[Snyk] Fix for 1 vulnerabilities

[kamalaknn]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mocha

The new version differs by 91 commits.

• ef6c820 Release v6.2.1
• 9524978 updated CHANGELOG for v6.2.1 [ci skip]
• dfdb8b3 Update yargs to v13.3.0 (#3986)
• 18ad1c1 treat '--require esm' as Node option (#3983)
• fcffd5a Update yargs-unparser to v1.6.0 (#3984)
• ad4860e Remove extraGlobals() (#3970)
• b269ad0 Clarify effect of .skip() (#3947)
• 1e6cf3b Add Matomo to website (#3765)
• 91b3a54 fix style on mochajs.org (#3886)
• 0e9d8ad tty.getWindowSize is not a function inside a "worker_threads" worker (#3955)
• 48da42e Remove jsdoc index.html placeholder from eleventy file structure and fix broken link in jsdoc tutorial (#3966)
• bd47776 Release v6.2.0
• cc595af update CHANGELOG.md for v6.2.0 [ci skip]
• 59d70ee fix: remove duplicate line-height property (#3957)
• f77cac4 fix: do not redeclare variable (#3956)
• 6201e42 Hide stacktrace when cli args are missing (#3963)
• 88f45d5 Don't re-initialize grep option on watch re-run (#3960)
• 5d4dd98 Fix No Files error when file is passed via --files (#3942)
• 15b96af Collect test files later (#3953)
• ccee5f1 Base reporter store ref to console.log (#3725)
• 47318a7 update @ mocha/contributors to v1.0.4 (#3944)
• c903147 More, improved integration tests for watching (#3929)
• e341ea4 Update CI config files to use Node-12.x (#3919)
• 3064d25 update @ mocha/docdash to v2.1.1 (#3945)

See the full diff

Package name: nyc

The new version differs by 48 commits.

• e21721a chore(release): 14.0.0
• 8cf8a89 docs: update issue template [skip ci] (#1008)
• d7a9d6a chore: Update package-lock.json
• 189bae8 chore: Update dependencies for 14.0.0-rc.1
• 2eb13c6 feat: instrument `--complete-copy` implementation (#1056)
• c88a852 docs: `nyc instrument` and `--exclude-node-modules` (#1039)
• c213469 feat: always build the processinfo temp dir (#1061)
• e597c46 feat: Add support for --exclude-node-modules to subcommands. (#1053)
• 8dcf180 feat: add processinfo index, add externalId (#1055)
• 32f75b0 fix: set processinfo pid/ppid to actual numbers (#1057)
• 16d4315 chore: Stop excluding `bin` from coverage results. (#1060)
• b909575 fix: Use a single instance of nyc for all actions of main command. (#1059)
• 997ed29 chore: Remove arrify dependency. (#1058)
• 68d6333 docs: move setup docs out of the readme [skip ci] (#1052)
• 8da097e feat: add `include` and `exclude` options to instrument command (#1007)
• 31817de chore: Update dependencies (#1050)
• 18e04ba fix: make --all work for transpiled code (#1047)
• b7e16cd feat: Support turning off node_modules default exclude via flag (#912)
• 3eb0e37 docs: A bunch of docs fix-ups (#1038)
• 5c1eb38 test(instrument): should return unmodified source if no transform found (#1036)
• 1f6c3d4 docs: project root directory and `--cwd` doc (#1032)
• 051d95a fix: Add `cwd` option to instrument command (#1024)
• 91e02c6 chore: A few code cleanups (#1033)
• 2867538 feat: Rename `plugins` option to `parser-plugins`. (#1031)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.