Dependabot security update

[ilteoood]

Is there an existing issue for this?

• I have searched the existing issues

Current behavior

Re-open discussion for: #1368

Minimum reproduction code

https://github.com/ilteoood/sesamo-backend

Steps to reproduce

Install dependabot on a nest project

Expected behavior

Security alert disappear

Package version

8.1.2

NestJS version

8.0.11

Node.js version

14.17.6

In which operating systems have you tested?

• macOS
• Windows
• Linux

Other

As opposed to what @kamilmysliwiec, that package is not upgraded.
The version ^3.0.0 of ansi-regex is used by cli-table3, which is an old package released 2 years ago.

The full chain that requires ansi-regex 3.0.0 is: @nest/cli -> cli-table3 -> string-width -> strip-ansi -> ansi-regex.

Please, don't close immediately the thread. Give me at least the time for an answer

[kamilmysliwiec]

We're tracking this here #1359