[Snyk] Upgrade hardhat-gas-reporter from 1.0.6 to 1.0.9

[Woodpile37]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade hardhat-gas-reporter from 1.0.6 to 1.0.9.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released a year ago, on 2022-09-05.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Poisoning SNYK-JS-QS-3153490	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-Y18N-1021887	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-UGLIFYJS-1727251	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Denial of Service (DoS) npm:mem:20180117	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Open Redirect SNYK-JS-GOT-2932019	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Open Redirect SNYK-JS-GOT-2932019	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Authentication Bypass SNYK-JS-HTTPAUTH-471683	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-JSON5-3182856	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: hardhat-gas-reporter

• 1.0.9 - 2022-09-05
  

  What's Changed

  • Import libraries when they are needed by @ alcuadrado in #126

  Full Changelog: v1.0.8...v1.0.9

• 1.0.8 - 2022-02-15
  
  • Skip gas reporting when --parallel flag detected #101
• 1.0.8-para.0 - 2022-02-11
• 1.0.7 - 2022-01-10
  
  • #84
  • rest in peace aaron swartz (not in a conspiracy theory way... just rip)
• 1.0.6 - 2021-11-29
  
  • Bug fix: add TS types for token and gasPriceApi config options

from hardhat-gas-reporter GitHub release notes

Commit messages

Package name: hardhat-gas-reporter

• df6aa85 1.0.9
• 8e08b17 Upgrade hardhat to 2.11.0 (Add tag comment on CONTRIBUTING.md OpenZeppelin/openzeppelin-contracts#127)
• 12efcc6 Upgrade typescript to 4.7.4 (ejs-monorepo ver)
• 2b907ac Import libraries when they are needed (Integrate testrpc into the test command so that developers don't have to run it manually OpenZeppelin/openzeppelin-contracts#126)
• 8b3ad6d Update eth-gas-reporter to 0.2.25 (Refactor code to prepare for security audit OpenZeppelin/openzeppelin-contracts#108)
• 104db50 Update changelog: 1.0.8
• e8fdf3b 1.0.8
• 74c251b Skip gas reporting when --parallel flag detected (Create tests for DayLimit OpenZeppelin/openzeppelin-contracts#101)
• d89d995 Bump follow-redirects from 1.13.0 to 1.14.8 (Create tests for Shareable OpenZeppelin/openzeppelin-contracts#100)
• 819e461 Throw error when --parallel flag is set (Fix test failing on travis OpenZeppelin/openzeppelin-contracts#99)
• 66be58a Bump simple-get from 2.8.1 to 2.8.2 (issue #57: Async await tests OpenZeppelin/openzeppelin-contracts#97)
• 7e5063e Bump ajv from 6.12.2 to 6.12.6 (does not install on my windows 10 OpenZeppelin/openzeppelin-contracts#96)
• 7bd947f Bump pathval from 1.1.0 to 1.1.1 (Add stepped function helpers OpenZeppelin/openzeppelin-contracts#95)
• e7b2dd6 1.0.7
• 87f5c44 Upgrade eth-gas-reporter to 0.2.24 (Bump undici from 5.25.1 to 5.28.4 #84)
• 9c55e87 Update changelog: 1.0.6

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[changeset-bot]

⚠️ No Changeset found

Latest commit: 62de955

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR