chore(deps): bump workspace-tools from 0.16.2 to 0.18.4

[dependabot[bot]]

Bumps workspace-tools from 0.16.2 to 0.18.4.

Changelog

Sourced from workspace-tools's changelog.

0.18.4

Wed, 20 Apr 2022 16:49:02 GMT

Patches

• fixes a potential security issue where fetch --upload-pack can allow for command injection (kchau@microsoft.com)

0.18.3

Sat, 09 Apr 2022 15:51:14 GMT

Patches

• Fix Rush not being detected correctly. When Rush is set up to use Yarn or pnpm, the lock file for the latter are found first. (4123478+tido64@users.noreply.github.com)

0.18.2

Fri, 07 Jan 2022 18:15:36 GMT

Patches

• Makes the output of parseLockFile for npm v7+ lock file compatible with queryLockFile. (riacarmin@microsoft.com)

0.18.1

Fri, 07 Jan 2022 17:07:22 GMT

Patches

• bump ts to 4.5 and fixed typing issues with caught errors as unknown (kchau@microsoft.com)

0.18.0

Fri, 07 Jan 2022 00:04:32 GMT

Minor changes

• speed up workspace-tools - reducing weight and adding caches - lazy load pkg mgr helpers (kchau@microsoft.com)

0.17.0

Thu, 02 Dec 2021 17:11:12 GMT

Minor changes

• Implements NPM workspaces support to parseLockFile utility. (riacarmin@microsoft.com)

Commits

• 4872404 applying package updates
• 9bc7e65 Fix git fetch - addresses a potential security concern regarding git fetch (#...
• 24040a5 applying package updates
• b99f6f8 fix: rush.json is missed in repos using Rush + Yarn (#100)
• e0a79ff Bump node-fetch from 2.6.1 to 2.6.7 in /src/fixtures/basic-yarn (#96)
• 3633c6f Bump shelljs from 0.8.4 to 0.8.5 in /src/fixtures/basic-yarn (#87)
• c9c1bdb Bump ajv from 6.12.2 to 6.12.6 (#89)
• 1c38d84 Bump ajv from 6.12.2 to 6.12.6 in /src/fixtures/basic-yarn (#90)
• 2796151 Bump follow-redirects in /src/fixtures/basic-yarn (#91)
• 74da217 Bump prismjs from 1.25.0 to 1.27.0 in /src/fixtures/basic-yarn (#93)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/microsoft/monosize/network/alerts).

[dependabot[bot]]

Looks like workspace-tools is up-to-date now, so this is no longer needed.