[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/qs-package/node_modules/es6-promise/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LODASH-6139239	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: broccoli-replace

The new version differs by 2 commits.

• d9c8b5e Move workflows to .github folder.
• 0519d75 General improvements, fix vulnerabilities and bump the dependencies.

See the full diff

Package name: broccoli-watchify

The new version differs by 15 commits.

• 97ad9d2 Merge pull request [Snyk] Upgrade typescript from 4.2.4 to 4.3.2 #2 from stefanpenner/fixes
• 4816cc4 release v1.0.0
• 6dbd972 update changelog in readme
• b834f3f ensure stable output
• 3056266 drop watchify, only its `collect` method is required
• b40d33f add tests, and improve cache
• e1154ae tree-sync is a normal dep, not devdep
• db0ba0c rather the loading + depending all of lodash lets just depend on assignIn (formerly known as extend)
• ccf7669 remove trailing whitespace
• e2405cd ensure directory for output exists, but relative to the outputPath
• f8debb5 deference inputPath, so browserify requires relative to out inputPath and not relative to the realPath of a given file.
• a4aab3b update deps
• cbf0cf3 update + improve stuff
• 8ed7f1f asdf
• ed8912e Merge branch 'release/0.2.0'

See the full diff

Package name: release-it

The new version differs by 125 commits.

• 50e1653 Release 2.4.0
• 9094196 Remove tracker
• c0f3b9e Check if tag exists before creating changelog
• 4097257 Update dependencies
• 58dfab0 Merge pull request [Snyk] Security upgrade sqlite3 from 3.0.8 to 4.0.0 #39 from ahmadawais/patch-1
• 068f2be Update README.md
• 18df8ff Release 2.3.1
• 0bf3dfa Always ask to (push) tag, but with better error handling (resolves [Snyk] Security upgrade snyk-nuget-plugin from 1.21.1 to 1.22.0 #38)
• 7d3917f Add link to gh-pages article
• 1f569a7 Release 2.3.0
• ba6a05c Add hooks to execute commands: beforeStartCommand, beforeStageCommand (src/dist), afterReleaseCommand (src/dist) (resolves [Snyk] Security upgrade knex from 0.7.3 to 0.19.5 #37)
• 7411111 Split mkCleanDir and buildCommand
• b093a45 Release 2.2.2
• 7abe320 Fix: separate task to check clean working dir ([Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.1 #34), before bump/build
• f0f0cb6 Release 2.2.1
• 42be59a Fix: use "requireCleanWorkingDir" in src repo ([Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.1 #34)
• 54f95ce Release 2.2.0
• 335b830 Add support for `git push <repo>` with "src.pushRepo" option (resolves [Snyk] Security upgrade open from 0.0.5 to 6.0.0 #36)
• 76b05e9 Release 2.1.0
• cfca777 Update readme
• bc905bc Add support for `npm publish --tag <tag>` (default: "latest") ([Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.2 #35)
• 9839aae Add support for prerelease, prepatch, etc. release types, including pre-identifier (resolves [Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.2 #35)
• f810247 Add option "requireCleanWorkingDir" (resolves [Snyk] Security upgrade actionpack from 4.2.5 to 4.2.5.1 #34)
• 6179c5d Tag only once (in case dist repo is same repo)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution