[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	883/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 9.8	Arbitrary Code Execution SNYK-JS-UNDERSCORE-1080984	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: noflo

The new version differs by 250 commits.

• a1187c6 Bump
• d1c13f2 Update Flowhub docs link
• 49cfb8b Update fbp-protocol link
• b25001e Update MsgFlo link
• 9757b8d Merge pull request #534 from noflo/update_copyrights
• f84ca06 Reassign copyrights
• a790ba4 Make 'grunt test' run the build task instead of duplicating
• 593a39d Bump
• 05d38ad Document WirePattern Process API changes, refs #526
• 452c57f Merge pull request #526 from noflo/process_wirepattern
• 6ceab6f Merge pull request #532 from noflo/fix_null_undefined
• efaba77 Fix ip.data turned from null to undefined
• 76d10c6 Provide postpone/resume functions that throw a more user-friendly error
• 4db7e7b Plug deprecation warnings back in
• 9d15d3c Collation support for WirePattern group and field options in Process API
• 5d322e2 Initial support for collating inputs by field
• 4d4413e More consistent wrapper naming
• 589e445 Make it possible to force WirePattern into legacy mode, either via env vars or with a config key
• 2553bcd Expose component instance
• 194ae10 Move more component initialization to proper befores
• da8a8bf Move more component initialization to proper befores
• 17ce316 With Process API the garbage collection tests don't make sense
• 36ef4b3 Better debug message for WP legacy fallback
• b3a21a4 Prevent multiple dones

See the full diff

Package name: noflo-canvas

The new version differs by 42 commits.

• 5dd30d3 Bump
• ed38d2c Merge pull request #140 from noflo/process_api
• 6bb309c Fix desc
• 7581eaa Missing component creation
• d82f073 Bump noflo-helper-arrayable
• 1b622ec Port Draw to Process API
• 49e2d23 Pass start callback
• 3c4a2ed Port more components to Process API
• 20936ee Let Process API do the sending
• d3c1062 Port MakeRandom to Process API
• af1268b Port MakeRange to Process API
• 4699c1d Let Process API do the sending
• 7989ee0 Port Recurse to Process API
• 8f21a07 Port to Process API
• 080161e Port SaveX components to Process API
• 7d1f1ec fix(package): update noflo-helper-arrayable to version 0.1.1
• 6261d4e Typo fix
• 1e3397d Bump noflo-helper-arrayable dep
• 9a759ec Port CreateCanvas to Process API
• efea537 fix(package): update noflo-helper-arrayable to version 0.1.0
• cd1c02f Port ColorArrayToCss to Process API
• 78c7127 More liberal NoFlo component library requirements
• 84035fc Bump NoFlo dep
• af9ae80 Remove obsolete grunt-noflo-manifest

See the full diff

Package name: noflo-core

The new version differs by 144 commits.

• ac938cb Bump
• 03f8473 Merge pull request Use node.js 4.6 imgflo/imgflo-server#99 from noflo/greenkeeper/noflo-0.8.0
• 095e3c2 Remove obsolete component.js manifest and grunt-noflo-manifest
• 0e84a8d Use the modern generator functionality with correct deactivation
• 2d01303 Call done in appropriate places
• a856767 Drop all packets, not just data
• 5a99f02 Use the hasData helper
• 2161243 Switch to the tearDown method
• 47dd785 Use the hasStream helper
• 599f809 More liberal NoFlo deps
• ec252fd Update noflo-nodejs
• 388ba4a chore(package): update noflo-nodejs to version 0.8.1
• bf10cf6 Merge remote-tracking branch 'origin/greenkeeper/noflo-nodejs-0.8.0' into greenkeeper/noflo-0.8.0
• d1f76d8 chore(package): update noflo-nodejs to version 0.8.0
• cd7b260 chore(package): update noflo to version 0.8.0
• 8afc0da Merge pull request Fix invalid protocol crash imgflo/imgflo-server#96 from noflo/greenkeeper/fbp-spec-0.2.0
• 556cc56 chore(package): update fbp-spec to version 0.2.0
• 27d04f2 Merge pull request runtime: Update to latest, with more graphinfo imgflo/imgflo-server#95 from noflo/greenkeeper-grunt-noflo-browser-1.0.3
• 541ff3d Generate browser runner using grunt_noflo_browser
• 9fcde08 Use wildcards
• 5e1f743 chore(package): update grunt-noflo-browser to version 1.0.3
• ac543da Merge pull request Better inputs in debug ui imgflo/imgflo-server#94 from noflo/update_dependencies
• 3481f09 Merge remote-tracking branch 'origin/greenkeeper-grunt-contrib-uglify-2.0.0' into update_dependencies
• b8bbef5 Update grunt

See the full diff

Package name: noflo-image

The new version differs by 250 commits.

• adbfb9b Bump
• cbc36a2 Merge pull request #214 from noflo/process_api
• 562523b More liberal NoFlo component library requirements
• c0e7582 Remove unused noflo module deps
• 3c8e096 Bump noflo-core dep
• b6412f5 Port VideoToCanvas to Process API
• 4df9942 No need to special-case for component.io any longer
• 471bc86 Cleaner return
• ff1c56c Port ImageToCanvas to Process API
• db5afba Port GetPresetCurve to Process API
• 702523d Cleaner error handling
• bb9b4a5 Cleaner error handling
• 85b0214 Port GetFeaturesYAPE to Process API
• a891ce0 Synchronous WirePattern is deprecated
• 9278874 Remove the deprecated port
• a0d620f Port GetCannyEdges to Process API
• 2170826 Synchronous WirePattern is deprecated
• ecb7880 Port FindFeatureFreeAreas to Process API
• 17e7073 Synchronous WirePattern is deprecated
• d059956 Synchronous WirePattern is deprecated
• c5e63b7 Correct data type
• 76aeba5 No need for return
• b7fc6a8 No need for return
• 3ea37ee No need for return

See the full diff

Package name: noflo-strings

The new version differs by 126 commits.

• f7cb77c Release 0.5.0
• b49e711 Bump karma from 4.4.1 to 5.2.3
• 0c43efd Bump mocha from 6.2.3 to 8.2.1
• 6ea145c Bump webpack-cli from 3.3.12 to 4.3.0
• 6d543b6 Bump underscore from 1.9.2 to 1.12.0
• 6e0f2c5 Bump ridedott/merge-me-action from v1.8.102 to v1.8.106
• 5320071 Merge pull request Heroku button deploy not working imgflo/imgflo-server#116 from noflo/gh_actions
• 3a98527 Ignore dist folder too
• ae340c7 Ignore build artefacts
• 91ebe03 Use a different lib
• a16970e Make linter happy
• 20d07b7 Initial decaf
• fb5cf98 Initial: decaffeinate
• f0ebb89 Initial: decaffeinate
• 86e2bff We need CoffeeScript as dep for now
• 39a45fe Port to GitHub Actions
• 44c9073 Merge pull request Enable video support imgflo/imgflo-server#108 from noflo/greenkeeper/mocha-6.0.0
• 1890b53 chore(package): update mocha to version 6.0.0
• 729fdd7 Merge pull request Performance regression Nov 12 imgflo/imgflo-server#107 from noflo/greenkeeper/karma-4.0.0
• 3878805 chore(package): update karma to version 4.0.0
• b38f192 Merge pull request Input images with wrong content-type/extension give 500 imgflo/imgflo-server#106 from noflo/modernize_build
• 0cef176 Modernize build and test setup
• 50f999b Merge pull request Metrics event should contain sofware version imgflo/imgflo-server#105 from noflo/greenkeeper/underscore-1.9.0
• c30008c fix(package): update underscore to version 1.9.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic