[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • bundle/packages/server/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: inquirer

The new version differs by 165 commits.

• 65a4d59 Publish
• e2099ed Update dependencies
• 8270551 Produce error on prompt in non-tty environment. (#891)
• 6a883e6 Update lint-staged to the latest version 🚀 (#886)
• 4b8b47f Publish
• 833385b Workaround node.js bug with readline (#882)
• ee55149 Add inquirer-table-prompt plugin (#884)
• 942908f Publish
• a70ee52 Revert "Workaround node.js bug that closes main input and output stream. (#879)" (#881)
• 0bc1b01 Publish
• 3d0ff8c Workaround node.js bug that closes main input and output stream. (#879)
• 7ec6ea0 Publish
• e2e07e3 Fix #862 - Do not throw when returning undefined from filter functions
• af16d5b Fix #845 - Fix broken asynchronous validation
• 904e473 fix multi rawList bug (#861) (#867)
• 45af563 Bugfix: Choices.push() breaks index if a disabled item was already in the Choices (#869)
• 8248ee5 Update Readme: Add FOSSA check and remove Node 6 support notice.
• 05f34b6 Bump dependencies
• f04c5cf Remove broken unit tests
• 3ab4549 Add new editor prompt
• 6a2aa06 Add screenshots to mono repo package readmes
• d76c929 Refactor new expand prompt with the hooks
• 7cf9d99 Fix input prompt final answer formatting
• c172c75 Update new confirm prompt to use the hook API

See the full diff

Package name: inquirer-autocomplete-prompt

The new version differs by 29 commits.

• c85f3b5 1.0.1
• 274c347 Merge pull request #65 from mokkabonna/move-inquirer-to-peer-dependencies
• ae9ff83 Move inquirer to dev- and peerDependencies
• f0744e2 Merge pull request #64 from mokkabonna/upgrade-to-inquirer-v4-classes
• 317090c 1.0.0
• 1a7c518 Test out removing global Istanbul install
• e51cd85 Reorder package.json properties
• 8482c39 Only support Node.js versions >= 6.0.0
• 9b8738c Remove unnecessary ignore line
• a408da2 Add Flow types and type check in pretest
• 56fbe50 Upgrade to Inquirer.js version 6.0.0
• 07082b5 Add myself as contributor
• bed9ec6 Remove third party promise lib devDependencies
• ac87692 Upgrade from JSHint and JSCS to ESLint
• 2121783 Remove duplicate key
• adb0c98 Fix comments, remove todo
• b660087 Fix JSHint errors
• 470e09d Upgrade to inquirer v4 class-based API
• 7cff3f1 Remove unused declarations
• 0179a20 Merge pull request #63 from karlhorky/add-prettier-and-format-codebase
• 012d653 Add Prettier and format codebase
• 27ec401 Merge pull request #62 from karlhorky/add-node-10
• cbdba6d Update package-lock.json
• 3f9d1b2 Add Node.js version 10 to .travis.yml

See the full diff

Package name: nodemon

The new version differs by 16 commits.

• ee92ee4 test: split require tests
• 33ae6da test: fix failing test when required
• a4490e2 fix: package.json & package-lock.json to reduce vulnerabilities
• 9bd07eb docs: changed verbose logging and CLI documentation to reflect support single file watch functionality
• c279760 test: make sigint test to actually check child pid (#1656)
• cd45d74 test: fix fork test
• 496c335 chore: undo change to spawn code
• 47dfb8b fix: pipe stderr correctly
• ed91703 fix: ubuntu loop waiting for sub processes
• 9a67f36 feat: update chokidar to v3
• 6781b40 docs: add license file
• 0e6ba3c fix: wait for all subprocesses to terminate (fixes issue #1476)
• b58cf7d chore: Merge branch 'master'
• 95a4c09 docs: add to faq
• 3a2eaf7 choe: merge master
• 3d90879 chore: add logo to site

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic