Fix ansi-regex > 6.0.1

[atomist[bot]]

This pull request fixes security vulnerabilities open on 6f8e0d8 but 1 critical and 2 moderate vulnerabilities remain open and need manual review.

npm audit fix updated the following npm dependencies:

• ansi-regex 6.0.0 > 6.0.1

---

Fixed vulnerabilities

Following security vulnerability is fixed:

ansi-regex

Inefficient Regular Expression Complexity in chalk/ansi-regex Upgrade to version 6.0.1 or later moderate · >=6.0.0 <6.0.1 · CVE-2021-3807 · automatic fix available

ansi-regex@6.0.0 · 1 vulnerable path

@atomist/skill > strip-ansi > ansi-regex

---

Open vulnerabilities

Following security vulnerabilities remain open and need manual review:

lodash

Arbitrary code execution in lodash None critical · <=4.17.21 · CVE-2021-41720 · automatic fix available

lodash@4.17.21 · 10 vulnerable paths

@atomist/skill > @graphql-codegen/cli > @graphql-codegen/core > @graphql-codegen/plugin-helpers > lodash

@atomist/skill > @graphql-codegen/cli > @graphql-codegen/plugin-helpers > lodash

@atomist/skill > @graphql-codegen/cli > @graphql-tools/code-file-loader > @graphql-tools/graphql-tag-pluck > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/cli > @graphql-tools/git-loader > @graphql-tools/graphql-tag-pluck > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/cli > @graphql-tools/github-loader > @graphql-tools/graphql-tag-pluck > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/typescript-operations > @graphql-codegen/typescript > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/typescript-operations > @graphql-codegen/typescript > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/typescript-operations > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/typescript > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > @babel/core > @babel/helper-module-transforms > @babel/helper-replace-supers > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

@atomist/skill > @graphql-codegen/typescript > @graphql-codegen/visitor-plugin-common > @graphql-tools/relay-operation-optimizer > relay-compiler > @babel/traverse > @babel/helper-function-name > @babel/helper-get-function-arity > @babel/types > lodash

---

ansi-regex

Inefficient Regular Expression Complexity in chalk/ansi-regex Upgrade to version 5.0.1 or later moderate · >2.1.1 <5.0.1 · CVE-2021-3807 · automatic fix available

ansi-regex@3.0.0 · 4 vulnerable paths

@atomist/skill > @graphql-codegen/cli > listr-update-renderer > log-update > wrap-ansi > string-width > strip-ansi > ansi-regex

@atomist/skill > @graphql-codegen/cli > listr-update-renderer > log-update > wrap-ansi > strip-ansi > ansi-regex

@atomist/skill > @graphql-codegen/cli > listr > listr-update-renderer > log-update > wrap-ansi > string-width > strip-ansi > ansi-regex

@atomist/skill > @graphql-codegen/cli > listr > listr-update-renderer > log-update > wrap-ansi > strip-ansi > ansi-regex

Inefficient Regular Expression Complexity in chalk/ansi-regex Upgrade to version 6.0.1 or later moderate · >=6.0.0 <6.0.1 · CVE-2021-3807 · automatic fix available

ansi-regex@6.0.0 · 1 vulnerable path

@atomist/skill > strip-ansi > ansi-regex

---

File changed:

• package-lock.json

---

_{atomist/npm-vulnerability-scanner-skill · Configure}