[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	636/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-DOTPROP-543489	Yes	Proof of Concept
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: yeoman-generator

The new version differs by 41 commits.

• 7d0aa14 0.23.0
• 4bdf621 Base#prompt now return a promise
• 2d90140 Move inquirer to devDeps
• ca55109 Bump devDeps and eslint 2.0 settings adjustment
• 3272f44 Bump some dependencies
• 3a41fa0 0.22.6
• 634a9c7 Fix the error thrown from generator is swallowed (#923)
• edfa8a0 Fix storage documentation
• 8e767d4 Add sponsors to Readme
• f9575c7 Merge pull request #905 from alefteris/jsdoc-config-fix
• b9f7939 Remove non-existent file from JSDoc config
• de9d239 Update build file to not account for a root index.js file
• da94fe1 0.22.5
• 3e7d5de Fix index.js location
• a0dc44a Remove dotfiles we're not using anymore
• 961dcdb 0.22.4
• 995b955 Fix destinationPath not being updated if a .yo-rc.json file is in a parent directory
• b913d98 add gitter badge
• 716d6ca 0.22.3
• 1b43344 Stop generator process when a task fails
• 662af8a 0.22.2
• 5c85ec4 Fix linting error
• 2b09563 Fix option aliases
• 8ef880d Normalize option/argument default option name with generator#prompt()

See the full diff

Package name: yo

The new version differs by 66 commits.

• 4aafcab 2.0.3
• 2c478a4 Audit fix
• ae35426 Fix generator description returning undefined (#587)
• 4f4c36e Update dependencies
• 7ad1609 Ensure the same npm version is used for testing
• 9053bbd Remove the `nsp` task
• dab9337 Require Node.js 6
• 479250a 2.0.2
• 725461b Added global-tunnel-ng to allow usage behind a proxy (#573)
• 3134157 Spelling (#568)
• 6153a0d 2.0.1
• f40c521 Update got and its dependents (#563)
• 649200a Add BSD 2-Clause license (#555)
• 4142ca9 Fixes ParseError (#554)
• 035faf7 Proper OpenCollective badge
• bfa4ef2 Fix open collective badge in readme.md (#548)
• 77bdb9b Add documentation for running local generators (#547)
• ab77908 2.0.0
• 11af8d6 Bump yeoman-environment to 2.0
• a75d174 Better error handling when 'generator-' prefix is specified (#520)
• 6e1a870 Bump dependencies
• ecd7ffa ES2015ify
• 018cd95 Bump dependencies
• b41958c Bump `async`. (#506)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic