[Snyk] Upgrade depcheck from 0.8.3 to 0.9.2

[snyk-bot]

Snyk has created this PR to upgrade depcheck from 0.8.3 to 0.9.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.
• The recommended version was released 3 years ago, on 2020-01-30.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: depcheck

• 0.9.2 - 2020-01-30
  

  Full Changelog

  Closed issues:

  • Use Cosmiconfig #516
  • Feature: add special parser for Istanbul.js #508
  • New mocha configuration file not seen #507
  • False positive with @ types/mocha #504
  • Error: ENFILE: file table overflow (macOS) #501
  • eslint: dependency wrongly mark as unused #500
  • special/eslint: bad calculation of preset dependencies #476
  • Load ignore rules from a lines separated file #409
  • Improvements for CI use #162

  Merged pull requests:

  • Review special documentation #515 (sveyret)
  • Add Istanbul special parser #514 (sveyret)
  • Refactor: read content only when needed #513 (znarf)
  • Add debug package and messages to the project #512 (znarf)
  • Support for more decorators #511 (micky2be)
  • Improve recursive work of eslint configuration check #506 (sveyret)
  • Improvements for mocha #505 (sveyret)
  • Support webpack styleguidist configuration #503 (znarf)
  • Use a single promise to read a given file #502 (znarf)
  • Support for next.js webpack configuration #496 (znarf)
  • Rename 'linters' and fix babel config file detection #495 (znarf)
  • Suppress unnecessary fileContent #494 (znarf)
  • Update travis commands and reference #493 (znarf)
  • Add eslint-plugin-mocha and lint test directory #492 (znarf)
  • Better prettier configuration #490 (znarf)
  • Remove remaining dev option #489 (znarf)
  • chore: remove editorconfig file #488 (rumpl)
  • Update babel target to node 10, use prettier plugin #487 (rumpl)
  • chore(deps): Update all dependencies to latest #486 (rumpl)
  • Do not calculate expensive dep differences when skipMissing is active #485 (dword-design)
  • Adjust babel special to eslint implementation #484 (dword-design)
  • Add deps parameter to detectors #482 (dword-design)
  • Activating Open Collective #481 (monkeywithacupcake)
  • Document and provide types for the API's package option #479 (edsrzf)
  • Try to load eslint.js modules without a module.exports wrapper #478 (rjatkins)
  • special/eslint: corrections on dependencies resolver #477 (sveyret)
  • chore: add changelog file #475 (rumpl)
  • Support loading configuration from a config file. #408 (Urik)
• 0.9.1 - 2019-11-08
  

  Features

  • better support for workspaces #473
  • support for prettier shared configuration #474
  • support for typescript webpack configuration #459
  • added support for ttypescript #469
  • typescript types! #458
  • added support for lint-staged #456
  • added support for husky #453
  • added support for babel.config.js

  Bugfixes

  • consitent exit code #465
  • fixed false positive when using plugin:prettier/recommended #464
  • fixed false positive when using tslint-plugin-prettier #457

  Big thanks to @ VincentLanglet and @ sveyret

  I almost made this 1.0.0 but it will be for the next.

• 0.9.0 - 2019-11-01
• 0.8.4 - 2019-10-29
• 0.8.3 - 2019-07-09

from depcheck GitHub release notes

Commit messages

Package name: depcheck

• 19f9dad Merge pull request chore(deps): update node.js to >=v18.15.0 dylang/npm-check#513 from znarf/refactor/content
• 4409936 Merge pull request fix(deps): update dependency minimatch to ^7.4.2 dylang/npm-check#511 from micky2be/fix/decorators
• 79328b8 fix: add support for more decorators
• 2ef1cb8 test: fix tests after async getContent refactor
• 5735ee7 refactor: use getContent only once needed
• 1f329fc Merge pull request fix(deps): update dependency minimatch to ^6.1.6 dylang/npm-check#496 from znarf/feat/webpack-next-js
• 1e27dfa Merge pull request Stale packages not detected if 'parent' node_modules already has the updated versions dylang/npm-check#512 from znarf/debug
• f226274 Merge pull request Updates fail because it uses yarn instead of npm dylang/npm-check#515 from sveyret/specialdocs
• c7982c9 feat: introduce debug and first useful debug messages
• da74b89 test: add coverage for invalid next.js webpack configuration
• 241c2ef test: add test to cover webpack in next.js configuration
• 1af9725 feat: support for next.js webpack configuration
• 0adec87 Review special documentation
• 5f9700c Merge pull request fix(deps): update dependency execa to ^7.1.0 dylang/npm-check#514 from sveyret/istanbul
• fc545f4 Merge pull request fix(deps): update dependency minimatch to ^6.2.0 dylang/npm-check#505 from sveyret/mocha
• 302bb9c Merge pull request fix(deps): update dependency minimatch to v7 dylang/npm-check#506 from sveyret/eslint
• cdd58b6 Merge pull request Support package alias dylang/npm-check#503 from znarf/feat/webpack-styleguidist
• 0a0e072 Add Istanbul special parser
• a6e6ba6 test: add test for styleguidist configuration in wepack special
• 3d57236 feat: support webpack styleguidist configuration
• f93ca63 Read also the (new style) mocha configuration files
• b5eaa18 Validate @ types/mocha when using mocha
• 8594fce Improve recursive work of eslint configuration check
• aaef68a Merge pull request fix(deps): update dependency minimatch to ^6.1.5 dylang/npm-check#495 from znarf/cli-tools

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs