[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	758/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-LODASH-608086	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: postman-collection

The new version differs by 169 commits.

• fe64699 Merge branch 'release/3.6.3'
• 3e227eb Release v3.6.3
• 401cff8 Merge pull request #1065 from postmanlabs/dependabot/npm_and_yarn/lodash-4.17.19
• 521f77b Bump lodash from 4.17.15 to 4.17.19
• f10857e Merge pull request #1069 from postmanlabs/dependabot/npm_and_yarn/strip-json-comments-3.1.1
• 6328013 Merge pull request #1066 from postmanlabs/dependabot/npm_and_yarn/iconv-lite-0.6.2
• 7a0ccaa Bump strip-json-comments from 3.1.0 to 3.1.1
• 6c2b7c4 Bump iconv-lite from 0.5.1 to 0.6.2
• 8895878 Merge pull request #1060 from atulbi/feature/add-isotimestamp-dynamic-variable
• 8a1b62c Add test to verify timestamp generator returns valid result
• d11b6b5 Add $isoTimestamp to dynamic variable list
• e464ea6 Merge branch 'release/3.6.2' into develop
• 8d1d6db Merge branch 'release/3.6.2'
• 363da00 Release v3.6.2
• 958da9d Merge pull request #1056 from postmanlabs/feature/stringify-null
• e73a417 Update uuid to version 3.4.0
• c80b46f Stringify null Variable values to "null"
• 6e1f3ba Merge pull request #1055 from postmanlabs/dependabot/npm_and_yarn/postman-request-2.88.1-postman.23
• 6fede9c Bump postman-request from 2.88.1-postman.22 to 2.88.1-postman.23
• 2dd6663 Merge pull request #1054 from postmanlabs/dependabot/npm_and_yarn/jsdoc-to-markdown-6.0.1
• 5da91a1 Merge pull request #1053 from postmanlabs/dependabot/npm_and_yarn/js-yaml-3.14.0
• 2351960 Merge pull request #1052 from postmanlabs/dependabot/npm_and_yarn/mocha-7.2.0
• 228bf7a Merge pull request #1049 from postmanlabs/dependabot/npm_and_yarn/uuid-8.1.0
• b2fa4db Merge pull request #1045 from postmanlabs/dependabot/npm_and_yarn/marked-1.1.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic