[Snyk] Fix for 2 vulnerabilities

[sriram18981]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	No Known Exploit
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: knex

The new version differs by 250 commits.

• ed0e8a5 Fix SQLite not doing rollback when altering columns fails (#4336)
• 3c70dca Prepare 0.95.0 for release
• c1ab23c Await asynchronous expect assertions (#4334)
• 3e6176a SQLite parser improvements (#4333)
• a98614d Made the constraint detection case-insensitive (#4330)
• 5d2db21 Fix ArrayIfAlready type (#4331)
• 887a4f6 Improve join and conflict types v2 (#4318)
• 29b8a36 Adjust generateDdlCommands return type (#4326)
• d807832 mssql: schema builder - attempt to drop default constraints when changing default value on columns (#4321)
• c0d8c5c mssql: schema builder - add predictable constraint names for default values (#4319)
• 5ec76f5 Convert produced statements to objects before querying (#4323)
• 9e28a72 Add support for altering columns to SQLite (#4322)
• 7db2d18 fix mssql alter column must have its own query (#4317)
• 371864d Bump typescript from 4.1.5 to 4.2.2 (#4312)
• 6c3e7b5 mssql: don't raise query-error twice (#4314)
• 168f2af Bump eslint-config-prettier from 7.2.0 to 8.1.0 (#4315)
• 3718d64 Respect KNEX_TEST, support omitting sqlite3 from DB, and reduce outside mssql test db config (#4313)
• c58794b Prepare to release 0.95.0-next3
• 61e1046 Avoid importing entire lodash to ensure tree-shaking is working correctly (#4302)
• 8c73417 events: introduce queryContext on query-error (#4301)
• b6fd941 Include 'name' property in MigratorConfig (#4300)
• 9581100 Prepare to release 0.95.0-next2
• 5614c18 Timestamp UTC Standardization for Migrations (#4245)
• 4899346 Fix for ES Module detection using npm@7 (#4295) (#4296)

See the full diff

Package name: nodemon

The new version differs by 12 commits.

• 9a67f36 feat: update chokidar to v3
• 6781b40 docs: add license file
• 0e6ba3c fix: wait for all subprocesses to terminate (fixes issue #1476)
• b58cf7d chore: Merge branch 'master'
• 95a4c09 docs: add to faq
• 3a2eaf7 choe: merge master
• 3d90879 chore: add logo to site
• 7d6c1a8 fix: Replace `jade` references by `pug`
• 74c8749 chore: test funding.yml change
• c1a8b75 chore: update funding
• d5b9891 test: ensure ignore relative paths
• eead311 fix: to avoid confusion like in #1528, always report used extension

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption