[Snyk] Fix for 1 vulnerabilities

[liangyuanruo]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOMENT-2944238	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: convict

The new version differs by 39 commits.

• 7f974da v6.0.0
• 203657b Setup Lerna strategy (WIP: Add babel+webpack scaffolding mozilla/send#368)
• 9f2aec3 Revert "v6.0.0"
• 6162366 v6.0.0
• 8ef51ae More details about Lerna management
• 9bb5bb2 Better do requires at the root of modules
• 29548d2 Cleanup+CHANGELOG update for [email protected] release
• 7c4087c Use standard ESLint disablings everywhere
• 903638f Fix forgotten Mocha test, to switch to Jest
• 63e2716 Remove useless similar .eslintrc.js files because
• 4a5c90e Clearer source file names (Make sure file sizes are localized mozilla/send#366)
• 291cb01 Feat switch to jest (revert the IE fix to fix footer on chrome mozilla/send#365)
• 0638485 Drop unused Travis sudo: false directive
• 4181329 Explain how to work/contribute with Lerna on
• baed83d Document that this is a Lerna monorepo
• 4114ce1 Feat stricter eslint config (Improve production locale detection mozilla/send#364)
• 5a16dd1 Fix "Dependency cycles detected"
• bc9f944 Remove use of assert_changelog_ready script
• cf1663e Update lerna devDep to latest
• 3f2df5a Update to [email protected]
• a6dcebd Switch ESLint config files to JavaScript format
• f76cc78 Use `^x.y.z` range versions for deps
• 7bdd8e1 Improve markdown formatting
• 3ce8352 Add notice about convict@5 and convict@6

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.