[Snyk] Fix for 6 vulnerabilities

[nitro404]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Prototype Pollution SNYK-JS-AJV-584908	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Denial of Service (DoS) SNYK-JS-DECODEURICOMPONENT-3149970	Yes	Proof of Concept
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-htmlhint

The new version differs by 25 commits.

• 5c1fa82 4.0.2
• b110f1d Update test.yml
• aae25ee Switch to github actions
• 6b45842 Create test.yml
• 5315942 Bump htmlhint & add htmlhint as peerDependency
• a95c3d2 Bump path-parse from 1.0.6 to 1.0.7 ([Snyk] Security upgrade extra-utilities from 1.3.6 to 1.3.7 #66)
• 9e08834 Bump normalize-url from 4.5.0 to 4.5.1 ([Snyk] Security upgrade gulp-htmlhint from 3.0.0 to 4.0.2 #65)
• 68ad4a3 Bump trim-newlines from 3.0.0 to 3.0.1 ([Snyk] Fix for 1 vulnerabilities #64)
• 8e32c25 Bump hosted-git-info from 2.8.5 to 2.8.9 ([Snyk] Fix for 3 vulnerabilities #63)
• 51c8c3f 4.0.1
• 2d1a389 Bump dependencies
• 946d4b3 Bump lodash from 4.17.20 to 4.17.21 ([Snyk] Fix for 1 vulnerabilities #62)
• a5b1de7 fix .htmlhintrc file path ([Snyk] Security upgrade @babel/preset-env from 7.8.7 to 7.27.1 #61)
• 13d0dbe Bump y18n from 4.0.0 to 4.0.1 ([Snyk] Security upgrade @babel/core from 7.8.7 to 7.26.10 #60)
• cd57759 Bump elliptic from 6.5.3 to 6.5.4 ([Snyk] Security upgrade gulp-sass from 4.0.2 to 5.0.0 #59)
• b9964b3 4.0.0
• d3abbde Drops node 8 support
• 6a8609f Adds node 14 to test matrix
• e2739de Bump dependencies
• da2c5a9 Bump dot-prop from 4.2.0 to 4.2.1 ([Snyk] Security upgrade gulp-sass from 4.0.2 to 5.0.0 #57)
• aa245ec Bump lodash from 4.17.15 to 4.17.20 ([Snyk] Fix for 23 vulnerabilities #58)
• 4fec526 Bump ini from 1.3.5 to 1.3.8 ([Snyk] Fix for 1 vulnerabilities #56)
• 4e54cc6 3.0.1
• cce0401 Bump dependencies

See the full diff

Package name: gulp-sass

The new version differs by 8 commits.

• 5775044 Update CHANGELOG.md
• 978b8f6 Update to major version 5 (#802)
• 10eae93 Update changelog for 4.1.1
• 947b26c Upgrade lodash to fix a security issue (#776)
• 8d6ac29 Update changelog
• 43c0547 4.1.0
• ebe3ec6 Set appropriate file stat times (#763)
• 7ab018e Migrate to the lodash package

See the full diff

Package name: gulp-sourcemaps

The new version differs by 10 commits.

• 2bcfcbb 3.0.0
• d8bed0c Merge pull request #373 from adrian3d/update/doc-gulp-4
• 5686db3 Merge pull request #380 from kennyr87/gh-378/upgrade-css
• 2c66b2c Depdenency: Upgrade css to v3.0.0
• 9a9289b Breaking: Drop Node <6 support & upgrade identity-map which uses changes CSS sourcemaps (#376)
• 11d1e31 Update doc to gulp 4
• bd0aeb0 Docs: Temporarily point at phated/gulp-sourcemaps for AppVeyor badge
• 7e69e97 Build: Ensure tests pass on Windows
• 404eb5b Docs: Update badges
• 8a22ecc Scaffold: Convert repository to use gulp patterns (closes #357) (#367)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Denial of Service (DoS)