[Snyk] Security upgrade jsonschema-bigquery from 3.0.0 to 4.0.0

[ahsandar]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsonschema-bigquery

The new version differs by 38 commits.

• 9c152ef version bump
• 388047d Merge pull request #44 from thedumbterminal/update-deps
• 3d1102e updated all deps
• 78f6d50 Merge pull request #42 from thedumbterminal/dependabot/npm_and_yarn/lodash-4.17.19
• c80d594 Merge pull request #43 from thedumbterminal/dependabot/npm_and_yarn/node-fetch-2.6.1
• 72dc0ba Bump node-fetch from 2.6.0 to 2.6.1
• 7592841 Bump lodash from 4.17.15 to 4.17.19
• d94b22b Merge pull request #41 from thedumbterminal/oneof-dates
• 22006bf remove duplicated descriptions and support date formats in OneOf or
• a3acaaf actual version bump
• b509382 updated tests and version bump
• e48a39e Merge pull request #39 from amwidi77/master
• b66c548 Merge pull request #40 from thedumbterminal/dep-update
• d0ff615 updated travis shield
• 69af1a6 updated deps
• a6d8b50 resolved issue where arrays with oneOf including NULLs were switched to NULLABLE.
• 7c13ba4 updated readme.
• 6b74f4f Merge pull request [Snyk] Fix for 1 vulnerabilities #1 from amwidi77/add-ability-to-skip-json-errors
• 0ce73d8 Updated to remove empty elements and added integration test.
• 03e0eaf Added ability to skip errors in schema json
• c5dd6e2 Merge pull request #38 from thedumbterminal/dependabot/npm_and_yarn/https-proxy-agent-2.2.4
• aadf2ee Bump https-proxy-agent from 2.2.1 to 2.2.4
• 74d04b4 Merge pull request #37 from thedumbterminal/dependabot/npm_and_yarn/acorn-6.4.1
• 00db96a Bump acorn from 6.1.1 to 6.4.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation