[Snyk] Fix for 1 vulnerabilities

[leonardoadame]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: node-gyp

The new version differs by 13 commits.

• 33391db chore: release 9.4.0
• a0b3d1c test: remove deprecated Node.js and Python ([BUG] npm audit does not exit with exit code 1 if a vulnerability is found npm/cli#2868)
• 7a3fe1c win,install: only download target_arch node.lib ([BUG] ci command says I can get more info, but I can't npm/cli#2857)
• 55048f8 fix: log statement is for devDir not nodedir ([BUG] install --only option not working as intended npm/cli#2840)
• 5df2b72 Migration from tap to mocha (chore: skip publishing some unnecessary files npm/cli#2851)
• aaa117c fix: extract tarball to temp directory on Windows ([BUG] package-lock.json integrity value for git dependencies depends on the architecture (Apple Silicon M1 differs) npm/cli#2846)
• bb76021 feat: add support for native windows arm64 build tools
• 6f3c2d3 docs: docs/README.md add advise about deprecated node-sass ([BUG] npm link confused by symlinks (windows) npm/cli#2828)
• 02480f6 update make-fetch-happen to 11.0.3 ([BUG] Failed to publish packages without repository field npm/cli#2796)
• c7927e2 doc: Update README.md (fix(diff): set option "where" for pacote npm/cli#2822)
• 337e8e6 chore: get update-gyp.py to work with Python >= v3.5 ([BUG] npx doesn't work when in child workspace npm/cli#2826)
• 41882a9 Improved advise on repacing node-sass with sass ([BUG] Can't run npm install and can't even run npm whoami without errors using GitHub Packages npm/cli#2758)
• fc0ddc6 feat: Upgrade Python linting from flake8 to ruff (Regression: 7.6.0 throws a TypeError: Cannot read property '@roundforest/***' of null error sometimes npm/cli#2815)

See the full diff

Package name: semver

The new version differs by 5 commits.

• e7b78de chore: release 7.5.2
• 58c791f fix: diff when detecting major change from prerelease ([BUG] cb() never called! when run npm ci command npm/cli#566)
• 5c8efbc fix: preserve build in raw after inc (Fixed "publish --force" not correctly publishing for already published packages npm/cli#565)
• 717534e fix: better handling of whitespace ([FEATURE] Do not remove node_modules on npm ci npm/cli#564)
• 2f738e9 chore: bump @ npmcli/template-oss from 4.14.1 to 4.15.1 ([BUG] npm ci installs an optional dependency which targets a different os than the host os npm/cli#558)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[changeset-bot]

⚠️ No Changeset found

Latest commit: eacc17a

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR