[Snyk] Fix for 7 vulnerabilities

[aliceUnhinged613]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Prototype Pollution SNYK-JS-AJV-584908	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	Yes	Proof of Concept
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept
	686/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.3	Prototype Pollution SNYK-JS-Y18N-1021887	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: addons-linter

The new version differs by 250 commits.

• 58e1cd3 ⬆️ release 4.1.0
• 819adb3 Merge mozilla/dispensary into this project (#4006)
• 05a2c14 chore(deps): lock file maintenance (#4033)
• b16cdd2 add script to automate l10n extraction (#4027)
• 5879309 Pontoon: Update Dutch (nl) localization of AMO Linter
• 4cf977f chore(deps): lock file maintenance (#4032)
• ae72e5d chore(deps): lock file maintenance (#4031)
• 9671f97 Pontoon: Update Vietnamese (vi) localization of AMO Linter
• 531318f Pontoon: Update Swedish (sv-SE) localization of AMO Linter
• 2280236 Pontoon: Update Hungarian (hu) localization of AMO Linter
• 2c1c3c4 Pontoon: Update Ukrainian (uk) localization of AMO Linter
• 63ff228 fix(deps): update dependency eslint-visitor-keys to v3.1.0 (#4029)
• 3b39486 fix(deps): update dependency eslint to v8.2.0 (#4028)
• fcb8bf8 Pontoon: Update Italian (it) localization of AMO Linter
• 59b45a3 Pontoon: Update French (fr) localization of AMO Linter
• 56b4e81 chore(deps): update dependency webpack to v5.62.1 (#4023)
• aa8f306 Pontoon: Update Albanian (sq) localization of AMO Linter
• 92b77d2 Pontoon: Update Albanian (sq) localization of AMO Linter
• 8a1b61a Pontoon: Update German (de) localization of AMO Linter
• 4108a8b Pontoon: Update Sorbian, Lower (dsb) localization of AMO Linter
• 2a6efe2 Pontoon: Update Sorbian, Upper (hsb) localization of AMO Linter
• 1342a3d Pontoon: Update Interlingua (ia) localization of AMO Linter
• b66485b Pontoon: Update Frisian (fy-NL) localization of AMO Linter
• ea9ca2c Pontoon: Update Chinese (Taiwan) (zh-TW) localization of AMO Linter

See the full diff

Package name: watchpack

The new version differs by 179 commits.

• c42f625 2.0.0
• 39d556d 2.0.0-beta.15
• e8010ae Merge pull request fix(): Increased test timeout for Travis mozilla/web-ext#175 from webpack/bugfix/plan-merging
• dc01813 add time logging to test, make test faster, increase timeout
• fe75d0d wait longer before starting testing
• c25701b avoid recursive watchers in the root of the filesystem
• 295b564 fix priority calculation
• 90a1c98 allow nested watchers in plan
• 8014a39 improve ManyWatcher test for nested watching
• 0f88e2e fix parent connections in reducePlan
• a54e09b check if watchers work as expected
• 9ec3868 Merge pull request Tracker: Set defaults for all options using a config file mozilla/web-ext#176 from webpack/feature/logging
• 0158fd5 increase timeout for large test
• b4454e4 enable logging on CI
• 994f2b0 add logging
• ce3b818 2.0.0-beta.14
• 84a833e Merge pull request Update grunt to version 1.0.0 🚀 mozilla/web-ext#170 from webpack/bugfix/watcher-limit
• 224fc1f remove console.log
• b6f5b2c update azure to node 14
• 732f8b7 create less watchers when no options are passed
• 7c197b4 bugfix incorrect type
• c48c3d2 improve test case for multiple files
• ff2cdb4 improve how polling is scheduled to reduce load
• eb608fa improve test and cost function

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)