[Snyk] Security upgrade @salesforce/core from 2.25.1 to 2.36.4

[Sarrac3873]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/salesforcedx-sobjects-faux-generator/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	220/1000 Why? Confidentiality impact: High, Integrity impact: High, Availability impact: High, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): High, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00157, Social Trends: No, Days since published: 1099, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: High, Package Popularity Score: 94, Impact: 9.79, Likelihood: 2.24, Score Version: V5	Arbitrary Code Execution SNYK-JS-JSEN-1014670	No	Proof of Concept
	118/1000 Why? Confidentiality impact: Low, Integrity impact: Low, Availability impact: None, Scope: Unchanged, Exploit Maturity: Proof of Concept, User Interaction (UI): None, Privileges Required (PR): None, Attack Complexity: Low, Attack Vector: Network, EPSS: 0.00173, Social Trends: No, Days since published: 150, Reachable: No, Transitive dependency: Yes, Is Malicious: No, Business Criticality: High, Provider Urgency: Medium, Package Popularity Score: 99, Impact: 4.19, Likelihood: 2.81, Score Version: V5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @salesforce/core

The new version differs by 250 commits.

• 8b24221 chore(release): 2.36.4 [ci skip]
• 0dde8a7 Merge pull request Add new signed jar with new cert forcedotcom/salesforcedx-vscode#569 from forcedotcom/ew/remove-jsen
• f2078e3 Merge branch 'main' into ew/remove-jsen
• 2f44345 fix: disable strictSchema
• a0868d1 fix: schema comment
• 95c0710 fix: test failures and cleanup
• 02da38c chore(release): 2.36.3 [ci skip]
• 16a5423 fix: log rotation errors (Use extensionPack instead of extensionDependencies property for defining pack forcedotcom/salesforcedx-vscode#562)
• b19587c chore: use salesforce-cli context
• b86faa2 chore(release): 2.36.2 [ci skip]
• 739723a chore: cleanup
• 3e8d108 Merge pull request Update node types to version 8.0.0 forcedotcom/salesforcedx-vscode#567 from forcedotcom/bm/W-10657353
• 845fb17 Merge branch 'main' into bm/W-10657353
• 8e2900b chore: bump to 2.36.2
• 87ca60c fix: replace JSEN with AJV (wip)
• 4a940f4 Merge pull request Missing functionality forcedotcom/salesforcedx-vscode#535 from forcedotcom/bm/W-10657353
• e6a2871 Merge branch 'main' into bm/W-10657353
• 02015bb chore(release): 2.36.1 [ci skip]
• 105bc9a fix: sandbox cname recognition (Disable source commands when they do not match the default org type forcedotcom/salesforcedx-vscode#555)
• 4073395 chore: use optional chain
• fa3b9cc test: add plugin-org to the list of nuts
• f1782c3 Merge pull request Add Test Runner Panel to VS Code forcedotcom/salesforcedx-vscode#552 from forcedotcom/wr/removePlugins
• 949ce54 test: remove parking-orbit plugins from CI
• ad09621 Merge remote-tracking branch 'origin/main' into bm/W-10657353

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Execution
🦉 Prototype Pollution