[Snyk] Upgrade resolve from 1.8.1 to 1.22.8

[restinpeaceinout]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade resolve from 1.8.1 to 1.22.8.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 34 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2023-10-10.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	372/1000 Why? Proof of Concept exploit, CVSS 5.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: resolve

• 1.22.8 - 2023-10-10
  
  • [Tests] rename innocent test project to avoid flawed security scanners
  • [Tests] skip some tests for a broken require.resolve in node v8.9, v9.0-v9.2
• 1.22.7 - 2023-10-10
  
  • [Tests] avoid publishing "malformed package.json" test to avoid flawed security scanners
• 1.22.6 - 2023-09-15
  
  • [Fix] allow npx resolve to work (#316)
  • [actions] use reusable rebase action
• 1.22.5 - 2023-09-14
  
  • [Fix] fix npx resolve by handling symlinks (#315)
  • [Dev Deps] update array.prototype.map
• 1.22.4 - 2023-08-04
  
  • Revert "[Refactor] deprecated lib/core.js now uses data from is-core-module also"
  • [Deps] update is-core-module
  • [Dev Deps] update @ ljharb/eslint-config, aud, semver, tape
  • [meta] commit published core.json data
• 1.22.3 - 2023-04-14
  
  • [Refactor] deprecated lib/core.js now uses data from is-core-module also
  • [Deps] update is-core-module
• 1.22.2 - 2023-04-05
  
  • [Refactor] deprecated lib/core.js now uses is-core-module
  • [meta] cp core.json on prepack instead of prepublishOnly
  • [Deps] update is-core-module
  • [Dev Deps] update @ ljharb/eslint-config, aud, tape, array.prototype.map
• 1.22.1 - 2022-06-17
  
  • [Fix] support windows virtual drive paths (#284)
  • [Deps] update is-core-module
  • [meta] use npmignore to autogenerate an npmignore file
  • [meta] do not publish appveyor.yml
  • [Dev Deps] update eslint, @ ljharb/eslint-config, tape
  • [Test] add tests for "main": false
  • [Tests] fix tests on node v12.0-12.2
  • [Test] add some sync coverage
  • [Test] fix incorrect require.resolve paths logic; enable these tests
  • [Tests] avoid tests breaking on node 11.11 - 11.13
• 1.22.0 - 2022-01-22
  
  • [New] add default support for paths to include $HOME/.node_{modules,libraries} (#273)
  • [Deps] update is-core-module
• 1.21.1 - 2022-01-21
• 1.21.0 - 2022-01-03
• 1.20.0 - 2021-02-11
• 1.19.0 - 2020-11-10
• 1.18.1 - 2020-10-19
• 1.18.0 - 2020-10-19
• 1.17.0 - 2020-04-22
• 1.16.1 - 2020-04-17
• 1.16.0 - 2020-04-15
• 1.15.1 - 2020-02-05
• 1.15.0 - 2020-01-22
• 1.14.2 - 2020-01-07
• 1.14.1 - 2019-12-19
• 1.14.0 - 2019-12-18
• 1.13.1 - 2019-11-26
• 1.13.0 - 2019-11-25
• 1.12.3 - 2019-11-26
• 1.12.2 - 2019-11-22
• 1.12.1 - 2019-11-22
• 1.12.0 - 2019-08-01
• 1.11.1 - 2019-06-03
• 1.11.0 - 2019-05-15
• 1.10.1 - 2019-04-24
• 1.10.0 - 2019-01-21
• 1.9.0 - 2018-12-17
• 1.8.1 - 2018-06-17

from resolve GitHub release notes

Commit messages

Package name: resolve

• b829872 v1.22.8
• bce4768 [Tests] rename innocent test project to avoid flawed security scanners
• f0930c0 [Tests] skip some tests for a broken `require.resolve` in node v8.9, v9.0-v9.2
• 75d3bb9 v1.22.7
• 8d58ef9 [Dev Deps] update `tape`
• 9e6f936 [Tests] avoid publishing "malformed package.json" test to avoid flawed security scanners
• 2ae67c1 v1.22.6
• 343ea44 [Fix] allow `npx resolve` to work ([Snyk] Upgrade aws-sdk from 2.275.1 to 2.730.0 #316)
• 4441c5f [actions] use reusable rebase action
• 7f3ebd0 v1.22.5
• d56d217 [Fix] fix `npx resolve` by handling symlinks ([Snyk] Upgrade aws-sdk from 2.275.1 to 2.729.0 #315)
• a08d8a8 [Dev Deps] update `array.prototype.map`
• 37504d6 v1.22.4
• 5cb0ecc [Deps] update `is-core-module`
• 2829c04 [Dev Deps] update `@ ljharb/eslint-config`, `aud`, `semver`, `tape`
• 7f99437 Revert "[Refactor] deprecated `lib/core.js` now uses data from `is-core-module` also"
• 775fd8e [meta] commit published core.json data
• d3332a2 v1.22.3
• 5e3fbba [Deps] update `is-core-module`
• 122bb64 [Refactor] deprecated `lib/core.js` now uses data from `is-core-module` also
• c2f9ce2 v1.22.2
• ed8f81b [Refactor] deprecated `lib/core.js` now uses `is-core-module`
• 1454fdf [Dev Deps] update `@ ljharb/eslint-config`, `aud`, `tape`
• 531b6f6 [Dev Deps] update `array.prototype.map`

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs