[Snyk] Security upgrade couchbase from 4.1.3 to 4.2.5

[startxfr]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: couchbase

The new version differs by 36 commits.

• 6d69766 JSCBC-1171: Update platform package.json and root package.json to
• 284b8e6 Update README
• 96eec70 JSCBC-1152: Add support for Node.js v18
• 1a04803 Bumped version to 4.2.5-dev.
• a49e74f Updated to latest Couchbase++ version.
• 5e11682 update core
• 7aa53e5 Bumped version to 4.2.4-dev.
• 5bb8d6e JSCBC-1158: Include Mozilla Root CAs by Default
• 035bfcb Updated to latest dependencies.
• c916351 JSCBC-1157: Increase missing bootstrap timeouts for WAN Config Profile
• d4d4512 JSCBC-1154: Expose C++ client metadata
• d8ebf10 Updated to latest Couchbase++ version.
• 9c37df9 Bumped version to 4.2.3-dev.
• e855b09 JSCBC-1137: Create and use CppClusterCredentials and CppDnsConfig
• 5884066 JSCBC-1141: Query Index Management WatchIndexes does not raise
• e2369be JSCBC-1129: Only populate allowed_sasl_mechanisms if user sets
• df73a68 JSCBC-1118: Handle query_context updates
• 651ea1a do not build cbc tool
• f582214 Bumped version to 4.2.2-dev.
• 288083d JSCBC-1124: Update configuration profile implementation
• 463d648 JSCBC-1126: Add mutation token to MutateInResult
• 605b0a4 JSCBC-1117: Allow callback when options not provided for all KV operations
• cbb9330 JSCBC-1106: Update SearchRow object's fields and explanation types
• 51c96f4 JSCBC-1123: Update C++ client to include patch fixing OpenSSL and

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)