[Snyk] Security upgrade convict from 1.5.0 to 4.0.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	471/1000 Why? Recently disclosed, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: convict

The new version differs by 109 commits.

• 142df54 4.0.1
• 0621e5b Update CHANGELOG with all work done
• 5bb4623 Update package description to be more helpful
• d729278 Merge pull request #220 from madarche/feat-update-dependencies
• 2d9ee71 Update dependencies
• 0ab1f6e Remove unused devDependency
• 02273ec Merge pull request #219 from madarche/fix-move-from-minimist-to-yargs-parser
• 5078e96 Move away from minimist to yargs-parser
• 215ad3e Use db as variable name in all examples
• d06b1fd Merge pull request #215 from meetup/master
• aa44505 Merge pull request #218 from nikolay-govorov/patch-1
• b0360b3 Corrected a typo
• b512e60 pseudo-startsWith for Node compatibility
• f65546a use startsWith, add tests for sneaky startsWith imposters
• 51dfca4 Merge pull request #217 from jpetitcolas/empty_string_over_default
• 32afad1 Merge pull request #216 from elyscape/fix/mutable-default
• b850220 Fix empty string over default non-null string issue
• 4e0ea03 Add test proving empty string doesn't override default value
• e7b0cf5 Ensure property defaults are not modified
• a4089fc clarify wording, separate 'describe' for validation-tests
• f495ba2 nested props in 'object' values are not undeclared
• 198f4db 4.0.0
• 9a923ae Update CHANGELOG with all work done
• b542fe6 Merge pull request #210 from madarche/feat-remove-npm-shrinkwrap.json-file

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution