[Snyk] Fix for 1 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: karma

The new version differs by 23 commits.

• 3653caf chore(release): 6.0.0 [skip ci]
• 04a811d fix(ci): abandon browserstack tests for Safari and IE (Add unit tests to web3-utils web3/web3.js#3615)
• 4bf90f7 feat(client): update banner with connection, test status, ping times (Rewrite confirmTransaction to handle re-orgs web3/web3.js#3611)
• 68c4a3a chore(test): run client tests without grunt wrapper (web3.js-The-Peso-G:1.x web3/web3.js#3604)
• fec972f fix(middleware): catch errors when loading a module (2.0.0-alpha.1: contract methods do not support BigNumbers as arguments. web3/web3.js#3605)
• 3fca456 fix(server): clean up close-server logic (Add stalebot web3/web3.js#3607)
• 1c9c2de fix(test): mark all second connections reconnects (Add Netlify to rtd web3/web3.js#3598)
• 87f7e5e chore(license): Update copyright notice to 2020 [ci skip] (eth.getBlock sometimes returns an array web3/web3.js#3568)
• e6b045f chore(deps): npm audit fix the package-lock.json (Consider removal of batch.js web3/web3.js#3603)
• 3c649fa chore(build): remove obsolete Grunt tasks (Remove invisible  char from web3-utils files web3/web3.js#3602)
• 8997b74 fix(test): clear up clearContext (Adds a missing list item number in the methods.myMethod.call docs web3/web3.js#3597)
• fe0e24a chore(build): unify client bundling scripts (Can't interact with geth over http or ws from node.js express app web3/web3.js#3600)
• 1a65bf1 feat(server): remove deprecated static methods (Official documentation for web3 v0.x no longer viable web3/web3.js#3595)
• fb76ed6 chore(test): remove usage of deprecated buffer API (format fromBlock param on resubscription web3/web3.js#3596)
• 35a5842 feat(server): print stack of unhandledrejections (Fix param encoding for BN in arrays web3/web3.js#3593)
• 4a8178f fix(client): do not reset karmaNavigating in unload handler (Decoding array of struct (MyStruct[]) to an array of objects? web3/web3.js#3591)
• 603bbc0 feat(cli): error out on unexpected options or parameters (Support for Diamonds web3/web3.js#3589)
• 7a3bd55 feat: remove support for running dart code in the browser (Incorrect encoding of BigNumber for uint256[] web3/web3.js#3592)
• 1b9e1de fix(deps): bump socket-io to v3 (Fix Function type log params decoding  web3/web3.js#3586)
• 3fed0bc fix(cve): update yargs to 16.1.1 to fix cve-2020-7774 in y18n (Remove webocket native dependency. web3/web3.js#3578)
• f819fa8 fix(cve): update ua-parser-js to 0.7.23 to fix CVE-2020-7793 ("Genesis" still referenced in docs but not valid as per #2068 web3/web3.js#3584)
• 05dc288 fix(context): do not error when karma is navigating (Fix wallet test suite race conditions web3/web3.js#3565)
• e5086fc docs: clarify `browser_complete` vs `run_complete`

See the full diff

Package name: mocha

The new version differs by 250 commits.

• e1194ab Release v8.3.0
• 9e75153 update CHANGELOG for v8.3.0 [ci skip]
• 6dd12be match supporter's properties with supporter.js (unable to catch "Invalid JSON RPC Response" exception web3/web3.js#4569)
• 9f2dd41 docs: add example of generating tests with a closure (4.x build analysis web3/web3.js#4494)
• 9122909 Adds BigInt support to stringify util function (Retrieving the private/ public key for a specific path from truffle/hdwallet-provider web3/web3.js#4112)
• 9878f32 Add file location when SyntaxError happens in ESM (Invalid gas check web3/web3.js#4557)
• 84d0c96 Deps: update workerpool (Update all the dependencies for the 4.x rewrite web3/web3.js#4566)
• 3c2f82f GH actions: purge-expired-artifacts.yml (Create web3-eth-contract package structure for the 4.x web3/web3.js#4565)
• 1a05ad7 chore(deps): upgrade all to latest stable (Improve formatParam to not mutate the input web3/web3.js#4556)
• c667d10 docs: fix javascript syntax errors (Consistent encoding/decoding of the parameters  web3/web3.js#4555)
• 6eb3c3c Update dependencies yargs and yargs-parser ([4.x] Tests for injected providers web3/web3.js#4543)
• 30d5b66 Fix workflow filter on pull-request event (Create web3-eth-ens package structure for the 4.x web3/web3.js#4550)
• 6bcb89e Improve CI tests workflow (Documentation update web3/web3.js#4547)
• c21a90f Fix present year in LICENSE (Typescript compile error web3/web3.js#4542)
• c3c976b fixes require path
• bc8ce05 add test for this.test.error() behavior in "after each" hooks
• 78a41d1 Add GH Actions workflow status badge (Init web3-eth web3/web3.js#4503)
• c6856ba add error code for test timeout errors
• 6d3fe26 add support for typescript-style docstrings
• 025fc2e run browser tests on GHA
• b1f26e2 handful of improvements to integration tests
• 59f31e3 fix typo in comment [ci skip]
• d1781b3 refactor collect-files to be a little more simple
• 185cada Release v8.2.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)