[Snyk] Fix for 1 vulnerabilities

[nthbooth]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @11ty/eleventy

The new version differs by 200 commits.

• bb443b7 v0.10.0
• 09e60a1 Yep this hardcoded date definitely made two tests fail Cool cool cool
• 4ea6113 Coverage for 0.10.0-beta.2
• 241a038 Fix tests that broke with syntaxhighlight major version upgrade 2.0 to 3.0
• 5fa0ea9 v0.10.0-beta.2
• 3c4adbb Updates dependencies
• ab7f0dc Add bugs and homepage to package.json
• 89b2f19 Tests for async filters in Liquid and Nunjucks
• f30523f Merge pull request #711 from saenglert/master
• 727607c Adds --quiet=false support for #808.
• 0d18f4d Adds `getFilter` to config API for plugins
• dd22c08 Adds publishConfig and funding to package.json
• 7ae2993 v0.10.0-beta.1
• 4247c4c Update dependencies in preparation for 0.10.0-beta.1
• 45a8135 Fixes #808
• e62ebfa Show pathPrefix on the command line when in use.
• 7fe644d Fix sortable issue surfaced by @ edbrannin in #747
• a4afbf7 Merge pull request #747 from edbrannin/feature/test-coverage-sortable
• adac1bb Test for #709
• e40fb33 Oops, the .gitignore and .eleventyignore files were being processed twice!
• dbb6c93 Adds warning for lack of support for ! in .gitignore and .eleventyignore. Future support TBD at #693.
• 0f074bd Merge pull request #709 from micahmills/negativeIgnorePatterns
• a3b4433 When you watch a dir it needs to be a glob, for #641
• c7139b7 Merge pull request #641 from MadeByMike/add-custom-watcher

See the full diff

Package name: concurrently

The new version differs by 67 commits.

• 105445c 6.2.2
• 875d375 Fix linting
• 7263ffe Remove read-pkg
• 8bcdf7f ci: add missing parallel coverage reporting step
• 24e51ad Add coveralls badge to readme
• b16585f ci: readd coveralls reporting
• 0bc490f 6.2.1
• c295062 Stop reading from stdin after programmatic API finishes (#253)
• 07a7de1 Update links to new GH org and remove travis+appveyor (#285)
• f574848 Fix link to substack blog post in README
• fe5c01c Add GH actions workflow
• 10ff00c Correctly reexport flow controllers
• becac73 6.2.0
• d38ab32 Include `killed` boolean in command result (#250)
• e8f0706 Make --restart-tries restart forever with negative value
• aad79fa 6.1.0
• ecf1c5b Change default text color to reset instead of gray.dim
• 70b92da Run npm audit fix
• ccb6b8d 6.0.2
• 330cf92 Fix input handler when input contains a colon (#269)
• 7710c21 Update lodash package (#271)
• e36e8c1 6.0.1
• 9fa0544 Fix cwd option not overwriting per command if specified in programmatic usage (#266)
• 343d1ab 6.0.0

See the full diff

Package name: semver

The new version differs by 140 commits.

• e7b78de chore: release 7.5.2
• 58c791f fix: diff when detecting major change from prerelease (#566)
• 5c8efbc fix: preserve build in raw after inc (#565)
• 717534e fix: better handling of whitespace (#564)
• 2f738e9 chore: bump @ npmcli/template-oss from 4.14.1 to 4.15.1 (#558)
• aa016a6 chore: release 7.5.1
• d30d25a fix: show type on invalid semver error (#559)
• 09c69e2 chore: bump @ npmcli/template-oss from 4.13.0 to 4.14.1 (#555)
• 5b02ad7 chore: release 7.5.0
• e219bb4 fix: throw on bad version with correct error message (#552)
• 503a4e5 feat: allow identifierBase to be false (#548)
• fc2f3df fix: incorrect results from diff sometimes with prerelease versions (#546)
• 2781767 fix: avoid re-instantiating SemVer during diff compare (#547)
• 82aa7f6 chore: release 7.4.0
• 731d896 chore: enable CD (#545)
• 940723d fix: intersects with v0.0.0 and v0.0.0-0 (#538)
• aa516b5 fix: faster parse options (#535)
• 61e6ea1 fix: faster cache key factory for range (#536)
• f8b8b61 fix: optimistic parse (#541)
• 796cbe2 fix: semver.diff prerelease to release recognition (#533)
• 3f222b1 fix: reuse comparators on subset (#537)
• 113f513 feat: identifierBase parameter for .inc (#532)
• ea689bc chore: basic type test for RELEASE_TYPES
• c5d29df docs: Add "Constants" section to README

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)