[Snyk] Fix for 2 vulnerabilities

[lholmquist]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Infinite loop SNYK-JS-MARKDOWNIT-6483324	Yes	Proof of Concept
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: electron-rebuild

The new version differs by 250 commits.

• 6f94aaa Merge pull request #1022 from VerteDinde/add-std17-flag-for-e20
• 3f5ff99 fix: ensure force-process-config is not passed to prerelease v20+ (#1023)
• 979361d fix: add std=c++17 flag for e20+
• 20107a8 Merge pull request #1015 from electron/dependabot/npm_and_yarn/typescript-4.6.4
• 3108e3d chore(deps-dev): bump typescript from 4.6.2 to 4.6.4
• 00e6ed3 Merge pull request #1014 from electron/dependabot/npm_and_yarn/types/node-17.0.34
• f9d77d2 chore(deps-dev): bump @ types/node from 17.0.33 to 17.0.34
• f3342e2 Merge pull request #1003 from electron/dependabot/npm_and_yarn/yargs-17.4.1
• 41fa566 Merge pull request #1013 from electron/dependabot/npm_and_yarn/types/node-17.0.33
• 9b3be7c chore(deps-dev): bump @ types/node from 17.0.21 to 17.0.33
• 641db3d chore(deps): bump yargs from 17.3.1 to 17.4.1
• e677ce6 Merge pull request #993 from electron/dependabot/npm_and_yarn/ts-node-10.7.0
• 3cb7db1 Merge pull request #995 from electron/dependabot/npm_and_yarn/mocha-9.2.2
• 2facce0 chore(deps-dev): bump mocha from 9.2.0 to 9.2.2
• 0e59898 chore(deps-dev): bump ts-node from 10.6.0 to 10.7.0
• 4d54c15 Merge pull request #990 from electron/dependabot/npm_and_yarn/types/yargs-17.0.9
• 1b45c84 Merge pull request #991 from electron/dependabot/npm_and_yarn/ts-node-10.6.0
• 708a1c4 Merge pull request #992 from electron/dependabot/npm_and_yarn/node-gyp-9.0.0
• 6d61b02 chore(deps): bump node-gyp from 8.4.1 to 9.0.0
• 7c01ce3 chore(deps-dev): bump ts-node from 10.5.0 to 10.6.0
• 8adb090 chore(deps-dev): bump @ types/yargs from 17.0.8 to 17.0.9
• f798bc5 Merge pull request #986 from electron/dependabot/npm_and_yarn/fs-extra-10.0.1
• 2df36e0 Merge pull request #987 from electron/dependabot/npm_and_yarn/types/node-17.0.21
• f4edeb5 Merge pull request #988 from electron/dependabot/npm_and_yarn/typescript-4.6.2

See the full diff

Package name: ember-electron

The new version differs by 250 commits.

• c1e5703 2.4.0
• 5c867a7 Merge pull request #289 from kongregate/improved-yarn-support
• 9d7e9b8 🔧 Use yarn-or-npm for package scripts
• f87d053 🐛 Prevent watching of project root
• 5788d7b 🔧 Combine before_install in .travis.yml
• e586ecd 🔧 Use electron-packager's prune modules to install production dependencies
• 627d94e 🔧 Add npm/yarn lock files to be used during packaging
• 6d425d6 🔧 Improve yarn tooling
• 46ad304 Merge pull request #300 from felixrieseberg/remove-duplicate-test-main
• cd66abd Lint during builds
• d32cfbb Get rid of duplicate test-main.js files
• d275ede Merge pull request #294 from kongregate/fix-test-reloading
• 322a250 Fix travis build
• b2a89d8 Copy index-electron to a location not managed by broccoli
• fd8279c Merge pull request #293 from synaptiko/master
• 2f0d191 Merge pull request #298 from kongregate/fix-test-throttling-blueprint
• 053d71c Set backgroundThrottling option in webPreferences
• 6f8bce2 Merge pull request #296 from kongregate/disable-throttling-for-tests
• aafcbfc Fix the backgroundThrottling option for tests
• c441df6 Fix live reload
• 182a1e4 v2.3.1
• f1e038d Merge pull request #291 from felixrieseberg/fix/package-permissions
• b0b57bf fix(package-task): ensure tmp dir is world-indexable
• 6f76d9e Merge pull request #287 from ursm/exclude-test-main

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled Resource Consumption ('Resource Exhaustion')