOTSUP like ENOTDIR in readdir

See the full diff

Package name: glob-all

The new version differs by 15 commits.

• b3a45fd badges
• 6b3d161 3.1.0
• 88cdd02 Merge pull request [Snyk] Fix for 1 vulnerable dependencies #13 from iandotkelly/master
• 7d750c9 Fix issue where Glob 7.x can't handle the leading ! in the exclude pattern
• 30e092b 3.0.3
• a50fcac Cleaned up more CoffeeScript conversion (de-hoisted, de-class wrapped), added simple test, removed src/
• d4f0396 Merge pull request [Snyk] Fix for 2 vulnerable dependencies #11 from puranjayjain/master
• a801f90 removed coffescript file in favour of vanilla js
• 74e265d 3.0.2
• f983e1a fix array destruction (closes [Snyk] Fix for 1 vulnerable dependencies #5), add command-line interface (closes [Snyk] Fix for 1 vulnerable dependencies #4 and [Snyk] Fix for 1 vulnerable dependencies #6, thanks @ joshwnj)
• 3931cd6 Merge pull request [Snyk] Fix for 2 vulnerable dependencies #8 from creeperyang/master
• ad5db0b only emit error when no callback, fix [Snyk] Fix for 1 vulnerable dependencies #9
• 69fbccc handle callback error early, fix [Snyk] Fix for 1 vulnerable dependencies #7
• c834e10 bumped minor version
• 79676a3 added cli

See the full diff

Package name: minimatch

The new version differs by 19 commits.

• 707e1b2 3.0.5
• a8763f4 Improve redos protection, add many tests
• bafa295 Use master branch for travis badge
• 013d64d update travis
• e46989a v3.0.4
• ddfacbd update brace-expansion
• 55ed736 update package scripts and deps
• eed8949 v3.0.3
• ecabc57 Do not throw on unfinished !( extglob patterns
• 81edb7c v3.0.2
• 6944abf Handle extremely long and terrible patterns more gracefully
• 8ac560e v3.0.1
• 4f3a8bc update tap
• 9cf2d88 Remove mentions of cache from readme
• 7df236f Use svg instead of png to get better image quality
• 361f803 Fixes spelling mistake from "instanting" to "instantiating"
• ea0c690 update travis
• 270dbea v3.0.0
• 668a1f4 Don't package browser version

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)