[Snyk] Fix for 1 vulnerabilities

[sascha1337]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/core/package.json

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

⚠️ Warning

Failed to update the yarn.lock, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@protobufjs/[email protected]	None	0	9.05 kB	dcode
npm/@types/[email protected]	None	0	3 kB	types
npm/[email protected]	environment	0	26.1 kB	jonschlinkert
npm/[email protected]	environment	0	11.4 kB	pfmooney
npm/[email protected]	None	0	125 kB	kyldvs
npm/[email protected]	environment, network	0	375 kB	jasonsaayman
npm/[email protected]	None	0	98.8 kB	jessebeach
npm/[email protected]	None	0	48.7 kB	lencioni
npm/[email protected]	None	0	9.62 kB	feross
npm/[email protected]	None	+2	43.6 kB	cwmma
npm/[email protected]	environment	0	39.5 kB	dabh
npm/[email protected]	None	0	3.87 kB	iansu
npm/[email protected]	None	+6	97.3 kB	cwmma
npm/[email protected]	environment Transitive: filesystem, shell	+6	81.2 kB	kentcdodds
npm/[email protected]	None	0	11.8 kB	lazurski
npm/[email protected]	None	0	48.3 kB	mathias
npm/[email protected]	environment Transitive: eval, filesystem, shell, unsafe	+77	9.26 MB	gnoff
npm/[email protected]	None	0	22.8 kB	dap
npm/[email protected]	None	0	13.8 kB	mattyork
npm/[email protected]	None	0	12.8 kB	ljharb
npm/[email protected]	None	+2	47.2 kB	indutny
npm/[email protected]	None	0	6.8 kB	feross
npm/[email protected]	None	0	19.1 kB	ljharb
npm/[email protected]	None	+1	42.6 kB	ljharb
npm/[email protected]	None	0	1.55 kB	cwmma
npm/[email protected]	None	0	4.51 kB	jbgutierrez
npm/[email protected]	None	+8	117 kB	cwmma
npm/[email protected]	None	+1	13.7 kB	dcousens
npm/[email protected]	None	+2	66.7 kB	dcousens
npm/[email protected]	None	0	34 kB	typescript-bot
npm/[email protected]	None	0	174 kB	dchest
npm/[email protected]	None	0	32.4 MB	typescript-bot

🚮 Removed packages: npm/@npmcli/[email protected], npm/@octokit/[email protected], npm/@octokit/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎