[Snyk] Security upgrade ember-cli from 3.28.3 to 4.12.3

[lholmquist]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • ember/client/package.json
  • ember/client/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	681/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASHTEMPLATE-1088054	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ember-cli

The new version differs by 250 commits.

• ad783d1 Release 4.12.3
• 40dcf91 update changelog
• c345ccb Merge pull request #10458 from gorner/replace-lodash-template
• ecae1a0 Bump fast-sourcemap-concat to 2.1.1
• 46a6ca0 Use Lodash's `_.template` instead of `lodash.template` package
• e4f2d2d Release 4.12.2
• 5f24efd update changelog
• f2fda0b Merge pull request #10314 from NullVoxPopuli/backport-10300-to-4-12
• b4a042c Try interpreting the node version from the environment via execa.sync
• b3a1f0a Skip the typescript tests due to node 14 incompatibility
• 4dce444 [BUGFIX] Do not try to wire up Testem unless a test framework is detected -- this is for legacy compat -- modern libraries, such as ember-qunit, call hookIntoTestFramework themselves, because it has better knowledge of when Testem needs to be configured
• c0935c0 Release 4.12.1
• c5fef60 update changelog
• 83d3655 Merge pull request #10251 from bertdeblock/remove-stylelint-config-prettier
• ffc768b Remove `stylelint-config-prettier` from `app` blueprint
• fddde7a Release 4.12.0
• 0160a2c update changelog
• 60c0ba8 Merge branch 'beta' into release
• 02dd857 Merge pull request #10248 from kellyselden/update_stable_deps
• 2081540 update stable deps
• fa621ab Release 4.12.0-beta.0
• 3c14502 fix changelog
• 6c1a179 Release 4.11.1-beta.0
• 40fb813 update changelog

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Command Injection