#451 chore: upgrade for security vulnerabilities Pull request opened by vwong Fix security vulnerabilities Before:

# npm audit report

semver  <7.5.2
Severity: moderate
semver vulnerable to Regular Expression Denial of Service - <https://github.com/advisories/GHSA-c2qf-rxjj-qqgw>
No fix available
node_modules/conventional-changelog-writer/node_modules/semver
node_modules/cross-env/node_modules/semver
node_modules/eslint-config-airbnb-base/node_modules/semver
node_modules/git-semver-tags/node_modules/semver
node_modules/meow/node_modules/semver
node_modules/nodemon/node_modules/semver
node_modules/read-pkg/node_modules/semver
node_modules/semver
node_modules/simple-update-notifier/node_modules/semver
  conventional-changelog-writer  *
  Depends on vulnerable versions of meow
  Depends on vulnerable versions of semver
  node_modules/conventional-changelog-writer
    conventional-changelog-core  *
    Depends on vulnerable versions of conventional-changelog-writer
    Depends on vulnerable versions of conventional-commits-parser
    Depends on vulnerable versions of git-raw-commits
    Depends on vulnerable versions of git-semver-tags
    Depends on vulnerable versions of read-pkg
    Depends on vulnerable versions of read-pkg-up
    node_modules/conventional-changelog-core
      conventional-changelog  >=1.0.0
      Depends on vulnerable versions of conventional-changelog-core
      node_modules/commit-and-tag-version/node_modules/conventional-changelog
  cross-spawn  6.0.0 - 6.0.5
  Depends on vulnerable versions of semver
  node_modules/cross-env/node_modules/cross-spawn
    cross-env  5.2.0 - 5.2.1
    Depends on vulnerable versions of cross-spawn
    node_modules/cross-env
  eslint-config-airbnb-base  >=15.0.0
  Depends on vulnerable versions of semver
  node_modules/eslint-config-airbnb-base
    eslint-config-airbnb-typescript  >=16.0.0
    Depends on vulnerable versions of eslint-config-airbnb-base
    node_modules/eslint-config-airbnb-typescript
  git-semver-tags  *
  Depends on vulnerable versions of meow
  Depends on vulnerable versions of semver
  node_modules/git-semver-tags
    commit-and-tag-version  *
    Depends on vulnerable versions of conventional-changelog
    Depends on vulnerable versions of conventional-recommended-bump
    Depends on vulnerable versions of git-semver-tags
    node_modules/commit-and-tag-version
    conventional-recommended-bump  >=1.0.0
    Depends on vulnerable versions of conventional-commits-parser
    Depends on vulnerable versions of git-raw-commits
    Depends on vulnerable versions of git-semver-tags
    Depends on vulnerable versions of meow
    node_modules/conventional-recommended-bump
  nodemon  1.4.10-alpha.1 - 1.4.10-alpha.3 || >=1.14.10
  Depends on vulnerable versions of semver
  Depends on vulnerable versions of simple-update-notifier
  node_modules/nodemon
  normalize-package-data  <=2.5.0
  Depends on vulnerable versions of semver
  node_modules/meow/node_modules/read-pkg/node_modules/normalize-package-data
  node_modules/read-pkg/node_modules/normalize-package-data
    read-pkg  <=5.2.0
    Depends on vulnerable versions of normalize-package-data
    node_modules/meow/node_modules/read-pkg
    node_modules/read-pkg
      read-pkg-up  <=7.0.1
      Depends on vulnerable versions of read-pkg
      node_modules/meow/node_modules/read-pkg-up
      node_modules/read-pkg-up
        meow  3.4.0 - 9.0.0
        Depends on vulnerable versions of read-pkg-up
        node_modules/meow
          conventional-commits-parser  >=2.1.5
          Depends on vulnerable versions of meow
          node_modules/conventional-commits-parser
          git-raw-commits  >=1.3.4
          Depends on vulnerable versions of meow
          node_modules/git-raw-commits
  simple-update-notifier  1.0.7 - 1.1.0
  Depends on vulnerable versions of semver
  node_modules/simple-update-notifier

word-wrap  *
Severity: moderate
word-wrap vulnerable to Regular Expression Denial of Service - <https://github.com/advisories/GHSA-j8xg-fqg3-53r7>
fix available via `npm audit fix`
node_modules/word-wrap
  optionator  0.8.3 - 0.9.1
  Depends on vulnerable versions of word-wrap
  node_modules/optionator

21 moderate severity vulnerabilities

To address issues that do not require attention, run:
  npm audit fix

To address all issues possible (including breaking changes), run:
  npm audit fix --force

Some issues need review, and may require choosing
a different dependency.

After:

found 0 vulnerabilities

pact-foundation/pact-js-core ✅ All checks have passed 25/25 successful checks