[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @vue/cli

The new version differs by 227 commits.

• 4659869 v4.3.0
• 4b31d8a chore: pre release sync
• 016bb32 chore: bump typescript version to 3.8
• 5c8c614 chore: update download-git-repo to the latest major
• ee05918 chore: dependency maintenance
• 960400b chore: merge branch 'master' into dev
• 0051017 feat(service): Allow mocha unit tests debugger to be bound to a specified IP and port (#5294)
• 3d200ce fix(ui): change git initialization commit message placeholder text (#5329)
• 55d3375 feat: enable `bugfixes` option for babel by default (#5322)
• a1041a8 fix: avoid process hanging when trying to get Chrome version (#5315)
• 4225c30 feat: support vue.config.cjs (#5293)
• d8afaa0 fix(ui): build task defaults should respect outputDir option from config file (#5290)
• ef9f7bf chore(cli-service-global): remove direct dependency on @ vue/babel-preset-app (#5319)
• ebcee9a fix: spawn scripts with node, fix modern mode with Yarn 2 (Berry) (#5320)
• f1bdf73 refactor: simplify config loading by skip `fs.existsSync` check (#5305)
• 5b1709a fix(target-lib): fix dynamic public path in a dynamic chunk in Firefox (#5247)
• db64c5b feat: wc entry accepts multiple file patterns splited by ',' (#3886)
• e5449ad feat(vue-cli): Choosing to save as a preset tells you where it is saved (#5212)
• c8e6450 fix(pwa): null check icon paths (#5087)
• 3633cf5 feat: use @ vue/compiler-sfc as a compiler for TS if available (#5170)
• 12f3d3b chore(eslint): Bump eslint-loader version to support ESLint 6 (#5273)
• 36c6c2e fix: fix severity config in ui (#5242)
• 41cf5e1 feat: ease the default `no-console` severity to `warn` (#5241)
• a1782f9 feat: add "not dead" to the default browserslist query (#5233)

See the full diff

Package name: eslint

The new version differs by 250 commits.

• 3dd6741 7.0.0
• 9a722f9 Build: changelog update for 7.0.0
• b98d8bd Upgrade: [email protected] (#13271)
• 4c0b028 Fix: remove Node.js and CommonJS category from build process (#13242)
• 401a687 Chore: fix rules list for prereleases (#13230)
• 4ef6158 Breaking: [email protected] (#13270)
• b5c8d73 Docs: update 7.0.0 migration guide for consistency (#13267)
• 356fdb4 Docs: add migration guide (#12692)
• 015edf6 Sponsors: Sync README with website
• fdfa364 7.0.0-rc.0
• 8d1b4db Build: changelog update for 7.0.0-rc.0
• 0b1d65a Update: Improve report location for array-callback-return (refs #12334) (#13109)
• d85e291 Fix: yoda left string fix for exceptRange (fixes #12883) (#13052)
• 2ce6bed Chore: added tests for nested arrays (#13145)
• d3aac53 Update: report backtick loc in no-unexpected-multiline (refs #12334) (#13142)
• 8e7a2d9 Fix: func-call-spacing "never" reports wrong message (fixes #13190) (#13193)
• bcafd0f Update: Add ESLint API (refs New: ESLint Class Replacing CLIEngine eslint/rfcs#40) (#12939)
• 3eeae56 Upgrade: some (dev) deps (#13155)
• 6b7030b Chore: Run tests on Node.js v14 (#13210)
• ebc28d7 Fix: Remove default .js from --ext CLI option (#13176)
• 5c1bdeb Update: Improve report location for getter-return (refs #12334) (#13164)
• 56d2bee Docs: fix typos (#13204)
• e13256e Chore: use espree.latestEcmaVersion in config-initializer (#13157)
• e4f57b7 Chore: add nested array tests for array-element-newline (#13161)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic