[Snyk] Security upgrade sao from 0.22.17 to 1.0.0

[titanism]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Control of Dynamically-Managed Code Resources

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/remark-preset-github@4.0.1	Transitive: filesystem	+119	1.67 MB	niftylettuce
npm/repeat-string@1.6.1	None	0	9.09 kB	jonschlinkert
npm/resolve-from@5.0.0	filesystem, unsafe	0	5.82 kB	sindresorhus
npm/resolve-global@1.0.0	Transitive: environment, filesystem	+1	10.2 kB	sindresorhus
npm/resolve@1.20.0	filesystem	+4	173 kB	ljharb
npm/rimraf@3.0.2	filesystem	0	17.3 kB	isaacs
npm/safe-buffer@5.1.2	None	0	31.7 kB	feross
npm/sao@1.0.0	environment, filesystem Transitive: eval, network, shell, unsafe	+150	8.22 MB	egoist
npm/semver@7.3.7	None	+1	103 kB	lukekarrys
npm/shelljs@0.8.5	environment, filesystem	0	212 kB	nfischer
npm/signal-exit@3.0.3	None	0	9.87 kB	bcoe
npm/source-map@0.5.7	None	0	766 kB	tromey
npm/spdx-license-list@6.5.0	None	0	9 MB	sindresorhus
npm/speakingurl@14.0.1	None	0	167 kB	pid
npm/split-string@3.1.0	None	0	13.8 kB	jonschlinkert
npm/string_decoder@1.1.1	None	0	15.3 kB	matteo.collina
npm/superb@4.0.0	None	0	5.19 kB	sindresorhus
npm/supports-color@7.2.0	None	+1	11.5 kB	sindresorhus
npm/through@2.3.8	None	0	12.5 kB	dominictarr
npm/to-regex@3.0.2	None	+1	23.4 kB	jonschlinkert
npm/type-fest@0.13.1	None	0	88.5 kB	sindresorhus
npm/typescript@4.6.4	None	0	64.7 MB	typescript-bot
npm/unified@9.2.0	None	+2	89.8 kB	wooorm
npm/unist-util-generated@1.1.5	None	0	6.38 kB	wooorm
npm/unist-util-position@3.1.0	None	0	6.67 kB	wooorm
npm/update-notifier@5.1.0	environment, shell	0	15.3 kB	sindresorhus
npm/uppercamelcase@3.0.0	None	0	2.87 kB	samverschueren
npm/util-deprecate@1.0.2	None	0	5.48 kB	tootallnate
npm/vfile-location@3.1.0	None	0	8.84 kB	wooorm
npm/xo@0.48.0	environment, filesystem	+50	6.85 MB	sindresorhus
npm/xtend@4.0.2	None	0	6.46 kB	raynos
npm/yargs-parser@18.1.3	environment	0	71.5 kB	oss-bot
npm/yargs@17.4.1	environment, filesystem	+10	438 kB	oss-bot

🚮 Removed packages: npm/@eslint/eslintrc@1.2.2, npm/@types/json-schema@7.0.11, npm/@typescript-eslint/eslint-plugin@5.21.0, npm/@typescript-eslint/parser@5.62.0, npm/boxen@1.3.0, npm/call-bind@1.0.2, npm/end-of-stream@1.4.4, npm/es-abstract@1.19.5, npm/eslint-config-xo-typescript@0.50.0, npm/eslint-visitor-keys@3.3.0, npm/espree@9.3.1, npm/fault@1.0.4, npm/get-intrinsic@1.1.1, npm/get-value@2.0.6, npm/interpret@1.4.0, npm/is-callable@1.2.4, npm/is-docker@2.2.1, npm/is-symbol@1.0.3, npm/mimic-response@1.0.1, npm/min-indent@1.0.1, npm/regexp-tree@0.1.24, npm/regexpp@3.2.0

View full report↗︎