[Snyk] Fix for 13 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/client-app/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-1924893	Yes	No Known Exploit
	494/1000 Why? Has a fix available, CVSS 5.6	Inappropriate Implementation SNYK-JS-ELECTRON-1924894	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Inappropriate Implementation SNYK-JS-ELECTRON-1924895	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-1930826	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Domain Spoofing SNYK-JS-ELECTRON-2329155	Yes	No Known Exploit
	654/1000 Why? Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2329162	Yes	No Known Exploit
	726/1000 Why? Recently disclosed, Has a fix available, CVSS 8.8	Use After Free SNYK-JS-ELECTRON-2338684	Yes	No Known Exploit
	726/1000 Why? Recently disclosed, Has a fix available, CVSS 8.8	Type Confusion SNYK-JS-ELECTRON-2339883	Yes	No Known Exploit
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342073	Yes	Proof of Concept
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MARKED-2342082	Yes	Proof of Concept
	611/1000 Why? Recently disclosed, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Open Redirect SNYK-JS-NODEFORGE-2330875	Yes	Proof of Concept
	529/1000 Why? Has a fix available, CVSS 6.3	Prototype Pollution SNYK-JS-NODEFORGE-2331908	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: googleapis

The new version differs by 250 commits.

• 20409df chore: release 49.0.0 (Feature request: Pause inbox nylas/nylas-mail#2022)
• 7de4e78 chore(deps): update dependency null-loader to v4 (Google Sign In doesnt work for me nylas/nylas-mail#2044)
• 340f78d chore(deps): update dependency ts-loader to v7 (Ability to handle mailto links on Windows nylas/nylas-mail#2043)
• 254f878 chore: remove unused dev packages (Replying to accounts from the same user replies to wrong "to" address nylas/nylas-mail#2042)
• f4eb6e0 chore: update lint ignore files (All accounts section won't update with new email nylas/nylas-mail#2040)
• 0110f3e docs: update readme for drive readme (Nylas Does Not Open nylas/nylas-mail#2039)
• 73d284b fix(deps): update common and auth (Feature request: auto snooze nylas/nylas-mail#2038)
• 476b71e test: use discovery docs from fixture (Surely an error. $7 a month for a client? nylas/nylas-mail#2037)
• 3a3b61d build: remove unused codecov config (Can't add a Gmail account - Google Sign In does not appear nylas/nylas-mail#2034)
• fea414a feat!: regenerate the API (horizontal scrollbar does not appear when viewing wide email nylas/nylas-mail#2028)
• 48a4f05 chore(dep)!: deprecate node 8 (Documentation contains broken links nylas/nylas-mail#2021)
• 99ebacf test: the kitchen sink system test sometimes times out (Picking the wrong Sender address while replying nylas/nylas-mail#2020)
• 05090da fix: apache license URL (Unread counts for all accounts nylas/nylas-mail#468) (Use long names nylas/nylas-mail#2017)
• d15c656 chore: remove duplicate mocha config (Parse Office 365 names nylas/nylas-mail#2016)
• 874edc3 build: update templates (N1 shows & now sends blank emails nylas/nylas-mail#2013)
• dc16586 build: set AUTOSYNTH_MULTIPLE_COMMITS=true for context aware commits (Images not loaded in message nylas/nylas-mail#2012)
• 741c58b chore: update github actions configuration (*SUGGESTION* Default Windows 10 Theme nylas/nylas-mail#1999)
• 1fe744b chore(deps): update dependency @ types/rimraf to v3 (rank 👍 before 👎 nylas/nylas-mail#1995)
• 5512eb5 chore(deps): update dependency typedoc to ^0.17.0 (N1 only shows first email account when it is opened after reboot. nylas/nylas-mail#1993)
• 0a4db38 chore: release 48.0.0 ('sent' isn't capitalised nylas/nylas-mail#1979)
• 074f641 fix: allow an empty requestBody to be provided for APIs that support multipart post (Fix copy when archiving/deleting nylas/nylas-mail#1988)
• 8bcb212 feat!: run the generator (adds: displayvideo, gamesConfiguration, managedidentities, networkmanagement) (Signature turns out to be quote after a reply sent nylas/nylas-mail#1989)
• 8677588 build(tests): fix coveralls and enable build cop (Feature Request: Only show the folders for the currently selected mailbox nylas/nylas-mail#1982)
• 0679c78 build: update linkinator config (mailto links not opening compose window nylas/nylas-mail#1981)

See the full diff

Package name: marked

The new version differs by 250 commits.

• ae01170 chore(release): 4.0.10 [skip ci]
• fceda57 🗜️ build [skip ci]
• 8f80657 fix(security): fix redos vulnerabilities
• c4a3ccd Merge pull request from GHSA-rrrm-qjm4-v8hf
• d7212a6 chore(deps-dev): Bump jasmine from 4.0.0 to 4.0.1 (Cmd+W on "About Nylas N1" window closes main window instead nylas/nylas-mail#2352)
• 5a84db5 chore(deps-dev): Bump rollup from 2.62.0 to 2.63.0 (Sync issues with other Apps? nylas/nylas-mail#2350)
• 2bc67a5 chore(deps-dev): Bump markdown-it from 12.3.0 to 12.3.2 (UX: Message swiping + scrolling a little clumsy nylas/nylas-mail#2351)
• 98996b8 chore(deps-dev): Bump @ babel/preset-env from 7.16.5 to 7.16.7 (Could not find https://billing-staging.nylas.com nylas/nylas-mail#2353)
• ebc2c95 chore(deps-dev): Bump highlight.js from 11.3.1 to 11.4.0 (nylas --background doesn't open N1 in the background nylas/nylas-mail#2354)
• e5171a9 chore(release): 4.0.9 [skip ci]
• 41990a5 🗜️ build [skip ci]
• a9696e2 fix: retain line breaks in tokens properly (URL or ID to easily open specific email thread nylas/nylas-mail#2341)
• 6aacd13 chore(deps-dev): Bump jasmine from 3.10.0 to 4.0.0 (warns suspicious message only on differing domain nylas/nylas-mail#2343)
• 55e5df9 chore(deps-dev): Bump @ babel/core from 7.16.5 to 7.16.7 (UX request: no Github contact card when 'no matching profile' nylas/nylas-mail#2344)
• 4f4cab4 chore(deps-dev): Bump eslint-plugin-import from 2.25.3 to 2.25.4 (Nylas/windows 10 installation has failed nylas/nylas-mail#2345)
• 97ea9f2 chore(deps-dev): Bump eslint from 8.5.0 to 8.6.0 (new version lost in restart loop, and never stop nylas/nylas-mail#2346)
• 4c3b853 chore(deps-dev): Bump rollup-plugin-license from 2.6.0 to 2.6.1 (Make Snoozes mappable to Key Bindings nylas/nylas-mail#2347)
• 9396896 chore(deps-dev): Bump rollup from 2.61.1 to 2.62.0 ("Launch on system start" should not default to on nylas/nylas-mail#2338)
• 103a56c chore(deps-dev): Bump @ babel/preset-env from 7.16.4 to 7.16.5 (Nylas sends out empty reply e-mails nylas/nylas-mail#2333)
• be771c9 chore(deps-dev): Bump eslint from 8.4.1 to 8.5.0 (Email body display height being set to 0? nylas/nylas-mail#2334)
• 67d5a65 chore(deps-dev): Bump @ babel/core from 7.16.0 to 7.16.5 (Could not reach Nylas API nylas/nylas-mail#2335)
• 991493a chore(deps-dev): Bump eslint-plugin-promise from 5.2.0 to 6.0.0 (Missing attachment in email nylas/nylas-mail#2336)
• 59375fb chore(release): 4.0.8 [skip ci]
• 4734c82 🗜️ build [skip ci]

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic