[Snyk] Fix for 1 vulnerabilities

[Billywildhig]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • workspaces/arborist/test/fixtures/tap-with-yarn-lock/node_modules/nyc/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	125/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: No data, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.01055, Social Trends: No, Days since published: 0, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.08, Score Version: V5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: glob

The new version differs by 114 commits.

• a68703e 9.0.0
• 58159ca test: cwd can be a url
• a547a9c more docs
• 42a3ac7 link to bash manual for Pattern Matching
• 474172d update readme with cwd URL support
• ad3904d update readme with posix class support
• b22fc7d minimatch@7.3.0
• cdd1627 update all the things, remove unused mkdirp types
• 75c6416 Merge branch 'v9'
• fa0cd77 cwd can be a file:// url
• d03ed0a typedoc github action
• 9a5a45a put bench results in readme
• 20b2f88 docs, fix benchmark script
• 4829c88 upgrade ci actions
• 5cbacdd minimatch@7.2.0
• 210310b omit symlinks on windows
• d34c8d5 full test coverage, clean up signals and remove extranous code
• 5f21b46 adding lots of tests, clean up types
• b12e6ba slashes on nodir test
• 75f74b0 more windows test slashes
• 3aa1abd more windows test affordances
• 3e68a7b some windows test affordances
• 8c2e082 feature complete and tests passing
• c3be35a correct ** vs ./** behavior

See the full diff

Package name: istanbul-lib-source-maps

The new version differs by 92 commits.

• 5319df6 Publish
• 5033e2e chore: Tell greenkeeper to ignore semver updates.
• 54636fc feat(text): Coalesce ranges of missing lines (npmjs site npm/cli#511)
• 9546946 Publish
• 03e7a11 chore: Bump dependencies ([BUG] UNABLE_TO_GET_ISSUER_CERT_LOCALLY npm/cli#510)
• 5afe203 fix: Add favicon to html report (docs: add netlify docs website config npm/cli#493)
• a01a2b8 fix: Do not export index.json (fix: check npm.config before accessing its members npm/cli#508)
• bf0141b Publish
• 177fd45 feat: Add support for projectRoot option ([BUG] NPM Install includes transitive devDependencies for file: dependencies. npm/cli#492)
• c69ce0c Publish
• aa8ae7f fix: Remove handlebars ([FEATURE] funding field as array npm/cli#503)
• 6d04040 Publish
• 094f1b8 fix: sourceFinder cannot be async. (fix(fund): open url for string shorthand npm/cli#501)
• 886e19c Publish
• d77cc14 fix: mappedCoverage.addStatement is not a function ([BUG] Sometimes package can't be downloaded from the public NPM registry npm/cli#500)
• 597234b chore: Pin prettier ([BUG] npm fund <package> errors when "funding" is a string npm/cli#498)
• 7c1367b Publish
• 8f8c88e fix: Produce properly merged source-maps when inputSourceMap is provided ([FEATURE] GitHub avatar instead of Gravatar on npmjs.org npm/cli#487)
• 70f48b7 Publish
• 95a2b2f fix: Add missing dependency on istanbul-lib-report ([QUESTION] how to re-publish readme after npm unpublish version-readme npm/cli#490)
• a8b3557 Publish
• f8ebbc9 feat: Convert to async API (npm function npm/cli#489)
• 4d5e777 Publish
• 68d95d2 chore: Update dependencies ([FEATURE] Please show gitlab.com repo stats on npmjs.com package pages npm/cli#488)

See the full diff

Package name: rimraf

The new version differs by 52 commits.

• 3b6b098 4.0.0
• e0cffea ci: reduce workload even more
• 0e6646d ci: remove unnecessary lint filter
• 546e017 update action versions
• 6d88a65 tone down benchmark intensity
• 842a8d2 fix benchmark workflow yaml
• 1b91697 chore: add copyright year to license
• 08bbb06 rewrite in TS, export hybrid, update changelog, docs
• 1b3f46e drop support for node versions below 14
• 2e1f003 gh actions workflow for benchmarks
• 52f9370 tests for retry-busy behavior
• 188e3ed don't test on very old node versions
• d1d5495 test for fix-eperm
• e7501cd prettier formatting
• 40f64ec windows: only fall back to move-remove when absolutely necessary
• b6f7819 update tap
• 99496cd test: run posix test on windows, why not?
• 51d43c1 benchmarks
• 6b8aa29 doc: correct os.tmp default
• 4b228c9 do not ever actually try to rmdir /
• 2442655 consolidate all the spellings of 'opt' into one
• d4eec2e add cli script
• 0c82d74 accept strings, arrays of strings, and no other types
• ad4f2db Do not rimraf /, override with preserveRoot:false

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.