[Snyk] Fix for 10 vulnerabilities

[doron2402]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-450202	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-73638	Yes	Proof of Concept
	541/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 4.4	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-73639	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-1019388	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution npm:lodash:20180130	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:minimatch:20160620	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jscs

The new version differs by 250 commits.

• e177990 3.0.7
• bc0c425 Misc: add changelog for 3.0.7
• 47d19e1 validateParameterSeparator: notice class methods
• 92fa964 3.0.6
• a14b499 Misc: add 3.0.6 changelog
• 6ae32ac requireDollarBeforejQueryAssignment: do not blow up on reset parameter
• b419c66 Misc: explicitly use latest CST version
• f3cdfac Misc: fix typo in the changelog
• 71dd3dd Misc: bump CST version to 0.4.2
• 67f3cd9 3.0.5
• a5e5bde Misc: add 3.0.5 changelog
• ea2c3f7 Configuration: move hasCorrectExtension to more appropriate place
• 0d027a7 Configuration: Do not set default options if preset is set
• 5885239 Misc: bump CST version to 0.4.0
• ae3666a Docs: remove yandex preset from overview
• dbff270 Docs: add intro delimiter to readme
• c4474c1 Misc: use correct headers in changelog
• 508982c Misc: correct changelog auto-replace result
• 747d058 Misc: correct changelog jscs version
• 8132a87 Misc: changelog should be consistent
• f867612 3.0.4
• 3c64a00 Misc: add 3.0.4 changelog
• 584c556 Tests: do not run integration tests
• 56ca72b maximumLineLength: correctly position error for comment nodes

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Command Injection
🦉 Prototype Pollution