Merge pull request #255 from snyk/fix/security

fix: security update for micromatch, semver, snyk-config, cross-spawn

Author: orsagie

.circleci/config.yml

@@ -24,7 +24,7 @@ windows_defaults: &windows_defaults
     name: win/default
 
 test_matrix: &test_matrix
-  node_version: ['12.22.12', '14.17.6', '16.13.2']
+  node_version: ['18.18.1', '16.20.2']
 
 commands:
   install_deps:
@@ -177,14 +177,14 @@ workflows:
                 - main
       - security-scans:
           name: Security Scans
-          node_version: "16.13.2"
+          node_version: "18.18.1"
           context:
             - open_source-managed
             - nodejs-install
       - lint:
           name: Lint
           context: nodejs-install
-          node_version: "16.13.2"
+          node_version: "16.20.2"
           <<: *filters_branches_ignore_main
       - test-windows-jest:
           matrix:
@@ -229,7 +229,7 @@ workflows:
       - release:
           name: Release
           context: nodejs-app-release
-          node_version: "16.13.2"
+          node_version: "16.20.2"
           filters:
             branches:
               only:

.nvmrc

@@ -1 +1 @@
-16
+18

package.json

@@ -46,10 +46,13 @@
     "micromatch": "^4.0.8",
     "p-map": "^4.0.0",
     "semver": "^7.6.0",
-    "snyk-config": "^5.0.0",
+    "snyk-config": "^5.2.0",
     "tslib": "^1.9.3",
     "uuid": "^8.3.0"
   },
+  "overrides": {
+    "cross-spawn": "^7.0.5"
+  },
   "devDependencies": {
     "@types/jest": "^28.1.3",
     "@types/node": "^16.11.66",