[Snyk] Fix for 2 vulnerabilities

[sascha1337]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	No Known Exploit
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @oclif/plugin-help

The new version differs by 6 commits.

• 2760180 chore(release): 4.0.0 [ci skip]
• bef4a21 chore: bump to 4.0.0
• 7154ae7 feat: upgrade to oclif-core
• 5e17dd5 fix: re-add oclif/dev-cli
• 559ada1 chore: add oclif as dev dependency
• 0b2c0e7 Update to oclif/core (#263)

See the full diff

Package name: cli-ux

The new version differs by 40 commits.

• 94a2dbf chore(release): 6.0.9 [ci skip]
• 270efe3 fix: deprecate cli ux (#477)
• 82449f0 chore(release): 6.0.8 [ci skip]
• 0511944 fix(security): bump cli-progress
• bab8a2b chore(release): 6.0.7 [ci skip]
• ce8cec5 fix: bump @ oclif/core (#475)
• 8c2ee67 Merge pull request #474 from oclif/dependabot-npm_and_yarn-typescript-4.5.4
• 4358d81 chore(deps-dev): bump typescript from 4.5.2 to 4.5.4
• e76b18c chore: sync dependabot.yml (#419)
• 3889c2e ci: sync .circleci/config.yml (#470) [skip ci]
• ed5d19f chore: fix url hyperlink test (#469)
• cd4e665 Merge pull request #466 from oclif/dependabot-npm_and_yarn-axios-0.24.0
• 7be5090 Merge pull request #467 from oclif/dependabot-npm_and_yarn-typescript-4.5.2
• a2ae094 chore: replace instances of master with main [skip ci]
• 474e88e chore: update author [skip ci]
• 5ce5f19 chore: release as latest [skip ci]
• 0b2017f chore(deps-dev): bump typescript from 4.4.3 to 4.5.2
• ac0d7f6 chore(deps-dev): bump axios from 0.21.4 to 0.24.0
• 21e8525 chore(release): 6.0.6 [ci skip]
• 44eecd0 fix: bump deps and fix tests (#465)
• 9da5c51 chore: add windows tests [skip ci]
• 256325e chore(release): 6.0.5 [ci skip]
• 2b8699d fix: bump deps (#462)
• 641a2fb chore(dependabot): add versioning-strategy [skip ci]

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption