[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-Y18N-1021887	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: addons-linter

The new version differs by 250 commits.

• ab124e8 ⬆️ release 2.10.0
• dacf158 fix(deps): update dependency postcss to v8.1.4 (#3407)
• a3471b4 chore(deps): update jest monorepo to v26.6.1 (#3408)
• 8e87d5d chore(deps): update dependency markdown-it to v12 (#3401)
• b4d2d45 chore(deps): update dependency eslint-config-prettier to v6.14.0 (#3405)
• 25e900e fix(deps): update dependency dispensary to v0.58.1 and update forbidden libraries (#3420)
• 67a2d80 chore(deps): lock file maintenance (#3419)
• 43cda88 chore(deps): lock file maintenance (#3418)
• f7036ee fix: manifest validator should add a warning instead of an error on non-square svg icons (#3406)
• 091d4b1 chore(deps): update babel monorepo (#3402)
• 7416270 chore(deps): update dependency eslint-config-amo to v3.9.0 (#3412)
• 7aabad2 Remove contrib:welcome from stalebot exclusions (#3413)
• 42b4dfc chore(deps): update dependency pretty-quick to v3.1.0 (#3400)
• 71ff4da chore(deps): lock file maintenance (#3411)
• dbf3dbc chore(deps): lock file maintenance (#3410)
• 2cb13a6 Replace mdn-browser-compat-data with @mdn/browser-compat-data (#3409)
• e154102 fix: add JSON filename in results (#3392)
• 5401e0c fix(deps): update dependency yargs to v16 (#3330)
• 4abd0e0 ⬆️ release 2.9.0
• 4e9f80c chore(deps): update dependency markdown-it-anchor to v6 (#3366)
• bfb2436 fix(deps): update dependency whatwg-url to v8.4.0 (#3387)
• 2daa93d chore(deps): update dependency sinon to v9.2.0 (#3365)
• be94690 fix: .eslintignore files should be ignored (#3390)
• 65b72e3 fix(deps): update dependency eslint to v7.11.0 (#3393)

See the full diff

Package name: yargs

The new version differs by 177 commits.

• 1ffb927 chore: v16.0.0 release
• 5e5e5d0 chore: release 16.0.0 (docs: update current node and npm versions supported in README mozilla/web-ext#1698)
• b215fba feat: adds strictOptions() (chore(deps): update dependency flow-bin to v0.110.1 mozilla/web-ext#1738)
• c7debe8 feat(helpers): rebase, Parser, applyExtends now blessed helpers (fix(deps): update dependency firefox-profile to v1.3.0 mozilla/web-ext#1733)
• c71783a feat: i18n for ESM and Deno (fix(deps): update dependency ws to v7.2.0 mozilla/web-ext#1735)
• d360577 build: use release-please action (chore(deps): update dependency flow-bin to v0.110.0 mozilla/web-ext#1736)
• 4151fee feat: tweaks to API surface based on user feedback (fix(deps): update dependency addons-linter to v1.15.3 mozilla/web-ext#1726)
• 60234a4 deps(typescript): upgrade to typescript@4.x (chore(deps): update dependency conventional-changelog-cli to v2.0.25 mozilla/web-ext#1728)
• bad6f76 docs: use URL to images, for benefit of Deno (chore(deps): update babel monorepo mozilla/web-ext#1727)
• b1f647b chore: add back yargs logo
• ac6d5d1 feat: adds support for ESM and Deno (chore(deps): update dependency cross-env to v6 mozilla/web-ext#1708)
• 0f81024 fix(yargs): add missing command(module) signature (--start-url option does not accept array anymore mozilla/web-ext#1707)
• a552990 feat(usage)!: single char aliases first in help (More detailed information when signing fails mozilla/web-ext#1574)
• f5997e8 refactor(ts): move to TypeScript release of yargs-parser (Ubuntu snap packaged Firefox not starting with web-ext run mozilla/web-ext#1696)
• c06f886 refactor(ts)!: ship yargs.d.ts (fix(deps): update dependency source-map-support to v0.5.13 mozilla/web-ext#1671)
• 56a589f chore(deps): update dependency @types/mocha to v8 (chore(deps): update dependency cross-env to v5.2.1 mozilla/web-ext#1689)
• df283d3 chore(deps): update dependency mocha to v8 (chore(deps): update dependency sinon to v7.4.0 - autoclosed mozilla/web-ext#1674)
• 863937f feat!: drop support for EOL Node 8 (chromium extension-runner reloadAllExtensions should wait wssBroadcast to be processed by the connected clients  mozilla/web-ext#1686)
• 028b50d chore: release 15.4.0 (chore(deps): update dependency eslint to v6 mozilla/web-ext#1635)
• 225ab82 feat: support array of examples (chore(deps): update dependency eslint to v6.2.2 - autoclosed mozilla/web-ext#1682)
• e68334b refactor(ts): move and tsify most of root yargs.js to lib/yargs (chore(deps): update dependency conventional-changelog-cli to v2.0.23 mozilla/web-ext#1670)
• cb7fbb8 chore: remove old entries from `files` field in `package.json (chore(deps): update dependency coveralls to v3.0.6 mozilla/web-ext#1677)
• 34949f8 Revert "chore(deps): update dependency eslint to v7 (Remove set-value and mixed-deep exceptions from .nsprc  mozilla/web-ext#1656)" (chore(deps): update dependency eslint-plugin-flowtype to v3.13.0 mozilla/web-ext#1673)
• 18c2efd docs(api): clarify process.argv handling and the order of API methods (fix: Add supported choices to --target option mozilla/web-ext#1644)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic