[Snyk] Fix for 1 vulnerabilities

[enterstudio]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ampersand-model

The new version differs by 29 commits.

• cec083b 8.0.0
• 0e4d652 update ampersand sync
• 6042bf1 7.0.0
• 12bdbd3 Bump ampersand-state to ^5.0.1 (Fix reference of bootstrap-growl tableflip/guvnor#74)
• b312686 improve lodash dep bundling (guvnor doesn't install using node v4 tableflip/guvnor#75)
• 1e7d2b1 6.0.3
• 7f24d92 Merge pull request running etherpad-lite tableflip/guvnor#72 from meandavejustice/71-update-ampersand-sync-dep
• 6503756 Update ampersand-sync dep to 4.0.3
• d71a430 Merge pull request guv daemon dying in-flight tableflip/guvnor#70 from timwis/patch-1
• 5a1ecf2 Remove second "to" typo
• 195d29e Merge pull request Auto-rebuild has stopped working in 3.5.12 tableflip/guvnor#68 from AmpersandJS/transform
• 02befc0 readd browserify transform to package.json
• 3e4192a Merge pull request Logs not shown for new processes tableflip/guvnor#67 from AmpersandJS/travis
• 5a4807c update testing framework
• 35901a0 Merge pull request How to pass env vars thru guv start? tableflip/guvnor#66 from Jakehp/master
• f50c28c Fix broken link.
• 42a6aaa 6.0.2
• 6a952f5 add publish scripts
• 4a4f864 Merge pull request Installing app from password-protected Stash tableflip/guvnor#62 from cdaringe/tidy/rev-deps
• 673296e rev deps, notably &-state to 4.6.0 (minor bump)
• 5d67eac 6.0.1
• 55e2a1d Merge pull request Can't start git-installed app in web UI tableflip/guvnor#58 from AmpersandJS/bug/patch-wait
• 7f6b2ea Fix Patch & Wait
• cd64f14 6.0.0

See the full diff

Package name: ampersand-rest-collection

The new version differs by 10 commits.

• 3cc6223 6.0.0
• a94c2c2 update collection lodash mixin
• 74aa9ad Merge pull request [Snyk] Security upgrade prompt from 0.2.14 to 1.1.0 #32 from AmpersandJS/travis
• f5dc011 trivial change to get ci tests to run again
• eefe6d7 update testing framework
• 3c227db 5.0.0
• 70310dc Merge pull request [Snyk] Security upgrade handlebars from 3.0.8 to 4.0.12 #30 from AmpersandJS/rest-mixin-v5
• 69de5d3 update to rest mixin v5
• afc6ada Merge pull request [Snyk] Security upgrade strip-ansi from 2.0.1 to 7.0.0 #29 from AmpersandJS/feature/update-deps
• 83da388 Update deps

See the full diff

Package name: hapi

The new version differs by 236 commits.

• c4593b6 deps. Closes #2897. Closes #2898. Closes #2899. Closes #2900. Closes #2901. Closes #2902. Closes #2903. Closes #2904. Closes #2905. Closes #2906. Closes #2907. Closes #2908. Closes #2909. Closes #2910. Closes #2911. Closes #2912. Closes #2913. Closes #2914. Closes #2915. Closes #2916. Closes #2917. Closes #2918. Closes #2919. Closes #2920. Closes #2921. Closes #2922. Closes #2923
• ca4320e Merge pull request #2891 from nlindley/payload-test-typo
• 02b6ac7 Fix typo in payload test
• e5da51c Merge branch 'master' of github.com:hapijs/hapi
• 5a0dc49 Remove compount assignments
• 375fe30 Merge pull request #2888 from cjihrig/master
• 05f6a26 style fixes
• 635089b Merge pull request #2887 from gergoerdosi/node-5
• 86102c7 Test on node v5
• fc503f8 lab 7
• fdf7ed3 Merge pull request #2885 from gergoerdosi/subtext
• 0cb9143 Update hapijs/subtext to 2.0.2 from 2.0.1
• d3a6cf8 typo
• 47373dd Remove bluebird. Closes #2881
• 98d3404 Skip most lifecycle on not found and bad path. Closes #2867
• 7041325 CORS error cases. Closes #2868
• 1696838 Replace function with arrow. Closes #2877
• 2aedf38 Merge branch 'master' of github.com:hapijs/hapi
• ca3ee7e Additional => conversions. For #2877
• 1ef09e8 Merge pull request #2876 from sfabriece/patch-1
• a7b3ad7 Initial transition to arrow functions. For #2877
• 7ec0ae3 Update API.md
• 32cf03c for style change. Closes #2875
• 38f90bb Replace var with let. Closes #2874

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution