[Snyk] Fix for 5 vulnerabilities

[Sarrac3873]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/salesforcedx-vscode-soql/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Arbitrary Code Execution SNYK-JS-JSEN-1014670	No	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Prototype Pollution SNYK-JS-XML2JS-5414874	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @salesforce/core

The new version differs by 250 commits.

• 8b24221 chore(release): 2.36.4 [ci skip]
• 0dde8a7 Merge pull request Add new signed jar with new cert forcedotcom/salesforcedx-vscode#569 from forcedotcom/ew/remove-jsen
• f2078e3 Merge branch 'main' into ew/remove-jsen
• 2f44345 fix: disable strictSchema
• a0868d1 fix: schema comment
• 95c0710 fix: test failures and cleanup
• 02da38c chore(release): 2.36.3 [ci skip]
• 16a5423 fix: log rotation errors (Use extensionPack instead of extensionDependencies property for defining pack forcedotcom/salesforcedx-vscode#562)
• b19587c chore: use salesforce-cli context
• b86faa2 chore(release): 2.36.2 [ci skip]
• 739723a chore: cleanup
• 3e8d108 Merge pull request Update node types to version 8.0.0 forcedotcom/salesforcedx-vscode#567 from forcedotcom/bm/W-10657353
• 845fb17 Merge branch 'main' into bm/W-10657353
• 8e2900b chore: bump to 2.36.2
• 87ca60c fix: replace JSEN with AJV (wip)
• 4a940f4 Merge pull request Missing functionality forcedotcom/salesforcedx-vscode#535 from forcedotcom/bm/W-10657353
• e6a2871 Merge branch 'main' into bm/W-10657353
• 02015bb chore(release): 2.36.1 [ci skip]
• 105bc9a fix: sandbox cname recognition (Disable source commands when they do not match the default org type forcedotcom/salesforcedx-vscode#555)
• 4073395 chore: use optional chain
• fa3b9cc test: add plugin-org to the list of nuts
• f1782c3 Merge pull request Add Test Runner Panel to VS Code forcedotcom/salesforcedx-vscode#552 from forcedotcom/wr/removePlugins
• 949ce54 test: remove parking-orbit plugins from CI
• ad09621 Merge remote-tracking branch 'origin/main' into bm/W-10657353

See the full diff

Package name: vscode-extension-tester

The new version differs by 100 commits.

• c9f7f3b 5.3.0
• 349be28 Upversion locators to 3.3.0
• bbee4a1 Upversion page-objects to 3.3.0
• aed95a4 Bump selenium-webdriver from 4.7.1 to 4.8.0
• c987c7e Bump @ types/glob from 8.0.0 to 8.0.1
• e9112e6 Cannot use WebView.switchToFrame() with VSCode 1.74+ when there are several webview opened (#594)
• a8128de Provide only one specific CI workflow for main branch (Go To Definition doesn't working on methods forcedotcom/salesforcedx-vscode#596)
• 8c07d32 Solve warnings about used deprecated dependencies (Problems window is not populated with errors during compile forcedotcom/salesforcedx-vscode#595)
• 5ebdc99 Bump rimraf from 4.1.0 to 4.1.1 in /page-objects (Autocomplete does not include the sustom SObject suffix (__c) forcedotcom/salesforcedx-vscode#592)
• ab5cbf8 Bump @ types/fs-extra from 9.0.13 to 11.0.1 (Update changelog for release v43.13.0 forcedotcom/salesforcedx-vscode#591)
• a03ecd7 Bump rimraf from 3.0.2 to 4.1.1 (Add doc for Apex Tests sidebar forcedotcom/salesforcedx-vscode#590)
• 206f063 Bump rimraf from 3.0.2 to 4.1.1 in /locators (Generate SObject type definitions for LWC forcedotcom/salesforcedx-vscode#589)
• 9a2fe4f Bump rimraf from 3.0.2 to 4.1.0 in /page-objects (Null pointer exceptions from Apex Language Service forcedotcom/salesforcedx-vscode#587)
• 1239d3c Bump @ types/fs-extra from 9.0.13 to 11.0.1 in /page-objects (Manifest doesn't influence deployment from folder forcedotcom/salesforcedx-vscode#586)
• d3265fc Bump glob from 8.0.3 to 8.1.0 (Re-enable system tests forcedotcom/salesforcedx-vscode#585)
• db322b2 Bump commander from 9.5.0 to 10.0.0 (Unexpected argument --manifest forcedotcom/salesforcedx-vscode#584)
• bc843cc Bump @ types/selenium-webdriver from 4.1.9 to 4.1.10 in /page-objects (ApexIndexer throwing NullPointerException forcedotcom/salesforcedx-vscode#581)
• 9f60452 Enable npm package caching (Deploy/retrieve to support metadata API format forcedotcom/salesforcedx-vscode#580)
• c74f3db Bump typescript from 4.9.3 to 4.9.4 in /page-objects (Can't run SFDX commands from Command Palette if sfdx is installed via npm forcedotcom/salesforcedx-vscode#553)
• 5d2c0ab Bump compare-versions from 5.0.1 to 5.0.3 in /page-objects (Temporarily do not run system tests forcedotcom/salesforcedx-vscode#559)
• c922c0b Bump fs-extra from 10.1.0 to 11.1.0 (Temporarily skip failing tests forcedotcom/salesforcedx-vscode#554)
• 205aab2 Bump typescript from 4.9.3 to 4.9.4 in /locators (Add Test Runner Panel to VS Code forcedotcom/salesforcedx-vscode#552)
• 383dfae Bump mocha from 10.1.0 to 10.2.0 (Deploy on Save forcedotcom/salesforcedx-vscode#577)
• 464b749 Bump fs-extra from 10.1.0 to 11.1.0 in /page-objects (Use extensionPack instead of extensionDependencies property for defining pack forcedotcom/salesforcedx-vscode#562)

See the full diff

Package name: webpack

The new version differs by 250 commits.

• 610f368 5.0.0
• 5ce65c1 update examples
• bbe1230 Merge pull request #11628 from webpack/bugfix/real-content-hash
• 75ecff2 5.0.0-rc.6
• bfc35d6 Merge pull request #11603 from MayaWolf/master
• 76e8cbd Merge pull request #11622 from webpack/dependabot/npm_and_yarn/types/node-13.13.25
• 9fd1be2 chore(deps-dev): bump @ types/node from 13.13.23 to 13.13.25
• 36bcfaa Merge pull request #11621 from webpack/bugfix/11619
• 9130d10 fix called variables with ProvidePlugin
• 3e42105 Merge pull request #11620 from webpack/bugfix/11617
• 4709719 skip connections copied to concatenated module
• 57b493f 5.0.0-rc.5
• 1658e2f Merge pull request #11618 from webpack/bugfix/11615
• a8fb45d fixes crash in SideEffectsFlagPlugin
• 84b196d emit error instead of crashing when unexpected problem occurs
• 5573fed Merge pull request #11601 from Hornwitser/improve-suggested-polyfill-config
• 9b5cce9 Merge pull request #11609 from snitin315/export-types
• 37c495c export type RuleSetUseItem
• 39faf34 export type RuleSetUse
• e5fd246 export type RuleSetConditionAbsolute
• 660baad export RuleSetCondition types
• 13e3ca5 Merge pull request #11602 from webpack/bugfix/shared-runtime-chunk
• 9c0587e Merge pull request #11606 from webpack/dependabot/npm_and_yarn/simple-git-2.21.0
• 502d166 Merge pull request #11607 from webpack/dependabot/npm_and_yarn/acorn-8.0.4

See the full diff

Package name: webpack-cli

The new version differs by 250 commits.

• fb50f76 chore(release): publish new version
• 2c75aeb chore: new version of the packages
• 0d05c30 chore(release): publish %s
• 3f9e151 chore: fix lerna config
• 2c1e34c tests(generator): enhance init generator tests (Move sObject Refresh command to apex module and improve telemetry forcedotcom/salesforcedx-vscode#1236)
• 6ee61b9 Fix loader-generator and plugin-generator tests (Extension causes high cpu load forcedotcom/salesforcedx-vscode#1250)
• 52956a2 Fixing the typos and grammatical errors in Readme files (Refactor "create template commands" to reduce code duplication forcedotcom/salesforcedx-vscode#1246)
• 7faaed2 chore: update Bug_report & Feature_request Templates (Overriding a virtual base class method using auto-complete missing parameter types. forcedotcom/salesforcedx-vscode#1256)
• 7a5b33d feat(webpack-cli): added mode argument (update Lightning LSPs to 2.1.0 / add new activation logic forcedotcom/salesforcedx-vscode#1253)
• 3715756 tests(webpack-cli): add test case for defaults flag (Only changes to fix issues with settings.json forcedotcom/salesforcedx-vscode#1254)
• a7cba2f chore: project maintanance and typescript fix (Comment out test failure caused by issue in vscode 1.33.0 and above forcedotcom/salesforcedx-vscode#1247)
• 7748472 chore: ignore package-lock.json and remove its references (SFDX: Create Project failed to run forcedotcom/salesforcedx-vscode#1252)
• a014aa7 docs: fix supported arguments & commands link in README (Lightning Explorer has inconsistent open behavior forcedotcom/salesforcedx-vscode#1244)
• 06129a1 feat(webpack-cli): add progress bar for progress flag (Apex Replay will not step through class forcedotcom/salesforcedx-vscode#1238)
• 6cc6a49 chore: post refactor CLI (Retrieve default org's metadata types forcedotcom/salesforcedx-vscode#1237)
• 358651e chore: move cli under lerna package (Update telemetry for dirType on command events (#1224) forcedotcom/salesforcedx-vscode#1225)
• 2dc495a fix(init): fix webpack config scaffold (Update aura and lwc lsps to 2.1.0 forcedotcom/salesforcedx-vscode#1231)
• 1ab62d2 tests(generator): add tests for plugin generator (Expose create commands only on default folders forcedotcom/salesforcedx-vscode#1235)
• d2dd0c1 tests(sourcemap): fix flaky stats statement (fix: misc aura/lwc lsp bug fixes, support lwc component methods in tree, unknown project types forcedotcom/salesforcedx-vscode#1232)
• f6dc680 tests(loader-generator): add tests for loader generator (Set default project create template to standard forcedotcom/salesforcedx-vscode#1234)
• 35d1381 tests(generator): enable init generator test (Extension causes high cpu load forcedotcom/salesforcedx-vscode#1233)
• 66cdcb6 chore(generator): remove transpiled tests (Extension causes high cpu load forcedotcom/salesforcedx-vscode#1229)
• f29a170 fix(init): fix the invalid package name (Allow selection of multiple files/folders on Deploy/Retrieve source forcedotcom/salesforcedx-vscode#1228)
• 8c3a66d chore(cli): updated changelog of v3 (Update telemetry for dirType on command events forcedotcom/salesforcedx-vscode#1224)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Arbitrary Code Execution
🦉 Prototype Pollution