[Snyk] Security upgrade snyk-nodejs-lockfile-parser from 1.56.1 to 1.58.13

[mightysai1997]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	589/1000 Why? Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: snyk-nodejs-lockfile-parser

The new version differs by 42 commits.

• cf44acc Merge pull request #254 from snyk/fix/bump-micromatch
• e15ee01 fix: bump micromatch
• a5cb8b6 Merge pull request #252 from snyk/fix/fix-empty-lockfile
• 45d6de9 fix: handle pnpm empty lockfiles
• 5133a51 Merge pull request #251 from snyk/fix/refactor-top-level-deps-extraction
• c0a049b fix: removed optional params from extract top level deps
• 7dce595 Merge pull request #250 from snyk/fix/fix-dev-deps-pnpm
• 4dd003a fix: fixed dev deps ref and added more debug logs
• 097c766 Merge pull request #249 from snyk/fix/out-of-sync-pnpm
• f3f5193 fix: fail early for top level deps out of sync pnpm and updated tests
• 01b8757 Merge pull request #248 from snyk/feat/support-aliases-pnpm-lockfile
• d42528b fix: [OSM-1996] support pnpm packages aliases
• ac9bf00 Merge pull request #247 from snyk/fix/bump-version-after-revert
• d6bc4d3 fix: small change for new version release
• 66c14de Merge pull request #246 from snyk/revert-233-fix/parse-nested-peer-deps-safely
• 7b518ee Revert "fix: [OSM-1079] support the parsing of transitive peer deps - if they are installed"
• e4f1660 Merge pull request #244 from snyk/revert-239-fix/ignore-optional-deps-if-not-installed
• 08be44c Revert "Fix/ignore optional deps if not installed"
• 23721ea Merge pull request #242 from snyk/fix/debug-log-for-undefined-versions-pnpm-lockfile
• c7bd821 fix: debug log for undefined version
• 8da13d3 Merge pull request #239 from snyk/fix/ignore-optional-deps-if-not-installed
• 928e2f2 fix: ignore optional deps if not installed
• b0f1ab6 Merge pull request #240 from snyk/fix/remove-duplicate-includePeerDeps
• 261fb3a fix: remove duplicate includePeerDeps

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Inefficient Regular Expression Complexity