[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/esprima/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jscs

The new version differs by 250 commits.

• e177990 3.0.7
• bc0c425 Misc: add changelog for 3.0.7
• 47d19e1 validateParameterSeparator: notice class methods
• 92fa964 3.0.6
• a14b499 Misc: add 3.0.6 changelog
• 6ae32ac requireDollarBeforejQueryAssignment: do not blow up on reset parameter
• b419c66 Misc: explicitly use latest CST version
• f3cdfac Misc: fix typo in the changelog
• 71dd3dd Misc: bump CST version to 0.4.2
• 67f3cd9 3.0.5
• a5e5bde Misc: add 3.0.5 changelog
• ea2c3f7 Configuration: move hasCorrectExtension to more appropriate place
• 0d027a7 Configuration: Do not set default options if preset is set
• 5885239 Misc: bump CST version to 0.4.0
• ae3666a Docs: remove yandex preset from overview
• dbff270 Docs: add intro delimiter to readme
• c4474c1 Misc: use correct headers in changelog
• 508982c Misc: correct changelog auto-replace result
• 747d058 Misc: correct changelog jscs version
• 8132a87 Misc: changelog should be consistent
• f867612 3.0.4
• 3c64a00 Misc: add 3.0.4 changelog
• 584c556 Tests: do not run integration tests
• 56ca72b maximumLineLength: correctly position error for comment nodes

See the full diff

Package name: karma

The new version differs by 250 commits.

• db41e8e chore: release v2.0.0
• 0a1a8ef chore: update contributors
• 1afcb09 chore: add yarn.lock
• f64e1e0 Merge pull request [Snyk] Security upgrade karma-browserify from 3.0.3 to 5.0.0 #2899 from outsideris/fix-bad-url-in-stacktrace
• 78ad12f refactor(server): move compile step to first run
• 34dc7d3 fix(reporter): show file path correctly when urlRoot specified
• b53929a Merge pull request [Snyk] Fix for 1 vulnerabilities #2712 from macjohnny/patch-1
• c9e1ca9 feat: better string representation of errors
• 10fac07 Merge pull request [Snyk] Security upgrade python from 3.6-slim to 3.13.0rc2-slim #2885 from karma-runner/prep-2
• 00e3f88 chore: remove yarn.lock for now
• 60dfc5c feat: drop core-js and babel where possible
• 0e1907d test: improve linting and fix test on node 4
• af0efda test(e2e): update cucumber step definitions
• c3ccc5d chore(ci): focus on even node versions
• bf25094 chore(deps): update to latest
• d93cc5f docs(config): Document port collision scenario.
• 871d46f feat(launcher): trim whitespace in browser name
• 99fd3f0 fix(config): Call debug log methods after setting the loglevel based upon config/cli-options.
• 7bd54ed Merge pull request [Snyk] Security upgrade ember-cli from 0.2.7 to 5.12.0 #2890 from reda-alaoui/patch-1
• 91e916a docs(config): Document port collision scenario.
• 334f9fb feat(launcher): trim whitespace in browser name
• e23c0d4 Merge pull request [Snyk] Fix for 1 vulnerabilities #2837 from JakeChampion/logs
• a340dae fix(config): Call debug log methods after setting the loglevel based upon config/cli-options.
• 6d353dc docs: improve comments in config.tpl.*

See the full diff

Package name: karma-ie-launcher

The new version differs by 22 commits.

• 5a597b2 chore: release v1.0.0
• 85e44b0 chore: update contributors
• 0e4a963 chore(version): make a valid version # to bump :)
• f7556ab chore(release): fixup version bump
• 7b7bdcc chore: update contributors
• 7f6c176 chore(conventional): use conventional releaser/changelog
• 8899954 use conventional changelog/releaser
• 018ba8a chore: release v2.0.0
• ba5a164 chore: update contributors
• 932063f chore: update contributors
• 5ad633f chore(1.0): version bump to 1.0
• 84cb483 Merge pull request [Snyk] Security upgrade npm from 2.15.12 to 5.6.0 #40 from ITGlobal/master
• 7f6bf20 chore: tweak supported node.js versions
• cd66ee2 fix: travis
• 68c0920 fix: travis
• 51a1b9b chore: use node 5 only on travis
• 0f584d9 fix: travis
• 9ecd12d chore: upgrade .travis.yml
• 53c37d0 chore: add JetBrains WebStorm IDE files to gitignore
• b81b643 chore: add universal editor config
• 4fe4e47 refactor: fix eslint errors
• ca53e9a chore: upgrade all npm packages

See the full diff

Package name: karma-sauce-launcher

The new version differs by 46 commits.

• 004d61d chore: release v1.2.0
• f783f63 chore: update contributors
• a21fbd9 chore(deps): update dev dependencies
• 79c70c2 feat(config): expose commandTimeout, idleTimeout, maxDuration options
• f607303 Merge branch 'master' of https://github.com/JamieMason/karma-sauce-launcher into JamieMason-master
• 0362ad5 docs(readme): fix SauceLabs doc links
• 0ac67d4 feat(config): allow SE traffic to be sent via Sauce Connect's Relay
• 0219065 docs(readme): add hint to platform configurator
• bae326f feat(config): pass parentTunnel to selenium
• bae758a feat(config): add proxy option
• e792677 feat(deps): upgrade sauce connect
• 79b688c chore(travis): update build config
• 1af7432 chore: release v1.1.0
• 9939f1d chore: update contributors
• de8fbcc chore: update dependencies
• 747a19f feat: update deps and add new saucelabs config
• 3fe1c75 feat(launcher): expose commandTimeout, idleTimeout, maxDuration options
• 2e8ff42 chore: release v1.0.0
• d2d331c chore: update contributors
• 3a4467b version bump to 1.0
• 18480ef chore: release v0.3.1
• 7ba0aad chore: update contributors
• c1e39f4 Merge pull request [Snyk] Security upgrade yargs from 11.1.0 to 15.0.1 #87 from petejohanson/master
• 9a5a147 fix(reporter): Add adapters property for 0.13 compat.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution