[Snyk] Fix for 2 vulnerabilities

[dmitriz]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	Yes	Proof of Concept
	753/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp

The new version differs by 41 commits.

• 84df40b 3.8.11
• c46bf1a update liftoff and v8flags to deal with new node versions and iojs
• 0b7967f Fixed minor JS syntax error in docs
• 98b1cb6 Update .travis.yml
• e8c6bf6 Add node.js 0.12 and io.js to travis.yml
• 54684fe Adding gulp-util to the npm install line
• e9f8991 Update gulp core team GitHub link
• af17d96 Update gulp-ruby-sass syntax (1.0.0)
• 0cc972c add gitter badge and rearrange badge line
• 3cb110b Removed syntax highlighting from file structure
• 17d77cb update MIT License to year range
• 51e5a24 Merge pull request #834 from danielbayerlein/gulp-watch-v3
• f66bbb4 Merge pull request #836 from yousefcisco/patch-1
• 7f25230 Update dealing-with-streams.md
• c9563c7 gulp-watch v3.0.0 API
• 994f872 Merge pull request #820 from pertrai1/patch-1
• d530c08 article on optimizing web code
• e463249 sourcemaps with watchify
• 6a3b85f clean up watchify recipe
• 20774cc Merge pull request #596 from stevelacy/patch-1
• 03df8c9 Merge pull request #818 from CaryLandholt/master
• 742dce6 pluralized Book(s) section
• 305500f Add "Developing a gulp Edge" book reference
• ae98edf Merge pull request #809 from svetlyak40wt/patch-1

See the full diff

Package name: gulp-sass

The new version differs by 72 commits.

• ee03918 Merge pull request #254 from dlmanning/2.x
• 598d16f Merge pull request #248 from Snugug/feature/contributing
• dec985f Merge pull request #253 from Snugug/feature/3.0-bump
• c033adf ⬆️ Update Node Sass to 3.0
• 083e6bc 🔥 Remove reference to branch
• e072993 🔥 Remove Branching Model section
• ee07858 🎨 Update formatting of CHANGELOG entry
• 299c18f 📝 Add Contributing guidelines
• 33aa1f7 Merge pull request #238 from sarenji/2.x
• 2b21a49 Update to node-sass beta 7
• c1d629c Allow you to change the compiler and expose it
• cc2f815 bump node-sass to 3.0.0-beta.4
• 9b69aaa Merge pull request #228 from Snugug/2.x-datastream
• b7ade97 Indented Syntax support
• ad6e6e4 Tests for file rename and file contents change
• 0fefd16 Updated vars and includePaths based on comments
• 700ca8d Merge pull request #222 from Keats/filename
• 5b8d4eb Nope, shouldn't be , should be file name
• 4c4c3c1 A little bit of source map massaging
• bea198e Updated Tests
• 3cdf1a3 Passing file as data
• 5c7777f Rebase on top of 2.x
• de6af93 Add a sass file to the inheritance test
• 25ee16f Replace indent.sass to match an existing issue

See the full diff

Package name: gulp-template

The new version differs by 12 commits.

• e032d9e 4.0.0
• a6b44a4 bump lodash
• 8675850 Close [Snyk] Security upgrade gulp-autoprefixer from 2.1.0 to 3.0.0 #29 PR: chore: update travis matrix.
• cec7e12 3.1.0
• f4f16aa bump deps
• ca33901 3.0.0
• f7f1c9e upgrade to lodash 3.0.0
• 4adfc41 2.1.1
• 0584f8c Close [Snyk] Fix for 1 vulnerabilities #24 PR: Fix gulp-data support.
• ead55ed Update .travis.yml
• 899d903 Merge pull request [Snyk] Security upgrade gulp-sass from 1.3.2 to 2.0.0 #23 from Turbo87/master
• e753d2b Merge common boilerplate code

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic