[Snyk] Fix for 2 vulnerabilities

[matejsvajger]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	Proof of Concept
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: plop

The new version differs by 175 commits.

• f1ef61d bump package version
• c24e09b Merge pull request #293 from plopjs/esm
• 7391126 chore: narrow alpha testing dep
• 023226e Major upgraded Liftoff typings and Chalk
• e13a7a3 Upgrade testing library
• 2ae322f Upgrade README docs
• fbc8991 Improve docs regarding generator
• e52feef chore: add test for CJS, MJS, and ESM support
• 020286c Fix error occuring with nodePlop usage
• 91b854f Initial work to migrate to ESM node-plop
• ad7004f Upgrade major devtool deps
• b7db27e Upgrade major liftoff version
• 84be769 Upgrade major chalk deps
• c50946e Fix final tests
• 656a74f Initial work to migrate to ESM
• d152d6d Merge remote-tracking branch 'origin/master' into update-ora
• 77f42ee Merge pull request #287 from plopjs/stdio-tests
• 6e6e73c Add initial GitHub actions logic
• cb0bd7e Fix various timing and impl bugs with tests
• 80aa8ec wat
• 01452aa Correct typo
• 37dadbf Made cleanup for files more robust FS management
• f83dbed Added wrap-plop tests
• 4a14c4d Improve add action tests

See the full diff

Package name: watchify

The new version differs by 9 commits.

• 7b27a3c 4.0.0
• 5d4842a bump deps (#380)
• b840f29 disable package-lock.json
• bae5e02 update chokidar and anymatch (#378)
• 3445775 ci: use github actions (#379)
• f79e59f Change URLs from "Substack" (someones personal site & acc) to "browserify" (#369)
• bd2f677 ci: run on more node versions
• 563a90d Merge pull request #367 from Trott/update-readme-badge
• bb2b429 chore: Fix Travis-CI badge in readme.markdown

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Note: This is a default PR template raised by Snyk. Find out more about how you can customise Snyk PRs in our documentation.

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption