[Snyk] Security upgrade c8 from 7.12.0 to 9.0.0

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: c8

The new version differs by 23 commits.

• 128bee2 chore(main): release 9.0.0 (Note support for per-window theme updates mdn/browser-compat-data#510)
• 8724c70 chore(deps): update dependency @ types/node to v20 (Add more font- CSS properties mdn/browser-compat-data#496)
• 66705b5 chore(deps): update dependency typescript to v5 (Add data for browserSettings.imageAnimationBehavior mdn/browser-compat-data#458)
• b46b640 feat(deps): update foreground-child to promise API (Update tabs.onUpdated for discarded property mdn/browser-compat-data#512)
• ef672da test: fix snapshot (Note browsingData.removeHistory behavior in Firefox mdn/browser-compat-data#511)
• 2cdc86b chore(deps): Remove rimraf (Fix note for onAuthRequired mdn/browser-compat-data#509)
• a13584d chore(main): release 8.0.1 (Add padding CSS properties compat data mdn/browser-compat-data#486)
• 3be8bd9 fix(deps): update istanbul deps (Invalidate stringly typed versions mdn/browser-compat-data#485)
• ff30cc5 deps: update package-lock (Add the PointerEvent api mdn/browser-compat-data#484)
• 57bb94e chore: up versions (How to represent 'mixins'? mdn/browser-compat-data#472)
• be9ef33 chore(main): release 8.0.0 (Add at-rule @keyframes compat data mdn/browser-compat-data#476)
• f8ee1ff chore!: dropped Node 10 support (Add some font CSS properties compat data mdn/browser-compat-data#475)
• 961fa2a chore(main): release 7.14.0 (Represent OS specific limitation in a machine-readable way mdn/browser-compat-data#474)
• 45f2f84 feat: added a new CLI arg `--merge-async` to asynchronously and incrementally merge process coverage files to avoid OOM due to heap exhaustion (Tabs 57 mdn/browser-compat-data#469)
• 2f36fe9 chore(main): release 7.13.0 (Add data for privacy.websites.trackingProtectionMode mdn/browser-compat-data#428)
• 8e56b23 docs: use Github actions official badge
• d17d02a chore(deps): update dependency @ types/node to v18 (Edge doesn't support isIntersecting mdn/browser-compat-data#430)
• 7263c8d docs: add `--per-file` (Add columns CSS properties compat data mdn/browser-compat-data#435)
• 2a3d0c7 build(deps): bump json5 from 1.0.1 to 1.0.2 (Add iconUrl and colorCode to contextualIdentities.ContextualIdentity mdn/browser-compat-data#445)
• 3646e6e feat(types): add typings for reporterOptions (Add loadReplace; refactor tabs.update data mdn/browser-compat-data#446)
• bc347a9 feat: support passing reporter options (Add data for contextualIdentities events mdn/browser-compat-data#423)
• b93b9c0 feat: add `skipFull` and `excludeNodeModules` to type definitions (Lint MDN URLs for localization code mdn/browser-compat-data#417)
• 4ab9fba docs: change 'master' to 'main' in git commands and links (Added compatibility info for frameAncestors in webrequest.onBeforeRequest mdn/browser-compat-data#418)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.