[Snyk] Security upgrade jsonld from 3.2.0 to 4.0.0

[rjchow]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	556/1000 Why? Recently disclosed, Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: jsonld

The new version differs by 23 commits.

• 9764d0c Release 4.0.0.
• 159cdd8 Update changelog.
• 6e2c4a3 Merge branch '3.x' into master
• 69fed50 Start 3.3.2-0.
• 8b1c104 Release 3.3.1.
• a90a3ea Update changelog.
• 90b2cc4 Fix use of arrows functions in bundles.
• 93a9d3f Update changelog (for remove rdfa entry).
• fa88d73 Move RDFa parser to `jsonld-rdfa` package.
• 980d20a Start 3.3.1-0.
• c50c731 Release 3.3.0.
• 1770430 Update changelog.
• 14fda45 Fix linting issue.
• 4ece171 Remove Node.js 6 testing.
• b6920bc Restrict to older eslint rules.
• 69f7d85 Skip failing tests.
• 3016f44 Update shields.
• 8f275df Remove travis-ci support.
• 27725bd Test old Node.js versions.
• 30a4554 Fix tests.
• 361772a Add GitHub actions support.
• c2fa5d7 Update rdf-canonize.
• 552e857 Start 3.2.1-0.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[rjchow]

obsolete