[Security] Bump mime from 1.2.11 to 2.4.6

[dependabot-preview]

Bumps mime from 1.2.11 to 2.4.6. This update includes a security fix.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

High severity vulnerability that affects mime The mime module is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input.

Affected versions: < 1.4.1

Release notes

Sourced from mime's releases.

v2.0.3

• Fix RegEx DoS issue

v2.0.1

• [closed] MIME breaking with 'class' declaration as it is without 'use strict mode' #170

v2.0.0

Version 2 is a breaking change from 1.x, as the semver implies. Specifically:

• ES6 support required (node@>=6)
• lookup() renamed to getType()
• extension() renamed to getExtension()
• charset() and load() methods have been removed

• [closed] woff and woff2 #168

v1.4.1

• Fix RegEx DoS issue

v1.4.0

• [closed] support for ac3 voc files #159
• [closed] Help understanding change from application/xml to text/xml #158
• [closed] no longer able to override mimetype #157
• [closed] application/vnd.adobe.photoshop #147
• [closed] Directories should appear as something other than application/octet-stream #135
• [closed] requested features #131
• [closed] Make types.json loading optional? #129
• [closed] Cannot find module './types.json' #120
• [V2] .wav files show up as "audio/x-wav" instead of "audio/x-wave" #118
• [closed] Don't be a pain in the ass for node community #108
• [closed] don't make default_type global #78
• [closed] mime.extension() fails if the content-type is parameterized #74

Changelog

Sourced from mime's changelog.

2.4.6 (2020-05-27)

Bug Fixes

• add cli.js to package.json files (#237) (6c070bc)

2.4.5 (2020-05-01)

Bug Fixes

• fix #236 (7f4ecd0)
• update to latest mime-db (c5cb3f2)

2.4.4 (2019-06-07)

2.4.3 (2019-05-15)

2.4.2 (2019-04-07)

Bug Fixes

• don't use arrow function introduced in 2.4.1 (2e00b5c)

2.4.1 (2019-04-03)

Bug Fixes

• update MDN and mime-db types (3e567a9)

2.4.0 (2018-11-26)

Features

• Bind exported methods (9d2a7b8)
• update to mime-db@1.37.0 (49e6e41)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

[dependabot-preview]

Superseded by #41.