[Snyk] Fix for 3 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • package.json
  • package-lock.json

• Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches. Find out more.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept
	Man-in-the-Middle (MitM) SNYK-JS-HTTPSPROXYAGENT-469131	No	Proof of Concept

Commit messages

Package name: https-proxy-agent

The new version differs by 24 commits.

• 0d8e8bf 2.2.3
• 850b835 Revert "Use Mocha 5 for Node 4 support"
• f5f56fa Remove Node 4 from Travis
• bb837b9 Revert "Remove Node 4 from Travis"
• 1e34e0d Use Mocha 5 for Node 4 support
• 36d8cf5 Use an `EventEmitter` to replay failed proxy connect HTTP requests (#77)
• 5252bb9 Revert "Meh…" (#79)
• 6c804a2 Remove Node 4 from Travis
• 2170151 [TypeScript] Allow `port` to be a string (#72)
• 590bc8b Remove Node 5 and 7 from Travis
• c7d8161 Fix compatibility with Node.js >= 10.0.0 (#73)
• 2590f76 Meh…
• 3535951 Test on Node.js 10 and 12
• 2629ba6 Fix compatibility with Node.js >= 10.0.0
• 46aad09 Remove unreachable code
• d0e3c18 Update `proxy` to v1.0.0
• c17ccdc Update README with actual secureProxy behavior (#65)
• e145714 2.2.2
• 4a7ea92 Update `agent-base` to v4.3 (#69)
• 13917f6 feat(typescript): Allow input to be options or string (#68)
• c5c4ffc Add TypeScript type definitions (#66)
• 11bc347 Update `agent-base` to v4.2 (#50)
• 056c843 Ignore test directory, History.md and .travis.yml when creating npm package. Fixes #42 (#45)
• c881009 Remove `package-lock.json`

See the full diff

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Man-in-the-Middle (MitM) SNYK-JS-HTTPSPROXYAGENT-469131	Proof of Concept
	Prototype Pollution SNYK-JS-LODASH-450202	Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic