[Snyk] Fix for 2 vulnerabilities

[jlusthaus]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	No	Proof of Concept
	753/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.2	Command Injection SNYK-JS-LODASH-1040724	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: snyk

The new version differs by 42 commits.

• 1819ace Merge pull request #356 from snyk/fix/bump-nodejs-lockfile-parser-vulnerable-deps
• c311382 fix: bump nodejs-lockfile-parser to update vulnerable deps
• 0006647 Merge pull request #353 from snyk/feat/remove-semver-use-for-os-packages
• a38167c feat: move fixed in calculation for os packages to phoenix
• f229c28 Merge pull request #349 from snyk/feat/remove-semver-use
• 97a2d63 feat: remove semver for binaries and use nearestFixedInVersion instead
• 5160c55 Merge pull request #346 from snyk/lirantal-composer-lockfile-help
• f66d1b9 fix(docs): add missing composer.lock file
• e98739a Merge pull request #318 from snyk/refactor/commands-test
• 2080fa0 refactor: test command rewritten to TS
• 7a4a915 Merge pull request #342 from snyk/chore/remove-build-from-toc
• 6d2feb0 chore: remove build from TOC
• 6b07600 Merge pull request #337 from snyk/fix/php-plugin-bump
• 319cf35 fix: bump php plugin to better support file paths
• f773c77 Merge pull request #338 from snyk/fix/bump-docker-plugin
• b4ba234 Merge pull request #341 from snyk/test/revert-a-fixture-change
• bbfd700 test: remove a fixture change done in https://github.com/fix: pin proxy-agent & get-uri deps to not-break node 4 snyk/cli#340
• 3667dcd fix: bump docker plugin
• 567e3b3 Merge pull request #340 from snyk/fix/pin-deps-to-unbreak-node-4
• c7966f8 test: pin `get-uri` to 2.0.2 in a fixture
• 8bfae15 fix: pin proxy-agent & get-uri deps to not-break node 4
• a8c561d Merge pull request #327 from snyk/fix/undefined-base-image
• 962810a fix: Undefined base image
• bc82842 Merge pull request #325 from snyk/chore/run-travis-on-node-10

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic