Bump snyk from 1.305.0 to 1.618.0

[dependabot-preview[bot]]

Bumps snyk from 1.305.0 to 1.618.0.

Release notes

Sourced from snyk's releases.

v1.618.0

1.618.0 (2021-05-28)

Bug Fixes

• snyk code performance improvement (2e52ba9)

v1.617.0

1.617.0 (2021-05-28)

Bug Fixes

• Skip empty files on IaC scanning (0fd970f)

v1.616.0

1.616.0 (2021-05-27)

Features

• add support for resolutions in yarn2 (d2a23e0)

v1.615.0

1.615.0 (2021-05-27)

Bug Fixes

• Update IaC help docs with CloudFormation (e5070a0)

v1.614.0

1.614.0 (2021-05-27)

Bug Fixes

• code test json output should not print stack trace (f1b665c)

v1.613.0

1.613.0 (2021-05-26)

Bug Fixes

• Analytics show correct number of issues found by cloudformationconfig. (cd03695)

v1.612.0

1.612.0 (2021-05-26)

... (truncated)

Commits

• 0398b70 Merge pull request #1969 from snyk/feat/code-performance-improvement
• 5820119 Merge pull request #1971 from snyk/fix/skip-empty-error-iac
• 0fd970f fix: Skip empty files on IaC scanning
• 2e52ba9 fix: snyk code performance improvement
• ebe36cd Merge pull request #1966 from snyk/feat/resolutions-support-in-yarn2
• cad069e Merge pull request #1967 from snyk/docs/update-help-command
• e5070a0 fix: Update IaC help docs with CloudFormation
• d8ecd4d Merge pull request #1961 from snyk/fix/sast_json_output_prints_errors
• d2a23e0 feat: add support for resolutions in yarn2
• 823ef28 Merge pull request #1965 from snyk/fix/cloudformation-analytics
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #726.