[Snyk] Fix for 3 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	Yes	Proof of Concept
	490/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-RAMDA-1582370	Yes	No Known Exploit
	748/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.1	Improper Privilege Management SNYK-JS-SHELLJS-2332187	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: commitizen

The new version differs by 65 commits.

• 0f8644d feat: remove dependency on ShellJS (#729)
• 6ef8afa feature: remove dependency on ShellJS (#729)
• ce1042e fix(deps): bump vulnerable packages
• 09ade00 docs: add commitiquette (#727)
• 607d514 fix: update azure devops images
• 9ae386c fix: move to babel.config.js
• 7642f05 fix: add babel spread plugin
• bd5a0ba chore(deps): update dependency nyc to v15 (#704)
• f322e2c chore(deps): bump minimist from 1.2.0 to 1.2.3 (#721)
• 8950d5c docs: Add short circuit to hook example (#665)
• a472e52 docs: fix typo in code inside README.md (#662)
• 270cb5c fix: bump tests to release (#656)
• 2a1a111 fix(deps): update dependency cz-conventional-changelog to v3 (#654)
• 129a779 fix(deps): update dependency lodash to v4.17.15 (#652)
• 5f71dfe Adding tasks to publish test results to AzurePipelines (#590)
• f5751b2 chore: update mocha, other dev deps (#653)
• c48bfb4 fix: dep updates (#650)
• 8931c6b fix(node): remove node 6 and 8 support (#649)
• ad6f14c chore(deps): update dependency semantic-release to v15.13.18 (#644)
• 4417fcf fix: release fixed sem-release (#648)
• b3dd4c4 fix: update dependencies for security (#645)
• 1875a38 fix(deps): update dependency lodash to v4.17.14 [security] (#641)
• 372c75e docs: highlight pre-requisties and bubble up related sections (#613)
• b24eade chore(security): fixed 5 vulnerabilities (#599)

See the full diff

Package name: eslint-config-mailonline

The new version differs by 5 commits.

• 53e0f8c fix: disable import/no-namespace
• d622962 fix: move canonical rules into package
• aafc230 fix: move react overrides to react config
• 6d96ee2 feat: remove import/prefer-default-export and import/max-dependencies
• 0ab36cc feat: forbid anonymous defaults

See the full diff

Package name: semantic-release

The new version differs by 17 commits.

• d548edc feat: Extract npm and github publish to plugins
• 991a7b5 refactor: Simplify file tree
• 3326083 docs(README) fix plugin anchor links (#504)
• 018835f docs(README): typo (#516)
• c8748ad chore(package): update dependencies
• a4951b7 fix(docs): remove unnecessary backticks in readme
• 17a6006 style: Update style for Prettier 1.8.0
• 470697c chore(package): update prettier to version 1.8.0
• 94b00e2 chore(airtable-crm): initial configuration
• d0180c4 feat: Additional commit information
• 186950a fix(package): update @ semantic-release/commit-analyzer to version 4.0.0
• c90765e fix: Include Error properties in logs
• ad2e1d7 test: Fix typos: only in tests and useless console.log()
• 65d344b fix: Check SemanticReleaseError by error.semanticRelease property
• 8a1dd7b fix(package): update @ semantic-release/release-notes-generator to version 5.0.0
• e2a8a5c feat: Refactor CLI to run with one command, improve logs, modularize, add tests
• 1bd095d chore(CODE_OF_CONDUCT): Contributor Covenant

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic