[Security] Bump moment from 2.19.1 to 2.25.1

[dependabot-preview[bot]]

Bumps moment from 2.19.1 to 2.25.1. This update includes a security fix.

Vulnerabilities fixed

Sourced from The GitHub Security Advisory Database.

Moderate severity vulnerability that affects moment The moment module before 2.19.3 for Node.js is prone to a regular expression denial of service via a crafted date string, a different vulnerability than CVE-2016-4055.

Affected versions: < 2.19.3

Changelog

Sourced from moment's changelog.

2.25.1

• Release May 1, 2020

This is a quick patch release to address some of the issues raised after releasing 2.25.0.

• 2e268635 [misc] Revert #5269 due to webpack warning
• 226799e1 [locale] fil: Fix metadata comment
• a83a521 [bugfix] Fix typeoff usages
• e324334 [pkg] Add ts3.1-typings in npm package
• 28cc23e [misc] Remove deleted generated locale en-SG

2.25.0 See full changelog

• Release May 1, 2020

• #4611 022dc038 [feature] Support for strict string parsing, fixes #2469

• #4599 4b615b9d [feature] Add support for eras in en and jp

• #4296 757d4ff8 [feature] Accept custom relative thresholds in duration.humanize

• 18 bigfixes

• 36 locale fixes

• 5 new locales (oc-lnc, zh-mo, en-in, gom-deva, fil)

2.24.0 See full changelog

• Release Jan 21, 2019

• #4338 [bugfix] Fix startOf/endOf DST issues while boosting performance

• #4553 [feature] Add localeSort param to Locale weekday methods

• #4887 [bugfix] Make Duration#as work with quarters

• 3 new locales (it-ch, ga, en-SG)

• Lots of locale improvements

2.23.0 See full changelog

• Release Dec 12, 2018

• #4863 [new locale] added Kurdish language (ku)

• #4417 [bugfix] isBetween should return false for invalid dates

• #4700 [bugfix] Fix #4698: Use ISO WeekYear for HTML5_FMT.WEEK

• #4563 [feature] Fix #4518: Add support to add/subtract ISO weeks

• other locale changes, build process changes, typos

2.22.2 See full changelog

• Release May 31, 2018

• #4564 [bugfix] Avoid using trim()

... (truncated)

Commits

• 475a1e0 Build 2.25.1
• 1434958 Bump version to 2.25.1
• ab05f4e Update changelog for 2.25.1
• 3bfb450 [misc] Build es bundle (unused for now)
• 2e26863 [bugfix] Revert changes made for #5269 due to webpack warnings
• 226799e [locale] fil: Fix metadata comment
• 1a83a52 [bugfix] Fix incorrect typeof checks, fixes #5483
• 6e32433 [pkg] Include ts3.1-typings in npm package
• 728cc23 [misc] Remove old generated locale file
• 6928292 Remove non-existing file from nuspec bundle
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in the `.dependabot/config.yml` file in this repo: - Update frequency - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)

[dependabot-preview[bot]]

Superseded by #43.