[Snyk] Security upgrade grunt-contrib-connect from 1.0.2 to 3.0.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: grunt-contrib-connect

The new version differs by 24 commits.

• 5c3d0e7 v3.0.0
• 0df44c9 Merge pull request #262 from gruntjs/upt-depxa
• caa1331 Update dependencies
• ace8bd8 Merge pull request #260 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.19
• eb4496c Bump lodash from 4.17.15 to 4.17.19
• 4f3954d Merge pull request #261 from gruntjs/add-actions
• 434ecd6 Add actions
• 15b3a28 Merge pull request #257 from gruntjs/dependabot/npm_and_yarn/lodash-4.17.15
• 801dcda Bump lodash from 4.17.10 to 4.17.15
• b6e703d v2.1.0
• 399dd5f Merge pull request #256 from TheGreatRefrigerator/master
• f93c287 Fix the gitignore change
• 71fcea9 Upgrade morgan to v1.9.1
• d5390ff Allow all configuration options of livereload to be passed through. (#246)
• 9da2f37 v2.0.0.
• 122398b pass directory options to serve-index
• 19924f8 Fixed: options.open.{appName, callback} (#230)
• b218f7a Update all dependencies.
• c5a7091 Use https.
• d1cfd54 No need to be verbose now.
• 6289a8a Replace http2 with node-http2.
• 42703e0 Added secureProtocol property in httpsOptions
• 216c5e9 Drop Node.js < 6 support and update devDependencies.
• 6f96a55 Fix a broken test.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution