[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: yeoman-generator

The new version differs by 250 commits.

• aad5fac 5.0.0
• 4f4a802 Add transform to expected priority.
• 57d240c Remove only from test.
• 812751f Lint fix
• 33d050f Implement getFeatures for singleton support.
• 99ac2c5 Add transform priority.
• 5136342 Bump peter-evans/create-pull-request from v3.8.0 to v3.8.2 (#1278)
• fa408bd Bump actions/stale from v3.0.15 to v3.0.16 (#1275)
• d7103f3 Drop reference from yeoman-test repository
• b36f294 Bump yeoman-environment to 3.0.0-rc.1
• ee0d1ad Hide shared options and drop support for kebab case options.
• 310f72d Fix spawn destinationRoot.
• 8f4afe9 Switch composeWith to use environment.
• e9d0a15 Remove support for chainning at composeWith.
• c2245e1 Switch from node 10 to 12 at Travis.
• 5be7b07 5.0.0-rc.0
• 8a448b4 Bump yeoman-environment to 3.0.0-rc.0
• 6d6c4b0 Changes to queueTransformStream
• 632d60d Add option to skip parsing options.
• 7050e53 Pass destinationRoot to spawn-command by default.
• 097cd20 Implement package-json mixin.
• 52c90a2 Add merge support to Storage.
• f4336d9 5.0.0-beta.1
• 1952724 Change version to 5.0.0-beta.0

See the full diff

Package name: yo

The new version differs by 66 commits.

• 4aafcab 2.0.3
• 2c478a4 Audit fix
• ae35426 Fix generator description returning undefined (#587)
• 4f4c36e Update dependencies
• 7ad1609 Ensure the same npm version is used for testing
• 9053bbd Remove the `nsp` task
• dab9337 Require Node.js 6
• 479250a 2.0.2
• 725461b Added global-tunnel-ng to allow usage behind a proxy (#573)
• 3134157 Spelling (#568)
• 6153a0d 2.0.1
• f40c521 Update got and its dependents (#563)
• 649200a Add BSD 2-Clause license (#555)
• 4142ca9 Fixes ParseError (#554)
• 035faf7 Proper OpenCollective badge
• bfa4ef2 Fix open collective badge in readme.md (#548)
• 77bdb9b Add documentation for running local generators (#547)
• ab77908 2.0.0
• 11af8d6 Bump yeoman-environment to 2.0
• a75d174 Better error handling when 'generator-' prefix is specified (#520)
• 6e1a870 Bump dependencies
• ecd7ffa ES2015ify
• 018cd95 Bump dependencies
• b41958c Bump `async`. (#506)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic