[Snyk] Fix for 2 vulnerabilities

[laozhudetui]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	No Known Exploit
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @snyk/code-client

The new version differs by 93 commits.

• 18ac5a1 Merge pull request Testing travis snyk/cli#160 from snyk/fix/fast-glob
• 8df5ae5 fix: successful workflow test not to rely on specific results length
• 4741e64 fix: tests relying on exact results number
• e6052a8 fix: tests
• 9d02026 fix: fast-glob perf issues
• b5eb140 fix: support multi-tenant EU auth verification [ROAD-917] (#159)
• 4a0b42e feat/enable-base64-encoding-for-mt-eu (#158)
• 69ea4b3 fix: promisify base64 encoding and compression (#149)
• a274876 Merge pull request #148 from snyk/fix/lock-needle-version
• 9661b93 fix: improve base64 handling with compression (#146)
• c054b0d fix: lock needle version to 3.0.x
• 6856859 Merge pull request #147 from snyk/snyk-upgrade-126758f4625640472308672ae22c9f75
• 66c7314 feat: upgrade yaml from 1.10.2 to 2.0.1
• 9363d10 Merge pull request #145 from snyk/fix/retry-on-500s
• 59661b1 fix: retry on when getting 500 resp
• b9dbb0c feat: Support Base64 encoding (#144)
• 6a582fe Merge pull request #143 from snyk/chore/ownership-change
• d6cf9b7 chore: Transferring ownership to Zenith
• 1d2578f Merge pull request #141 from snyk/feat/track-skipped-files-over-max-size
• ffcee84 feat: track skipped files over max size
• 8451c7e fix: bundle file path resolution for paths with whitespace (#142)
• b54323a Merge pull request #140 from snyk/feat/increase-file-limit-and-add-logging
• d3753ee feat: increase file limit to 1MB
• f6e4d95 Merge pull request #135 from snyk/chore/add-lint-prettier

See the full diff

Package name: tempy

The new version differs by 5 commits.

• df25f81 3.0.0
• 66a774e Meta tweaks
• 4b3e859 Require Node.js 14 ([Snyk] Fix for 7 vulnerabilities #41)
• 578a8ac 2.0.0
• ca35430 Require Node.js 12.20 and move to ESM

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption