[Snyk] Fix for 1 vulnerabilities

[SibuStephen]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	584/1000 Why? Has a fix available, CVSS 7.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-HAWK-2808852	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: googleapis

The new version differs by 210 commits.

• c3750a8 12.1.0 (Fix OpenZwave in Alpine GladysAssistant/Gladys#613)
• 1586e6f Upgrade request dependency, fixes Some fixes: zWave device integration and BinaryDeviceFeature component GladysAssistant/Gladys#608 (Remove useless error log when deviceFeature does not exist yet in Gladys GladysAssistant/Gladys#612)
• d1af41b 12.0.0 (Telegram messaging doesn't answer to the correct conversation GladysAssistant/Gladys#607)
• 62a7c6c 11.0.0 (Fix zWave port listing and binding GladysAssistant/Gladys#602)
• a67adf7 10.0.0 (Uncommitted package-lock.json GladysAssistant/Gladys#599)
• f2eb11f 9.0.0 (Improve chat page UX GladysAssistant/Gladys#596)
• 32430ce 8.2.0 (Philips Hue UI fixes + compatibilities GladysAssistant/Gladys#594)
• 7128d3e Pull in auto-generated samples. (Upgrading to Preact X GladysAssistant/Gladys#591)
• cc66c16 Add example of request-level option. Fixes Change integration page UX to better explain how it works GladysAssistant/Gladys#593
• 4005bc9 8.0.0 (Multiple UX fixes GladysAssistant/Gladys#590)
• 35d14fb 7.1.0 (Warning when leaving house/room form without saving GladysAssistant/Gladys#585)
• 0115f0f 7.0.0 (Unable to login on Gladys Plus on Firefox GladysAssistant/Gladys#581)
• 0bb8f5a Re-generating API classes. (Implement create new user from admin side in Gladys GladysAssistant/Gladys#579)
• 570f989 6.1.0 (Feature name is mandatory GladysAssistant/Gladys#575)
• 87ce5fa 6.0.0 (Improve Z-Wave integration GladysAssistant/Gladys#573)
• fd10fd7 v2 does not have the create function, updating to v3 (When creating a room with name which already exist, it says that the house already exists GladysAssistant/Gladys#571)
• d99ca56 Replace process.exit with an else block (On/Off for a room bug GladysAssistant/Gladys#567)
• 8992956 Improve build.
• 828451f Merge pull request Bugs on UI in Firefox GladysAssistant/Gladys#562 from google/hotfix-560
• 3449866 Hotfix. Fixes RFLink or 433 Mhz service GladysAssistant/Gladys#560
• b08ce41 Merge pull request At first login on dashboard, integration tab is empty GladysAssistant/Gladys#558 from google/5.2.0
• 038be0c 5.2.0
• 03dd537 Merge pull request Units when no value recorded (temperature) GladysAssistant/Gladys#557 from google/jsdocs
• 7b324d5 Improved JSDocs

See the full diff

Package name: pushbullet

The new version differs by 15 commits.

• 9673812 Update version to 2.0.0
• 4db84de Update dependencies
• e75096a Add support for SMS, clipboard and dismissal
• ca8affe Refactor into smaller files
• 9a922e4 Add chats functions
• f0fd2c8 Default subscriptions to active only
• a4ed375 Default devices to active only
• 99151b9 Add `un/muteSubscription` functions
• 9c3649e Add `updateDevice`, change `createDevice`
• a2dc951 Update push functions
• dc0137e Remove Contacts functions
• 08a9171 Use `Access-Token` header for authentication
• 9a54a8f Add `deleteAllPushes` function
• 8ff8f34 Remove support for deprecated push types
• 3f6092a Document pushing to all devices

See the full diff

Package name: request

The new version differs by 250 commits.

• 02fc5b1 Update changelog
• de1ed5a 2.87.0
• a6741d4 Replace hawk dependency with a local implemenation (#2943)
• a7f0a36 2.86.1
• 8f2fd4d Update changelog
• 386c7d8 2.86.0
• 76a6e5b Merge pull request #2885 from ChALkeR/patch-1
• db76838 Merge branch 'patch-1' of github.com:ChALkeR/request
• fb7aeb3 Merge pull request #2942 from simov/fix-tests
• e47ce95 Add Node v10 build target explicitly
• 0c5db42 Skip status code 105 on Node > v10
• d555bd7 Generate server certificates for Node > v10
• 81f8cb5 Remove redundant code
• db17497 Use Buffer.from and Buffer.alloc in tests
• 0d29635 Merge pull request #2923 from gareth-robinson/cifixes
• 3745cec Correction for Windows OS identification
• 219a298 Alterations for failing CI tests
• bbb3a0b 2.85.1
• 21ef363 Update changelog
• 5dad86e 2.85.0
• 5ba8eb4 Revert "Update hawk to 7.0.7 (#2880)"
• b191514 2.84.1
• d77c839 Update changelog
• 4b46a13 2.84.0

See the full diff

Package name: sails

The new version differs by 250 commits.

• 69623b2 0.12.0
• 3c960f4 Update changelog
• df09bb6 Add 0.11.5 notes to changelog
• 0d0297e update changelog
• 66b9519 bump waterline dependencies to 0.11
• 043a629 Update CHANGELOG.md
• 1ae4fcb Update 0.11-migration-guide.md
• 4eb7539 Update 0.11-migration-guide.md
• 225c5e3 Updated changelog
• 54cbd39 Use local Sails in `sails console` if available
• fdce998 add resolution for https://github.com/grunt-contrib-watch@0.6.1 ignoring deeply nested changes balderdashy/sails#3526 to changelog
• 8eef18d Minor cleanup in blueprints hook.
• d6efda0 Specify explicit default value for `sails.config.cors.allRoutes`
• 2fc1620 Updated changelog
• 957defd Improved error message and added inline troubleshooting tips. Closes https://github.com/EMFILE + ENOSPC errors swallowed by Grunt hook instead of being logged as errors balderdashy/sails#3523
• b0f1217 Revert to grunt-contrib-watch@0.5.3 and pin dependency. See https://github.com/grunt-contrib-watch@0.6.1 ignoring deeply nested changes balderdashy/sails#3526 for more information."
• da59607 Improve sails --help output re: https://github.com/"Duplicate" entries in sails cli? balderdashy/sails#3539 (note that this removes support for common mispellings)
• 62ae56f t Merge branch 'master' of github.com:balderdashy/sails
• 183f460 0.12.0-rc9
• 20ff115 Better HTTPs tests
• 24a19bb Don't use sails-util for Lodash methods
• 7ae836b Ensure that SSL options (if provided) are buffers
• c638573 Update version of sails.io.js used in tests
• 9168001 Added "destroy" method to HTTP, used in .lower() for clean shutdown.

See the full diff

Package name: serialport

The new version differs by 250 commits.

• 6ed7b3b docs(README): fix api links
• a972686 docs: Collapse the beta changes in changelog and upgrade guide
• af97b09 Bump to v6.0.0
• 4ff9c67 feat(windows): Add ERROR_INVALID_PARAMETER to supported bindings errors (Fix python dependency GladysAssistant/Gladys#1354)
• dffa9d5 Bump to 6.0.0-beta3
• 530247a chore(package): update sinon to version 4.0.0 (Zigbee2mqtt: Add device TS0210 GladysAssistant/Gladys#1348)
• a5c01ff chore(package): update mocha to version 4.0.0 (Feature component GladysAssistant/Gladys#1352)
• bcb492f feat(parsers): Add cctalk parsers (Zwave js GladysAssistant/Gladys#1342)
• a3b8d35 feat(open): Throw on incorrect baudrate option (Zigbee2mqtt: Add device WRS-R02 GladysAssistant/Gladys#1347)
• c590021 chore(packages): upgrade eslint and sinon (Zigbee2mqtt lqi GladysAssistant/Gladys#1343)
• 4850901 Update publishing instructions
• 3faadac fix(docs): add missing parsers to properties list
• ad8abf6 6.0.0-beta2
• 69de595 fix(windows): Asynchronous callbacks for reading and writing ([BUG] Affichage de la présence "dans quelques secondes" GladysAssistant/Gladys#1328)
• c7a3be4 Revert "fix(windows): Asynchronous callbacks for reading and writing on Windows" (After editing a dashboard name, the dropdown list is not updated GladysAssistant/Gladys#1323)
• 2c2a8b6 fix(windows): Asynchronous callbacks for reading and writing on Windows (On trigger "device state changed" in scene, it's hard to differentiate devices as it's not the device feature name that is used GladysAssistant/Gladys#1313)
• bf251a9 fix: Fixed typo in upgrade guide (Create device feature "internal temperature" to avoid confusing device temp with ambiant temp GladysAssistant/Gladys#1321)
• 722d589 chore(package): update eslint to version 4.5.0 (Signal quality feature GladysAssistant/Gladys#1315)
• 1ee4e5a chore(package): update debug to version 3.0.1 (In action "turn on/off the light/switch", it should be a device feature selector, not a device selector GladysAssistant/Gladys#1314)
• 4e266e5 chore(package): update sinon to version 3.2.1 (Box "temperature in room" & "humidity in room" are not refreshing data with websockets GladysAssistant/Gladys#1316)
• 4987750 fix(package): update debug to version 3.0.0 (Zigbee2mqtt: Add device E2001/E2002 GladysAssistant/Gladys#1292)
• 76b7191 fix(docs): Add a note about windows support
• e83ec4e fix(docs): correct default highWaterMark to 65536 bytes
• 335ede9 6.0.0-beta1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.