[Snyk] Fix for 1 vulnerabilities

[Fisch80]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: broccoli-funnel

The new version differs by 43 commits.

• 0492493 release v3.0.1 🎉
• 0639edd Bump changelog
• 221029b bump deps
• 338f9ad Merge pull request [WIP] Update testem integration adopted-ember-addons/ember-electron#120 from SparshithNR/fs-facade
• 9679020 Removing all the fs operation. Use input/output
• d0761b0 Migrating to input/output facade
• 05eaaf7 release v3.0.0 🎉
• f1cc4cf bump changelog for 3.x
• ac14282 Merge pull request Add explanation on --platform command adopted-ember-addons/ember-electron#116 from SparshithNR/revamp-test
• ed1aa5d Revamp test with broccoli-test-helper
• 2c91f2f Merge pull request 🐛 Use win32metadata in blueprint instead of version-string adopted-ember-addons/ember-electron#117 from SparshithNR/to-class
• 05a7e13 Rebase with master
• 1a8799c Update README.md
• 2fc79fc Changing to class
• f46e353 Merge pull request Platform flag has no description of what it does adopted-ember-addons/ember-electron#115 from SparshithNR/node-update
• b3176b2 async await in tests
• 3f3fe58 cleanup & use modern features & update deps
• 754f73b Drop node 8
• 96cdac6 Check if path exist using access & stat functions
• e2b3266 Drop node 4, 6, 7 support. Add 10, 12
• 50ea34e Merge pull request Trying to install in new Ember project adopted-ember-addons/ember-electron#108 from jrowlingson/feature/update-readme
• 018a982 Update readme examples
• fc12aaf Remove broken auto-publishing via preversion/postversion scripts
• 87c784d v2.0.2

See the full diff

Package name: broccoli-merge-trees

The new version differs by 2 commits.

• 45d4f7b Release version 2.0.0
• 3f5cbdb Extract logic into node-merge-trees. Requires Node >= 4

See the full diff

Package name: electron-forge

The new version differs by 250 commits.

• 8b290d6 5.2.3
• ab31294 updated CHANGELOG.md
• 8d16b20 chore(maker): upgrade electron-wix-msi to 2.x
• d194f6e fix(maker): return the correct outPath for a deb prerelease version (Fix handle-file-urls on Windows adopted-ember-addons/ember-electron#589)
• befdf65 5.2.2
• 0d36963 updated CHANGELOG.md
• 602f030 fix(packager): disable the all option (build(deps-dev): bump ember-cli-htmlbars from 5.1.2 to 5.2.0 adopted-ember-addons/ember-electron#509)
• 977d112 5.2.1
• 461eb74 updated CHANGELOG.md
• 15a6879 fix(publisher): remove deprecated option from @ octokit/rest params
• e26de71 fix(initializer): fix setting Electron version in.compilerc when it's x.0 (build(deps-dev): bump sass from 1.26.8 to 1.26.9 adopted-ember-addons/ember-electron#506)
• 049055c 5.2.0
• 2e9becf updated CHANGELOG.md
• 2f1888e feat(publisher): Allow custom release channel for ERS (build(deps-dev): bump release-it from 13.5.8 to 13.6.0 adopted-ember-addons/ember-electron#474)
• 489a25c refactor(generic): incorporate changes requested in PR
• 05874ae feat(generic): allow specifying electron-prebuilt-compile via URL
• 1075d68 refactor(packager): decouple electron version from packageJSON
• e4f6573 Remove duplicate version changelog
• f173d57 5.1.2
• 340bc9d updated CHANGELOG.md
• f761424 updated CHANGELOG.md
• fe897a4 Travis: set snapcraft debug so the build doesn't time out
• d95a9d8 Building a snap takes 10+ minutes, apparently
• ccb7575 Point badges to the correct branch

See the full diff

Package name: ember-cli-babel

The new version differs by 250 commits.

• 9101d11 Release 8.0.0
• fdc667c Merge pull request build(deps): [security] bump websocket-extensions from 0.1.3 to 0.1.4 adopted-ember-addons/ember-electron#496 from babel/update-dev-deps
• c343860 Merge pull request build(deps-dev): bump ember-cli-htmlbars from 5.1.0 to 5.1.1 adopted-ember-addons/ember-electron#467 from ijlee2/clarify-enableTypeScriptTransform
• b17cf14 Remove `ie 11` from browser targets in dummy app
• 3b16ee8 Reroll lock file
• cc45f98 Fix node tests
• 1fa4afe Update `@ ember/test-helpers`, `ember-cli`, `ember-qunit` and `ember-source`
• f5cf496 Update `ember-source-channel-url`
• 463e6a8 Update `regenerator-runtime`
• ad1471b Remove `lerna-changelog`
• 3f927fd Update `fixturify-project`
• d110318 Update `release-it` and plugins
• 09ced1b Update all development dependencies with minor changes
• 4b69a55 Update all development dependencies with patch changes
• 0697a1a Update `eslint` and plugins
• b28f98d Update `ember-resolver` and `@ ember/string`
• 92bd4b7 Update `rimraf`
• aad0553 Merge pull request build(deps-dev): bump fs-extra from 9.0.0 to 9.0.1 adopted-ember-addons/ember-electron#494 from babel/update-broccoli-babel-transpiler
• bfa9526 Update `broccoli-babel-transpiler` to v8
• cb701dc Merge pull request build(deps-dev): bump eslint-plugin-ember from 8.5.2 to 8.6.0 adopted-ember-addons/ember-electron#492 from babel/update-babel-plugin-module-resolver
• f5fa387 Merge pull request build(deps): bump ember-cli-babel from 7.20.4 to 7.20.5 adopted-ember-addons/ember-electron#493 from babel/update-node-support
• c5dfa5e Drop support for Node v14 and add support for Node v20
• 515d572 Update `babel-plugin-module-resolver`
• ea58db8 Merge pull request build(deps-dev): bump eslint from 7.0.0 to 7.1.0 adopted-ember-addons/ember-electron#482 from babel/dependabot/npm_and_yarn/webpack-5.76.0

See the full diff

Package name: ember-inspector

The new version differs by 181 commits.

• 2bc5b38 Merge branch 'master' into stable
• feb66b5 Merge pull request build(deps-dev): bump ember-cli-htmlbars from 5.6.4 to 5.6.5 adopted-ember-addons/ember-electron#766 from teddyzeenny/add-travis-branches
• 624e8cb Add branches to build in Travis CI
• 7bffe6f Merge pull request build(deps-dev): bump qunit from 2.14.0 to 2.14.1 adopted-ember-addons/ember-electron#767 from emberjs/fix-assertion
• dfbe0dc Fix text field assertion
• 2a0a70d Merge branch 'master' into stable
• 1aa8f03 Merge pull request build(deps-dev): bump chai from 4.3.3 to 4.3.4 adopted-ember-addons/ember-electron#765 from teddyzeenny/reset-app
• 86689da Merge pull request Fix making/building with a custom output path adopted-ember-addons/ember-electron#638 from pablobm/session-storage-check
• 3fd6809 Avoid error in some environments
• 7a8d427 Cleanup
• a3f80a9 Fix inspector reset on client app reset and destroy
• a92447d Merge pull request build(deps-dev): bump eslint from 7.21.0 to 7.22.0 adopted-ember-addons/ember-electron#764 from teddyzeenny/version-3.0
• 3b43deb Bump version to 3.0.0
• d865fec Ember 3.0, dep updates, testing updates, and codemods (build(deps-dev): bump ember-qunit from 5.1.3 to 5.1.4 adopted-ember-addons/ember-electron#762)
• bd35cc5 Merge pull request build(deps-dev): bump ember-source from 3.25.2 to 3.25.3 adopted-ember-addons/ember-electron#761 from emberjs/remove-new-computed
• d32c4c3 Merge pull request build(deps-dev): bump @babel/core from 7.13.8 to 7.13.10 adopted-ember-addons/ember-electron#760 from emberjs/remove-get-template
• d24f88f Remove computedPolyfill
• 041dde1 Remove getTemplate stuff
• 7222143 Merge pull request build(deps-dev): bump ember-source from 3.25.1 to 3.25.2 adopted-ember-addons/ember-electron#757 from omarhamdan/add-documentation
• 43991ea Fix file paths displayed in the routes tab
• 84645dd Merge pull request build(deps-dev): bump mocha from 8.3.0 to 8.3.1 adopted-ember-addons/ember-electron#755 from omarhamdan/add-documentation
• b12d13c Add Documentation
• 91275c4 Merge pull request Use process.execPath is the test runner adopted-ember-addons/ember-electron#751 from rwwagner90/ember-qunit-coemod
• 7d23e3e Merge pull request build(deps-dev): bump chai from 4.3.1 to 4.3.3 adopted-ember-addons/ember-electron#753 from XuluWarrior/allow-empty-mixins

See the full diff

Package name: globby

The new version differs by 75 commits.

• 45ac58a 11.0.0
• 3c93fa1 Re-enable test for Ability to customise browser window options adopted-ember-addons/ember-electron#97
• 4a471af Require Node.js 10
• d4681a4 Get rid of `glob` dependency (ember electron:package fails to install npm modules adopted-ember-addons/ember-electron#135)
• 8bc1ab0 10.0.2
• 72e775a Fix using `gitignore` and `absolute` options at the same time on Windows (How to access my ember-app's service adopted-ember-addons/ember-electron#137)
• c61561a Fix TypeScript type for the `expandDirectories` option (Fix missing comma in README.md adopted-ember-addons/ember-electron#138)
• 51611f5 Tidelift tasks
• 4a47044 10.0.1
• a226f5d Don't throw when specifying a non-existing `cwd` directory (cannot fetch json data from remote url after packaging ember electron app adopted-ember-addons/ember-electron#125)
• 5b0834a Readme tweaks
• 878ef6e 10.0.0
• 3706920 Upgrade `fast-glob` package to v3 (Electron Deprecation: The version parameter is deprecated, use electronVersion instead adopted-ember-addons/ember-electron#126)
• 8aadde8 Add `globby.stream` ('requireNode' is not defined adopted-ember-addons/ember-electron#113)
• 2dd76d2 Remove `**/bower_components/**` as a default ignore pattern
• 9f781ce Require Node.js 8
• 04d51bf Upgrade `ignore` package ([WIP] Update testem integration adopted-ember-addons/ember-electron#120)
• 2b61484 Readme tweaks
• ff3e1f9 Tidelift tasks
• 31f18ae Create funding.yml
• 33ca01c Fix using the `gitignore` and `stats` options together (Ember Environment not Accessible from Background Process adopted-ember-addons/ember-electron#121)
• c737820 Minor TypeScript definition improvements
• 82db101 Add Node.js 12 to testing (🐛 Use win32metadata in blueprint instead of version-string adopted-ember-addons/ember-electron#117)
• 766b728 9.2.0

See the full diff

Package name: npmi

The new version differs by 16 commits.

• 3d7da3d v4.0.0: using global-npm instead of npm as local dep
• a14d55b Merge pull request [Snyk] Fix for 1 vulnerable dependencies #16 from karanjthakkar/global-npm
• 5687dd9 Bump pkg version to 4.0.0
• 9847690 Use global npm instead of local installation
• 4167957 ack @ lukaskollmer
• e6d4338 doc warning for npm 5 regarding local modules
• 4d043cc gotta put mocha in devDeps
• 7a91a4a Merge pull request [Snyk] Fix for 15 vulnerable dependencies #14 from lukaskollmer/master
• a0c7ec5 Update README.md
• fe6d7fe Update .travis.yml
• 2fd8fc4 Bump version
• bb12fc6 Update depencencies
• f714a75 Update README.md
• 1deebb4 README ack for HEADS
• 8db04f7 Update README.md
• 94b534e Update README.md

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.