[Snyk] Security upgrade gulp-connect from 2.2.0 to 5.6.1

[dmitriz]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-connect

The new version differs by 129 commits.

• aa10ee3 5.6.1
• a80e3e5 Merge pull request #257 from rejas/update_dependencies
• c6034b8 Cleanup test file
• edcfba8 Update ansi-colors package
• 429068d Only test supported node versions
• 2055d29 Undo typescript update to avoid breaking tests
• 4e3c831 Update all dependencies
• 7192d9e bump 5.5.0
• 13db10c Merge pull request #250 from nickpape-msft/nickpape/lazy-load-http2
• 0c7270c Only load http2 if preferHttp1 is false
• d103fd6 5.4.0
• 8fa06cf add package-lock.json
• 7265554 Merge pull request #247 from nickpape-msft/master
• df25440 bump 5.3.0
• 8869a6d Add a config option for preferring HTTP2
• 0cf6a67 Merge pull request #245 from zbennett10/master
• 6dfe3ca Update README.md
• 3020dc3 Add files via upload
• f9eca17 Upgrade connect package and add needed dependencies for upgrade
• 58abff2 5.2.0 Fixes #241
• 336f5fa Merge pull request #243 from Kyrodan/patch-2
• 951ff57 Merge pull request #244 from Kyrodan/patch-3
• 535132e Merge pull request #242 from Kyrodan/patch-1
• 9b2591b Fixes #236 https does not work with node 8.8

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution