[Snyk] Security upgrade favicons from 6.2.2 to 7.0.0

[joshuamorris3]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: favicons

The new version differs by 56 commits.

• aa050ff 7.0.0
• 93792d0 7.0.0-beta.5
• 57706fa Update all dependencies to their fresh versions
• 05b26ce Improve types. Remove stateless helper class `Images`.
• 21c2dc1 Don't preinstall vips on CI
• 27a69ea chore(deps): bump file-type from 16.5.3 to 16.5.4
• c5b80c0 chore(deps): bump sharp from 0.30.3 to 0.30.5
• 1ef42f8 chore(deps): bump jpeg-js from 0.4.3 to 0.4.4
• 797c876 remove mentions of logging (removed feature)
• d081db6 7.0.0-beta.4
• 085ad7a Update all dependencies
• a5f56a6 Supply both ESM and CJS modules
• 703398f Update minimist to 1.2.6
• f242927 fix: remove non standard rel=shortcut
• 89c5373 change: require min node 12
• 4499353 7.0.0-beta.3
• 0c775de Fix scaling of SVG by removing relying on sharp and calculating a density option
• 2b21d58 Release 7.0.0-beta.2
• 16e1131 add webmanifest's shortcuts support (#378)
• 99a0a30 replace deprecated `substr` with `endsWith`
• 9632b9d remove logging
• 7e142db Replace lodash.defaultsdeep with ES spread operator
• 600d6bf Remove Gulp
• 69d4d4e chore(deps): bump simple-get from 4.0.0 to 4.0.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution