[Snyk] Fix for 1 vulnerabilities

[robdyke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • nh_graphs/dev/coffee/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: karma-sauce-launcher

The new version differs by 46 commits.

• 004d61d chore: release v1.2.0
• f783f63 chore: update contributors
• a21fbd9 chore(deps): update dev dependencies
• 79c70c2 feat(config): expose commandTimeout, idleTimeout, maxDuration options
• f607303 Merge branch 'master' of https://github.com/JamieMason/karma-sauce-launcher into JamieMason-master
• 0362ad5 docs(readme): fix SauceLabs doc links
• 0ac67d4 feat(config): allow SE traffic to be sent via Sauce Connect's Relay
• 0219065 docs(readme): add hint to platform configurator
• bae326f feat(config): pass parentTunnel to selenium
• bae758a feat(config): add proxy option
• e792677 feat(deps): upgrade sauce connect
• 79b688c chore(travis): update build config
• 1af7432 chore: release v1.1.0
• 9939f1d chore: update contributors
• de8fbcc chore: update dependencies
• 747a19f feat: update deps and add new saucelabs config
• 3fe1c75 feat(launcher): expose commandTimeout, idleTimeout, maxDuration options
• 2e8ff42 chore: release v1.0.0
• d2d331c chore: update contributors
• 3a4467b version bump to 1.0
• 18480ef chore: release v0.3.1
• 7ba0aad chore: update contributors
• c1e39f4 Merge pull request [Snyk] Security upgrade gulp from 3.9.0 to 4.0.0 #87 from petejohanson/master
• 9a5a147 fix(reporter): Add adapters property for 0.13 compat.

See the full diff

Package name: sauce-connect-launcher

The new version differs by 54 commits.

• efc07ce 1.0.0
• b181bd7 Merge pull request [Snyk] Security upgrade del from 1.1.1 to 8.0.0 #103 from johanneswuerbach/rm-node-0.x
• f29ae23 Add error handler and ensure close listens to the same event
• e72d036 Update dependencies
• 08424ba Remove support for Node 0.x
• 00fa23d Merge pull request [Snyk] Security upgrade gulp-notify from 2.2.0 to 5.0.0 #99 from johanneswuerbach/custom-exe
• 0aabafa Merge pull request [Snyk] Fix for 1 vulnerabilities #97 from johanneswuerbach/hide-api-key
• f07b5be Allow to provide a custom executable
• 84571b5 Hide api key when printing sc arguments
• 80a49ae Merge pull request [Snyk] Security upgrade gulp-notify from 2.2.0 to 5.0.0 #101 from johanneswuerbach/retries
• d3bc182 Configurable connection retries
• c9e4b31 Merge pull request [Snyk] Fix for 1 vulnerabilities #98 from johanneswuerbach/pr-68
• 9992dfa AppVeyor: Workaround flaky tests
• e6623b1 Add test to ensure tunnels are terminated
• 4de6425 Fixing issue in case downloadAndRun is quickly called twice
• 6496ffb Detecting the Selenium port used in the output of Sauce Connect
• b640d42 Allowing multiple tunnels with different loggers.
• f428ab0 The close method now uses the REST API of Saucelabs to delete the tunnel
• 47f0d92 Improving output in verbose mode.
• 01bff4b include .exe extension on Windows platforms
• 5e3e97c Merge pull request [Snyk] Fix for 15 vulnerabilities #67 from johanneswuerbach/unwatch
• 95da840 Merge pull request [Snyk] Security upgrade karma from 0.13.0 to 6.0.0 #93 from samepage-labs/master
• 9d6f40c Allow to specify additional option without kebab transformation
• 573b478 Merge pull request [Snyk] Security upgrade del from 1.1.1 to 2.0.0 #96 from johanneswuerbach/latest-version

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication