[Snyk] Security upgrade sign-addon from 6.0.0 to 6.4.0

[patooworld]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	169/1000 Why? Confidentiality impact: None, Integrity impact: None, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00091, Social Trends: No, Days since published: 227, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 99, Impact: 5.99, Likelihood: 2.81, Score Version: V5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: sign-addon

The new version differs by 153 commits.

• ec6461b chore(release): ⬆️ release 6.4.0
• fa66cfb chore(deps-dev): bump @ babel/preset-env from 7.23.7 to 7.23.8 (fix: Fixed travis windows failures related to the FakeStdin used in the unit tests mozilla/web-ext#1403)
• b786d6d chore(deps-dev): bump @ babel/preset-env from 7.23.6 to 7.23.7 (feat: Added release channel as optional sign parameter (simple test) mozilla/web-ext#1400)
• cf06b50 chore(deps): bump core-js from 3.34.0 to 3.35.0 (Unknown argument: firefox mozilla/web-ext#1399)
• ad7ec58 chore(deps-dev): bump @ babel/register from 7.22.15 to 7.23.7 (Unmet peer dependency @babel/register@7.0.0 mozilla/web-ext#1401)
• 830d8b7 chore(deps-dev): bump @ babel/core from 7.23.6 to 7.23.7 (Create a Web Version for Web-Ext mozilla/web-ext#1402)
• 4c7531b chore(deps-dev): bump eslint from 8.55.0 to 8.56.0 (Update doctoc to the latest version 🚀 mozilla/web-ext#1398)
• 317c9d0 chore(deps-dev): bump @ babel/preset-env from 7.23.5 to 7.23.6 (Update addons-linter to the latest version 🚀 mozilla/web-ext#1397)
• 9d2f234 chore(deps-dev): bump @ babel/core from 7.23.5 to 7.23.6 (fix: Prevent travis windows worker from trying to deploy new tags on npm mozilla/web-ext#1396)
• b13ce70 chore(deps-dev): bump typescript from 5.3.2 to 5.3.3 (fix(package): update addons-linter to version 1.3.8 mozilla/web-ext#1395)
• a366198 chore(deps): bump core-js from 3.33.3 to 3.34.0 (Update require-uncached to the latest version 🚀 mozilla/web-ext#1394)
• f07f75b chore(deps-dev): bump @ babel/preset-env from 7.23.3 to 7.23.5 (feat: Support chromium-based browsers as web-ext run targets mozilla/web-ext#1392)
• 3eae0a9 chore(deps-dev): bump @ babel/core from 7.23.3 to 7.23.5 (fix(firefox-android): Support abstract sockets for RDB mozilla/web-ext#1391)
• cfa169c chore(deps-dev): bump eslint from 8.54.0 to 8.55.0 (Preinstall add-ons during web-ext run? mozilla/web-ext#1393)
• 97774d3 chore(deps-dev): bump @ types/mz from 2.7.7 to 2.7.8 (Replace nsp w/ npm audit mozilla/web-ext#1390)
• 0d3cc95 chore(deps-dev): bump @ babel/cli from 7.23.0 to 7.23.4 (Investigate and re-enable test.extension-runners.js unit test skipped on travis windows workers mozilla/web-ext#1386)
• d870856 chore(deps): bump core-js from 3.33.2 to 3.33.3 (chore: Skip node_js 6 on travis windows workers mozilla/web-ext#1387)
• 46c32b6 chore(deps-dev): bump typescript from 5.2.2 to 5.3.2 (Update conventional-changelog-cli to the latest version 🚀 mozilla/web-ext#1388)
• dc0818d chore(deps-dev): bump eslint from 8.53.0 to 8.54.0 (chore: Skipped nsp-check and travis-pr-title-lint npm scripts on travis windows workers mozilla/web-ext#1389)
• 1f12596 chore(deps-dev): bump @ babel/core from 7.23.2 to 7.23.3 (Error on starting after force CTRL+C mozilla/web-ext#1383)
• 3f00228 chore(deps-dev): bump @ babel/preset-env from 7.23.2 to 7.23.3 (web-ext run doesn't clone the extensions folder in specified profile mozilla/web-ext#1384)
• ae3c514 chore(deps-dev): bump @ babel/eslint-parser from 7.22.15 to 7.23.3 (chore: Run tests on windows using travis mozilla/web-ext#1385)
• 9b27b91 chore(deps-dev): bump @ types/shelljs from 0.8.14 to 0.8.15 (Consider running tests in ava for a speed boost mozilla/web-ext#1378)
• 3338014 chore(deps-dev): bump @ types/mz from 2.7.6 to 2.7.7 (Consider using TravisCI for Windows testing mozilla/web-ext#1380)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)