[Snyk] Fix for 19 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/node_modules/@babel/core/node_modules/color-convert/package.json
  • tools/node_modules/@babel/core/node_modules/color-convert/.snyk

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	No	Proof of Concept
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	No	No Known Exploit
	509/1000 Why? Has a fix available, CVSS 5.9	Denial of Service (DoS) SNYK-JS-JSYAML-173999	No	No Known Exploit
	619/1000 Why? Has a fix available, CVSS 8.1	Arbitrary Code Execution SNYK-JS-JSYAML-174129	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	No	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	No	Proof of Concept
	731/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.2	Prototype Pollution SNYK-JS-LODASH-567746	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	No	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	No	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASHMERGE-173732	No	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-LODASHMERGE-173733	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	No	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	No	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-TRIMNEWLINES-1298042	No	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:eslint:20180222	No	Proof of Concept
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: chalk

The new version differs by 25 commits.

• a838948 1.1.2
• ff2c3ea Merge pull request [Snyk] Security upgrade mocha from 6.2.3 to 10.1.0 #104 from popey456963/patch-1
• 426fc48 7,700 Dependent Modules
• 9001b39 Updates maintainer email.
• 308f6b6 minor tweaks
• 18c64ad cleanup [Snyk] Security upgrade mocha from 8.4.0 to 10.1.0 #92
• 05f87e2 Close [Snyk] Security upgrade mocha from 8.4.0 to 10.1.0 #92 PR: Closing before and reopening the style after a line break.
• 139f8b6 add Code of Conduct
• 51b8f32 6700 dependents! 🔥
• 8417f17 Close [Snyk] Security upgrade jest from 24.9.0 to 25.0.0 #95 PR: tweak defining proto.
• a301cbf Merge pull request [Snyk] Security upgrade eslint from 4.19.1 to 5.0.0 #97 from stevemao/missing-tests
• 8ec46cf Merge pull request [Snyk] Security upgrade tap from 14.11.0 to 15.0.0 #96 from stevemao/bump-deps
• 337f9c7 add missing tests
• 5679ec0 bump deps
• b8e7da6 Merge pull request [Snyk] Fix for 12 vulnerabilities #93 from venning/master
• 7c40059 Use HTTPS for shields.io unicorn badge; raises mixed-content warning on npmjs.com
• c2ef5b8 Merge pull request [Snyk] Security upgrade tap from 14.11.0 to 15.0.0 #91 from vdemedes/remove-extra-deps
• 04cae22 remove has-ansi and strip-ansi dependencies
• 83615f2 clarify docs about using console.log
• ed6e7d5 Close build(deps): bump minimatch from 3.0.4 to 3.1.2 in /tools/node-lint-md-cli-rollup #86 PR: Add ES2015 template literal example. Fixes [Snyk] Security upgrade acorn-private-class-elements from 0.1.1 to 0.2.0 #77
• 8d59997 readme tweaks
• 262274a add `slice-ansi` to related section in readme
• 60b0a74 Merge pull request [Snyk] Security upgrade rollup-plugin-typescript2 from 0.20.1 to 0.27.0 #85 from jorrit/patch-1
• 641ae57 New URL for cmder

See the full diff

Package name: xo

The new version differs by 250 commits.

• 41f0484 0.40.3
• 374dd73 Support `xo.config.cjs` and `.xo-config.cjs` ([Snyk] Security upgrade eslint from 6.8.0 to 7.0.0 #561)
• 3e7b77c Remove some needless imports ([Snyk] Security upgrade tap from 10.7.3 to 15.0.0 #560)
• 6adf459 Remove `update-notifier`
• b6389ef 0.40.2
• 7ace6e5 Fix handling of `parserOptions` for TypeScript ([Snyk] Security upgrade gulp from 3.9.1 to 4.0.0 #557)
• 7629ce0 0.40.1
• d2c5750 Properly resolve base config ([Snyk] Fix for 1 vulnerabilities #545)
• e9c96a1 Properly handle `parserOptions` ([Snyk] Security upgrade tap from 14.11.0 to 15.0.0 #544)
• 8e1801c Avoid destructuring and just build the expected object once ([Snyk] Security upgrade xo from 0.27.2 to 0.41.0 #538)
• 4cfdc72 Fix CI
• 56be018 0.40.0
• cc06c3c Require Node.js 12.20 and enforce ESM
• 0480d80 Move from deprecated `ESLint.CLIEngine` to `ESLint` ([Snyk] Fix for 1 vulnerabilities #534)
• 9934b84 Meta tweak ([Snyk] Fix for 1 vulnerabilities #537)
• 7344d21 0.39.1
• fa34c74 Fix a problem with using XO with Prettier
• fd8828d 0.39.0
• d9d7773 Upgrade dependencies
• e3c511b Disable the `import/default` rule for TypeScript files
• 7b8dc70 Add `--print-config` flag ([Snyk] Security upgrade tap from 14.11.0 to 15.0.0 #529)
• e80c094 Remove the `esnext` option
• b385bee Disable `import/export` rule for TypeScript files
• c886ce5 Mention in project description that XO is an ESLint wrapper ([Snyk] Security upgrade xo from 0.24.0 to 0.41.0 #528)

See the full diff

With a Snyk patch:

Severity	Priority Score (*)	Issue	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Open Redirect
🦉 Arbitrary Code Execution
🦉 More lessons are available in Snyk Learn