[Snyk] Fix for 1 vulnerabilities

[sb-cecilialiu]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Regular Expression Denial of Service (ReDoS) npm:debug:20170905	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @cypress/webpack-preprocessor

The new version differs by 25 commits.

• 0223169 fix: Loosen semantic versioning - prefix dependencies with caret (MAT-1759 #107)
• a8e2819 fix(deps): update dependency lodash to v4.17.20 (committing jmeter suite so we don't lose it because i are silly and i… #105)
• 85ef427 fix: The 'rerun' event is no longer emitted on the initial bundling of a file (Grid failing fix #103)
• ba0dc3d fix: Reduce the verbosity of error messages (MAT-1264 - QA Automation - Validate Measure Package FHIR Version #102)
• a0c45b8 fix(deps): update dependency lodash to v4.17.19 (cleanup changes 2 #101)
• 34780ce Configure Renovate (Clean-up changes 1 #99)
• bfdc37d fix: Handle when transpileOnly option is used (PopulationBasis #94)
• d33103f feat: force sourceMap: true on all typescript projects (Merge from Master to cvasile #92)
• 834af3c chore: always reset webpack stub
• 0194f0f feat: set webpack mode to development if missing (merge from master to cvasile #87)
• 07b7d12 Add ts-loader example (Merge from Master to cvasile #85)
• 7eefb7c fix: add jsdoc for default options
• 9336dde add link to babelrc example
• ebbfbc3 update node version and a variable name
• b211694 chore: Convert to Typescript (MAT-1330 #83)
• e69eb84 feat: add webpack stats debug output (FHIR Smoke Test updates for new required fields #81)
• 9e80faf describe how to use your own babelrc (Ben mat 1223 #78)
• 2d29c87 Test react scripts (MAT-1286 MVP Log Convert to FHIR for Measure or Library History #74)
• a6baf1f fix: Ensure that the webpack output filename ends with .js. (MAT-1259 Allow CQL Editor to Save with Errors #73)
• dd2575b update yarn lock
• 63e1769 point size script at npm pack --dry
• 45f098b chore: remove deprecated nsp
• ba9d44c fix: Include index.d.ts in published files
• 611e351 feat: Add Typescript types (merge from Master to cvasile #72)

See the full diff

Package name: mocha

The new version differs by 23 commits.

• e1194ab Release v8.3.0
• 9e75153 update CHANGELOG for v8.3.0 [ci skip]
• 6dd12be match supporter's properties with supporter.js (#4569)
• 9f2dd41 docs: add example of generating tests with a closure (#4494)
• 9122909 Adds BigInt support to stringify util function (#4112)
• 9878f32 Add file location when SyntaxError happens in ESM (#4557)
• 84d0c96 Deps: update workerpool (#4566)
• 3c2f82f GH actions: purge-expired-artifacts.yml (#4565)
• 1a05ad7 chore(deps): upgrade all to latest stable (#4556)
• c667d10 docs: fix javascript syntax errors (#4555)
• 6eb3c3c Update dependencies yargs and yargs-parser (#4543)
• 30d5b66 Fix workflow filter on pull-request event (#4550)
• 6bcb89e Improve CI tests workflow (#4547)
• c21a90f Fix present year in LICENSE (#4542)
• c3c976b fixes require path
• bc8ce05 add test for this.test.error() behavior in "after each" hooks
• 78a41d1 Add GH Actions workflow status badge (#4503)
• c6856ba add error code for test timeout errors
• 6d3fe26 add support for typescript-style docstrings
• 025fc2e run browser tests on GHA
• b1f26e2 handful of improvements to integration tests
• 59f31e3 fix typo in comment [ci skip]
• d1781b3 refactor collect-files to be a little more simple

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)