[Snyk] Security upgrade np from 6.3.2 to 8.0.0

[zegerk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: np

The new version differs by 62 commits.

• c113539 8.0.0
• b2857a4 Update dependencies
• 9cb4bfd Add 2FA support for npm version 9+ (#693)
• eba203f Improve startup: ensure `package.json` is only parsed once (#688)
• 42a5095 Use `renameFile` from `move-file` for `new-files` fixtures (#687)
• a5d4c3d Fix remote history check - check if `git fetch` needs to be run (#685)
• a6ce792 Get files to be packed via `npm pack --dry-run --json` (#682)
• 72879e0 Move to ESM, update dependencies (#683)
• 6867fb9 Add check for new dependencies (#681)
• 8fcca96 7.7.0
• a0a17fd Show new version in non-interactive mode (#679)
• f992ec1 Fix typo (#680)
• aa23a92 7.6.4
• e71f691 Fix UI prompt for new publicly scoped packages (#677)
• 3770647 Meta tweaks
• 62db480 Add "what np isn't" section to the readme (#672)
• 9fb0128 7.6.3
• 0f5dd33 Fix npm 9 compatibility (#666)
• 95622c0 7.6.2
• 6c871f9 Work around npm bug with error reporting (#645)
• 387dddc Fix tests
• 9b7df30 7.6.1
• 845db26 Meta tweaks
• 9cff6da Fix error "glob pattern string required" (#616)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[codeclimate]

Code Climate has analyzed commit a8e1839 and detected 0 issues on this pull request.

View more on Code Climate.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication