[Snyk] Security upgrade xo from 0.11.2 to 0.17.0

[leonardoadame]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tools/node_modules/eslint/node_modules/@babel/highlight/node_modules/color-convert/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: xo

The new version differs by 110 commits.

• 1607c3f 0.17.0
• 517cd3c add Highlights section
• 9bf80fa bump dependencies
• afc03ef add some new eslint-plugin-ava rules
• c17358b cleanup [Snyk] Security upgrade mocha from 9.2.0 to 10.1.0 #142
• 519ad1b cleanup [Snyk] Security upgrade jest from 25.5.4 to 27.0.0 #147
• 85c6094 Add `settings` and `parser` options ([Snyk] Security upgrade mocha from 9.2.0 to 10.1.0 #142)
• fa99f36 Ignore paths from `.gitignore` ([Snyk] Security upgrade jest from 25.5.4 to 27.0.0 #147)
• 8933f51 Skip package.json files with `"xo": false` ([Snyk] Security upgrade standard from 10.0.3 to 11.0.0 #151)
• 3c42847 Add `extensions` option ([Snyk] Security upgrade standard from 10.0.3 to 11.0.0 #149)
• 8829b33 improve error message when extended config doesn't existn
• a00cf57 fix some lint issues
• ac03fee use `'error'` instead of `2` in the rule configs
• e8b0a30 upgrade to eslint-plugin-import@2
• 4c797d8 ES2015ify
• 040d8be find and use overrides opts in lintText ([Snyk] Security upgrade jest from 25.5.4 to 26.0.0 #130)
• 04733f1 [BREAKING] upgrade ESLint and get rid of `babel-eslint`
• 980873b forgot to update the appveyor file
• 459a99c minor test tweaks
• ac931aa bump dependencies
• c9b9b84 drop support for Node.js 0.10 and 0.12
• fbb1668 `eslint-plugin-xo` was renamed to `eslint-plugin-unicorn`
• bb76a2d add --quiet feature ([Snyk] Security upgrade mocha from 8.4.0 to 10.1.0 #131)
• b6199c0 Fix documentation ([Snyk] Security upgrade jest from 25.5.4 to 26.0.0 #129)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.