[Snyk] Fix for 1 vulnerabilities

[drewm]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	461/1000 Why? Recently disclosed, Has a fix available, CVSS 3.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-DEBUG-3227433	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: metalsmith-copy

The new version differs by 20 commits.

• 9feaecf bump version to 0.4.1
• 79ac787 Merge pull request Fix small typo in managing addresses & document API email #20 from mcarneiro/master
• e51f5dd updating packages (audit fixes);
• 01825a4 bump version to 0.4.0
• 5215daa Merge branch 'ignore'
• e1874a8 add `ignore` option
• b35a48d document overwrite behavior
• 9a668c0 fix tests for force option
• 1e079d1 update minimatch and mocha, add package-lock.json
• e329ec9 fix check for required options with falsy values
• 8c3bce1 clean up README, update LICENSE year
• 0dbfc44 Merge pull request PerchAPI_Factory #13 from philippbosch/patch-1
• 54499da Add missing closing parenthesis
• cbbb905 minor: bump version to 0.3.0
• 2d23082 Merge branch 'skip-unchanged' of https://github.com/timdp/metalsmith-copy
• 7c78f7c Merge pull request PerchAPI_Base #12 from slajax/slajax/force-overwrite
• 2fd9bdb allow force overwrite
• b3ff523 Merge pull request PerchAPI_Factory #11 from ndossougbete/master
• 28a68fe Fix imports that broke when running in strict mode
• 32e0748 Skipping unchanged files

See the full diff

Package name: metalsmith-in-place

The new version differs by 11 commits.

• bb4932c 2.0.0
• b7f93dd Update readme (new member v 1.9.5 #76)
• 427055e Abstract rendering (shop changelog 1.2.7 #72)
• 1f435ea Simplify babel setup (shop changelog 1.2.6 #71)
• 93d2c78 Add yarn lockfile ([Snyk] Security upgrade metalsmith from 2.3.0 to 2.5.0 #70)
• ea296a3 Test on same node versions as metalsmith/metalsmith (Shop sca stripe #66)
• 6bca1e8 2.0.0-beta.1 ([Snyk] Security upgrade gulp-sass from 4.0.2 to 5.0.0 #57)
• 22134ec Move to jstransformer ([Snyk] Security upgrade @frctl/fractal from 1.1.7 to 1.3.0 #52)
• 968cb3c Merge pull request [Snyk] Security upgrade @frctl/fractal from 1.1.7 to 1.2.0 #51 from woodyrew/patch-1
• 011174e Error: Added filename to render callback.
• 7cb06e5 Expose consolidate.requires fix PerchAPI_Factory #13

See the full diff

Package name: metalsmith-layouts

The new version differs by 33 commits.

• 1c547d9 Prepare 2.0.0 (#140)
• 0e434ac Update dependencies to enable Greenkeeper 🌴 (#135)
• 4ddd399 v2 (#132)
• 5f83be3 Update after move (#136)
• 7b8bd9b Add custom error message to include file path (#130)
• 72952d4 Prepare 1.8.1 (#125)
• aee9acd Fixes "too many opened files" error (#120)
• d63d951 Merge pull request #118 from superwolff/remove-david-badges
• 5a9ec21 Remove david badges
• 84f43cd Merge pull request #117 from superwolff/1.8.0
• eb87b8b 1.8.0
• d9c9e3e Merge pull request #116 from micahgodbolt/include-file-in-folder-error
• e71acc1 Update documentation
• abff112 added patternExtension property to provide method for limiting which files are considered patterns
• ed5ec42 Added config file in nested folder to demonstrate error
• 8c9ba1a Merge pull request #114 from superwolff/ismay/1.7.0
• 78defcc 1.7.0
• 4002b65 Merge pull request #99 from zakhenry/fix/allow-absolute-paths
• 78f2a70 Adds check if paths are already absolute before joining the metalsmith path
• 63260ba Merge pull request qr addon #94 from imaginate/patch-1
• 2b426e5 Fixed typo in readme
• 1770c98 Expose consolidate.requires fix Shop app: perch_shop_delete_adddress() #18
• cb6e9ee Merge pull request [Snyk] Fix for 1 vulnerabilities #87 from doodzik/patch-1
• 300bcd5 changing pattern example fix V4.4 #79

See the full diff

Package name: metalsmith-markdown

The new version differs by 26 commits.

• 64dce32 1.0.1
• 9303875 Scripts: Added post version push and publish
• 902f1f8 Package - Debug: upgraded
• 6189068 relocated badges
• fdb9b16 Updated badge
• 4f90b65 Added Prettier and ESLint
• 77d81e7 1.0.0
• 8136dea History file: updated
• 2a0c309 Packages Updated
• c232a98 Merge pull request The file-type attribute  #10 from haohui/haohui-precise-match-extname
• 2685861 Merge branch 'stefanhenze-master'
• e960bfd Merge branch 'master' of https://github.com/stefanhenze/metalsmith-markdown into stefanhenze-master
• 7bd82f9 Merge pull request Namespace reminders #24 from datesss/master
• 7c40a6a Merge pull request Shop app: perch_shop_products() pagination options #16 from martinvehmas/master
• a67fed1 Merge pull request perch_shop_delete_address() #30 from Zearin/fix/Buffer
• 245dbb3 Merge pull request PerchSmartbar #6 from blakeembrey/patch-1
• baacb43 Merge pull request Shop: pagination options for runtime functions #32 from ilyaigpetrov/master
• dcfde68 Upgrade marked to 0.4.0, perch_shop_order_addresses() #31
• 1f14938 fix: Add `try`/`catch` fallback around `Buffer.from`
• fa09481 fix: `new Buffer` ▶︎ `Buffer.from`
• b7eddfa key to string to string before converting
• 491edbb Join the path as a file path with path.join
• 2ad15cc Replace backslash with slash in directory path.
• 2e049f1 Match of extension name of the markdown files with precise regex.

See the full diff

Package name: metalsmith-permalinks

The new version differs by 39 commits.

• 925c9e1 1.0.0
• 7c44016 Merge branch 'gaggle-sibling-folder-strategy'
• edede6e Prettier applied
• 5c47416 Merge branch 'sibling-folder-strategy' of https://github.com/gaggle/metalsmith-permalinks into gaggle-sibling-folder-strategy
• 832842b Merge branch 'gratex-feature-better-filenames'
• f6e9192 Merge branch 'feature-better-filenames' of https://github.com/gratex/metalsmith-permalinks into gratex-feature-better-filenames
• 14f7d3d Fixed tests
• 13e598e Merge branch 'simbo-master'
• bafa5ba Merge branch 'master' of https://github.com/simbo/metalsmith-permalinks into simbo-master
• 3ac23d4 Fixed ESLint issues introduced by PR before Travis was applied
• 27aa74b Add folder strategy to readme
• deaa8b9 Allow use of sibling-folder strategy
• 78f4b5b Test sibling folder functionality
• 937a52c Merge pull request Missing filtering options #35 from mdvorscak/master
• 9131829 Makefile not necessary
• d65bcd3 Merge pull request v1.2.9 #80 from segmentio/add-badges
• 07e6d37 Create PULL_REQUEST_TEMPLATE.md
• 7105998 Update issue templates
• e8bad5e Create CODE_OF_CONDUCT.md
• 3f2fb06 Badges added
• 5a1476e Merge pull request V4.4 #79 from segmentio/travis-fix
• b28df2c Travis: Removed Node.js v4 and v5
• 7ba5342 Substitue package path fix for old versions of npm
• 399bfb8 Merge pull request form v 1.13 #78 from segmentio/travis-and-package-updates

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)