[Snyk] Fix for 2 vulnerabilities

[matthiasak]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-YARGSPARSER-560381	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: csswring

The new version differs by 27 commits.

• 4f6467b 7.0.0
• 2c31869 Update dependencies
• 8352556 Remove engines field
• aa4029e Cover with istanbul
• 7c98acc Lint
• ffe9b81 6.0.3
• b9c6429 Update dependencies
• 9021283 Merge pull request #90 from hail2u/issue89
• f9654a3 Preserve `min-width:0%` as it is
• abe0388 Prettify
• ce8b9c3 6.0.2
• 4c32163 Merge pull request #88 from hail2u/issue87
• 27e72ab Remove white spaces between quote and flag
• 172805b Support in-casesensitivity flag in attr selector
• faba5ed Version 6.0.1
• c2a91a1 Merge pull request #86 from hail2u/issue85
• e656fba Don’t remove unit of 0 from custom property value
• 569b3a9 Update dependencies
• 58015df Use noun form
• 923eed7 Version 6.0.0
• 0c9870c Update dependencies
• 1d0957e Update dependencies
• 7ffa643 Lint
• 6e1f791 Use Object#assign() for merging objects

See the full diff

Package name: postcss-cli

The new version differs by 244 commits.

• 745ad2c 7.0.0
• cf6ea09 Update eslint config
• ea1cec4 Update eslint-config-problems to version 3.1.0 (#306)
• 1519430 Update globby to version 10.0.1 (#303)
• 5b47456 Update eslint to version 6.8.0 (#305)
• e241672 Update nyc to version 15.0.0 (#297)
• 4a87ff1 Update chalk to version 3.0.0 (#294)
• e666505 Update prettier to version 1.19.1 (#304)
• 0d3591a Update ava to version 2.4.0 (#302)
• cb9f451 Update fs-extra to version 8.1.0 (#301)
• 4f68a46 Update chokidar to version 3.3.0 (#300)
• 5c22ddb Update yargs to version 15.0.2 (#298)
• 79eb0ac Update get-stdin to version 7.0.0 (#273)
• 71384c6 Update Travis config; remove AppVeyor
• 6b92df3 BREAKING: Drop Node 6 & 8; test on new Node versions
• 7091819 6.1.3
• 0de7ccf Fix map file path creation (#286)
• f1c7352 Update prettier to version 1.18.0 (#281)
• 035bab8 Update nyc to version 14.0.0 (#274)
• 541048e Update prettier to version 1.17.0 (#272)
• 8fd79b0 6.1.2
• 72376fc Upgrade prettier to ~1.16.4
• 87a7286 Update globby to v9.0.0 (#270)
• c079cff Test Node 10 & 11

See the full diff

Package name: precss

The new version differs by 23 commits.

• 9556604 4.0.0
• ec41a10 Update dependencies
• 2c81353 3.1.2
• 298a55f 3.1.1
• c675034 Add list of plugins to readme
• a1a0949 3.1.0
• 8876377 Use PostCSS Preset Env
• aaedc9e Update CHANGELOG.md
• 2fe95ae Use consistent package.json dependencies versioning
• bafe9c3 3.0.0
• 559e84d 2.0.0
• a229fd8 package.json
• 867b221 Update plugin organization
• bd71070 Merge branch 'master' of github.com:jonathantneal/precss
• 6c51f13 PostCSS 6 - updated dependencies
• d25d0ac README.md - Use scss for code blocks
• cd3279d Merge pull request #85 from jboelen/patch-1
• 2935fae .travis.yml - Node 4
• c2520f6 Merge pull request #72 from pacosegovia/master
• eb4866f Merge pull request #79 from RobLoach/fix-tests
• 1ba6285 Update postcss-partial-import dependency
• b9f8293 Fix the tests
• 04635ea Update README.md

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.