[Snyk] Security upgrade honkit from 3.7.5 to 4.0.8

[ajmeese7]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: honkit

The new version differs by 54 commits.

• 6a2337b chore(release): v4.0.8 (#353)
• f80222e fix(deps): update lerna
• e14e309 chore: remove useWorkspaces
• c6f744d chore(deps): bump nunjucks from 3.2.3 to 3.2.4 (#338)
• 798b681 fix(honkit): fix TypeError: Cannot read properties of undefined (reading 'file') (#350)
• a419a67 Merge pull request #349 from honkit/dependabot/npm_and_yarn/semver-7.5.2
• 19f0b3f chore(deps): bump semver from 5.7.1 to 7.5.2
• aff8183 docs: add learn javascript book (#345)
• b723ce5 docs: Link to gitbook comparison in home page (#337)
• b12f6eb chore(release): v4.0.7 (#336)
• b91f082 fix: ci:versionup:patch
• cf5784b CI: add .github/release.yml
• d92b9b5 CI: Move new release flow
• 6aa10d4 fix(deps): remove unused read-installed (#334)
• 7fad871 chore(release): v4.0.6 (#333)
• 22913da refactor: remove ltrim and rtrim (#332)
• ef44431 chore(release): v4.0.5 (#331)
• 82ba754 fix(deps): remove "request" package (#329)
• 1a80345 Update faq.md
• 15b974d Update benchmark.yml
• ba2fc90 Merge pull request #324 from honkit/dependabot/npm_and_yarn/http-cache-semantics-4.1.1
• 7163d9e chore(deps): bump http-cache-semantics from 4.1.0 to 4.1.1
• 991c7c8 Merge pull request #320 from honkit/dependabot/npm_and_yarn/json5-1.0.2
• 7dcc365 chore(deps): bump json5 from 1.0.1 to 1.0.2

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)