[Snyk] Fix for 1 vulnerabilities

[awaisab172]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: lerna

The new version differs by 250 commits.

• 4582c47 chore(release): v4.0.0
• 2d0a97a fix(version): Ensure --create-release environment variables are present during initialization
• 63f18ba test(version): Assert on mocked releases, not calls
• 1f17e0c chore(lerna): Set top-level package tag -> next
• 80a072e chore(lerna): Enable --temp-tag during publish
• e00779a chore: Add release script
• 255c2ea docs(version): Move changelogPreset examples
• 7acf883 Merge branch 'next' into 'main'
• c3814b5 test(child-process): Avoid windows bullshit
• 671ddef chore: Reset lockfile
• affed1c feat(deps): Bump dependencies
• 126676a chore(scripts): Support --no-install flag
• d8100fd feat(deps): execa@^5.0.0
• 187cd58 chore(deps): Bump devDependencies
• ce232c8 chore: remove volta pins, annoying
• d181863 chore: Bump volta pins
• 42ab453 feat(prompt): Remove ambiguous exports
• 4acff59 refactor: Synchronize import ChildProcessUtilities -> childProcess
• a02e12e refactor(test): Refactor mockPromptChoices() -> promptSelectOne.chooseBump()
• 69bb2e4 refactor: Decompose PromptUtilities namespace import
• a08bafb refactor(test): Use unambiguous mockPromptChoices() method
• 3c67f15 refactor: Migrate to unambiguous promptConfirmation()
• 5d05d95 refactor: Migrate to unambiguous promptSelectOne()
• e9237f3 refactor: Migrate to unambiguous promptTextInput()

See the full diff

Package name: yargs

The new version differs by 18 commits.

• 59739e6 chore: release 13.3.0 (Framework: Update search component (and instances) to use gridicons Automattic/wp-calypso#1358)
• e230d5b fix(deps): yargs-parser update addressing several parsing bugs (Free Trials: Allow domain to be purchased after trial expires Automattic/wp-calypso#1357)
• 4dfa19b feat(i18n): swap out os-locale dependency for simple inline implementation (Free Trials: Suppress domain receipt email Automattic/wp-calypso#1356)
• 812048c feat: support defaultDescription for positional arguments
• a6e67f1 chore(release): 13.2.4
• fc13476 chore: update standard-verison dependency
• bf46813 fix(i18n): rename unclear 'implication failed' to 'missing dependent arguments' (Reader: highlighting text in Reader post's content area results in a click Automattic/wp-calypso#1317)
• a3a5d05 docs: fix a broken link to MS Terminology Search (Help: Ending a chat while a user is on /help/contact is a jarring experience. Automattic/wp-calypso#1341)
• b4f8018 build: add .versionrc that hides test/build
• 0c39183 chore(release): 13.2.3
• 08e0746 chore: update deps (Help: Ending a chat results in the "leave a message" chat box Automattic/wp-calypso#1340)
• 843e939 docs: make `--no-` boolean prefix easier to find in the docs (Help: Form validation needs improving Automattic/wp-calypso#1338)
• 84cac07 docs: restore removed changelog of v13.2.0 (Help: Make the "HEs have returned" notice dismissable Automattic/wp-calypso#1337)
• b20db65 fix(deps): upgrade cliui for compatibility with latest chalk. (Themes: Determine if server side i18n is necessary for the Masterbar  Automattic/wp-calypso#1330)
• c294d1b test: accept differently formatted output (Themes: Render the Masterbar for /design on the server Automattic/wp-calypso#1327)
• ac3f10c chore: move .hbs templates into .js to facilitate webpacking (Reader: Fix import statement for reader/stats Automattic/wp-calypso#1320)
• 0295132 fix: address issues with dutch translation (Desktop App: Fix broken oauth token access when booting Desktop App Automattic/wp-calypso#1316)
• 9f2468e doc: clarify parserConfiguration object structure (Domains: Update back link to redirect to previous page instead of parent page Automattic/wp-calypso#1309)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)