Bump snyk from 1.305.0 to 1.319.2

[dependabot-preview[bot]]

Bumps snyk from 1.305.0 to 1.319.2.

Release notes

Sourced from snyk's releases.

v1.319.2

1.319.2 (2020-05-07)

Bug Fixes

• Changed old fixtures to support new policy shape (0e65b5c)
• upgrade snyk-policy from 1.13.5 to 1.14.1 (01afc36)

v1.319.1

1.319.1 (2020-05-06)

Bug Fixes

• update of snyk-mvn-plugin to 2.15.1 (d23d0c8) to fix an issue with multiple nested target dirs.

• fix: upgrade @snyk/npm-deps to version 1.18.3 in order to remove prettier from deps (was included by mistake at 1.18.2)

v1.319.0

1.319.0 (2020-05-05)

Features

• add monitor call graph metrics (8eb4a80)

v1.318.0

1.318.0 (2020-05-05)

Features

• support snyk monitor --reachable-vulns (f0abb35)

v1.317.0

1.317.0 (2020-05-03)

Features

• add callgraph metrics to run-tests (904e47b)

v1.316.2

1.316.2 (2020-05-01)

Bug Fixes

... (truncated)

Commits

• 6451153 Merge pull request #1065 from snyk/snyk-upgrade-b477b201913225574b4650d640b078bb
• 0e65b5c fix: Changed old fixtures to support new policy shape
• 01afc36 fix: upgrade snyk-policy from 1.13.5 to 1.14.1
• de65d60 Merge pull request #1106 from snyk/fix/bump-mvn-plugin
• d23d0c8 fix: bump snyk-mvn-plugin to 2.15.1
• 39d024b Merge pull request #1103 from snyk/fix/dep-graph-upgrade
• 358794f Merge pull request #1105 from snyk/feat/add-call-graph-metrics-to-monitor
• 8eb4a80 feat: add monitor call graph metrics
• 3059a6d Merge pull request #1104 from snyk/feat/reachable-vulns-monitor
• f0abb35 feat: support snyk monitor --reachable-vulns
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #405.