[Snyk] Fix for 4 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change
	Directory Traversal SNYK-JS-NODEGIT-542720	No
	Improper Handling of Alternate Data Stream SNYK-JS-NODEGIT-542721	No
	Improper Handling of Alternate Data Stream SNYK-JS-NODEGIT-542722	No
	Improper Link Resolution Before File Access SNYK-JS-NODEGIT-542723	No

Commit messages

Package name: nodegit

The new version differs by 250 commits.

• bdae091 Fix workflow for node 8 npm issue
• 0de3294 Bump to v0.26.3
• 36856a1 Merge pull request #1743 from implausible/security-fixes
• b5769a2 Bring in security patches from libgit2
• 1047f66 Bupm to v0.26.2
• 0683f2b Update README.md for inactive maintainers
• b66dd42 Merge pull request #1728 from implausible/feature/commit-walk-commit-models
• d7c9860 Use const qualifier more; use static_cast for void *
• 6ecd368 commitWalk optionally returns plain objects with gpgSignature data
• ee7b26c Bump to v0.26.1
• 7468f5e Merge pull request #1723 from implausible/bump/libgit2
• 0ff6470 Bump libgit2 to latest fork of master
• 372635a Merge pull request #1722 from implausible/fix/optional-parameter-on-update-tips
• cd55298 updateTips: optional param and normalizeOptions
• 0228707 Enable builds on tags
• 3699ee9 Bump to v0.26.0
• b6e5fac In testing, retry npm install because of unsolved race condition
• d071af0 Merge pull request #1720 from implausible/fix/async-remote-functions
• 46a3456 Merge pull request #1719 from implausible/patch/libssh2
• 95e0518 GitRemote upload and updateTips are async
• 129492d Update libssh2 to 1.9
• f2fea6a Merge pull request #1717 from henkesn/rebase-inmemory
• ee79dcb Add test for in-memory rebase
• b495715 Fix rebase using in-memory index

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic