[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • deps/npm/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept

Commit messages

Package name: update-notifier

The new version differs by 23 commits.

• adf7803 4.0.0
• fb5161c Remove the `callback` option (RFC: bundle tick processor with iojs nodejs/node#158)
• 39682de Rename `boxenOpts` option to `boxenOptions`
• bc1721a Avoid showing notification if current version is the latest (lib,src: remove post-gc event infrastructure nodejs/node#174)
• ccaf686 Update dependencies
• b1525e6 Disable when `NODE_ENV` is `test` (Support promises in the fs module nodejs/node#173)
• bf73119 Fix install command for npm global (lib: fix guard expression in timer.unref() nodejs/node#165)
• 592b025 3.0.1
• f8b4e60 Update Travis matrix
• a6d6b49 Update URL to TTY (io.js TC Meeting 2014-12-17 nodejs/node#163)
• f9d168a Remove object spread to support node >=8.0.0 <8.6.0 (Implement Blob and FileReader nodejs/node#164)
• 1712928 Tidelift tasks
• 72f83d1 Create funding.yml
• a7bb3ee 3.0.0
• ad8ed1b Suggest yarn when installed with yarn (benchmark: pre-optimize url.parse() before start nodejs/node#132)
• 5f06620 Exit the update check process if it does not respond after 30s (build: remove support for VS 2010 and 2012 nodejs/node#156)
• 79e89ad Fix failing test (docs: changed example in streams for write() after end() nodejs/node#155)
• c8faa84 Add `distTag` option (Clarify that “io.js” is the only correct name nodejs/node#151)
• 14632e4 Add failing test for [stream] - callback based API additions nodejs/node#153 (src: fix addon loader regression nodejs/node#154)
• aafd8a0 Require Node.js 8
• 0d49f51 Add Tidelift mention in the readme
• 8df01b3 Fix docs position of `shouldNotifyInNpmScript` (doc: cherry-pick tc-minutes from master nodejs/node#143)
• d371834 Docs: isGlobal option does not default to true (docs: Supplement docs for Writable and Transform streams nodejs/node#142)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[ghost]

DeepCode's analysis on #394298 found:

• ❌ 0 critical issues. ⚠️ 0 warnings and 0 minor issues. ✔️ 0 issues were fixed.

💬 This comment has been generated by the DeepCode bot, installed by the owner of the repository. The DeepCode bot protects your repository by detecting and commenting on security vulnerabilities or other critical issues.

---

☺️ If you want to provide feedback on our bot, here is how to contact us.