[Snyk] Fix for 4 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Arbitrary Code Execution SNYK-JS-JSYAML-174129	Yes	No Known Exploit
	Denial of Service (DoS) SNYK-JS-MONGODB-473855	Yes	No Known Exploit
	Code Injection npm:dustjs-linkedin:20160819	No	No Known Exploit
	Cross-site Scripting (XSS) npm:marked:20170112	No	No Known Exploit

Commit messages

Package name: marked

The new version differs by 13 commits.

• 2a92083 Release 0.3.7
• 753a7bd 0.3.7
• 635e45c Merge pull request feat: add open redirect and xss vulns in code snyk-labs/nodejs-goof#960 from chjj/github-templates
• d24427e Add issue template
• 8f9d0b7 Merge pull request [Snyk-dev] Security upgrade npmconf from 0.0.24 to 1.0.1 snyk-labs/nodejs-goof#844 from chjj/data_link_fix
• cd2f6f5 added data: link fix to prevent xss
• 38f1727 Merge pull request [Snyk-local] Fix for 3 vulnerabilities snyk-labs/nodejs-goof#728 from nehero/patch-1
• eddec20 v0.3.6
• fd0d1a2 Merge pull request [Snyk] Fix for 3 vulnerable dependencies snyk-labs/nodejs-goof#592 from matt-/xss_html_entities
• 0fa05b6 Merge pull request [Snyk] Fix for 29 vulnerable dependencies #1 from rsp/fix/xss_html_entities_semicolon
• 31c7799 add optional semicolon in html entities regex
• 6470e8b Update readme example to reflect defaults
• 2cff859 added explicit matching for HTML entities to prevent XSS

See the full diff

Package name: mongoose

The new version differs by 250 commits.

• 87f691e chore: release 5.4.10
• 09dd3cf docs(jest): improve docs about fake timers
• e778e0b chore: upgrade to mongodb driver 3.1.13
• 42aa401 refactor: be slightly more defensive about setting document arrays
• e5948b8 fix(document): copy atomics when setting document array to an existing document array
• a4e33dd test(document): repro #7472
• 704a5a4 docs: remove confusing references to executing a query immediately
• bc95a22 docs(guides+schematypes): link to custom schematypes docs
• ad71535 style: fix lint
• bc5d96a Merge branch 'gh6706'
• ab208b1 docs: hook up navbar search
• 3fc3e2b docs: add basic search page re: #6706
• a7ccba7 chore: add domainwheel.com as a sponsor
• 91755fa Merge branch 'master' into gh6706
• 3150958 docs(api): dont display type if method or function
• bfb3a9a style: fix lint
• 899ccdd Merge pull request #7478 from chrischen/master
• ef2ab11 chore(Makefile): remove unused rule
• bb1e8b4 chore: now working on 5.4.10
• 6032685 Added dot sytnax support for alias queries.
• 316936f chore: release 5.4.9
• 1bfdafd Merge pull request #7474 from arniu/fix-doc
• f67e30c docs: add Marcus Hiles and monovm as sponsors
• f08a4bd docs(documents): improve explanation of documents and use more modern syntax

See the full diff

Package name: tap

The new version differs by 171 commits.

• fe8158e 11.1.3
• b17542d Upgrade deps (changing semver requirements)
• bc3ba17 update deps
• bd4de92 Clean up nyc output so Travis passes on node 6
• 2292432 Add hexagonal-lambda to the tap 100 list
• fed62c9 Merge remote-tracking branch 'origin/master'
• 3cdf1c7 11.1.2
• ddf938b Only ship files we want to ship
• 5b5e2ee docs: add unique page titles
• 2323c3b Merge tag 'v11.1.1'
• 95faf6c 11.1.1
• 283c8e6 Handle EPIPE better in exceptional edge cases
• b727234 Fix obscure edge case when this.results is not set
• 1699eb9 process: update docs on the master branch
• ac366a0 docs: fix typo ('heirarchical' -> 'hierarchical')
• 13073a7 docs: correct 100 PR link
• b95ee22 v11.1.0
• fcf70aa Add support for disabling autoend
• 94be0a7 v11.0.1
• 6c3f019 remove badges that are no longer accurate or in use
• ae562a7 don't ignore coverage doc
• 9fcfd52 Migrate docs into main repository
• f189c50 v11.0.0
• 5cde128 Merge branch 'v11'

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic