[Snyk] Fix for 1 vulnerabilities

[0xpixel]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • client/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	716/1000 Why? Recently disclosed, Has a fix available, CVSS 8.6	Use of Weak Hash SNYK-JS-CRYPTOJS-6028119	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aws-amplify

The new version differs by 250 commits.

• 7334605 chore(release): Publish [ci skip]
• 889f9f4 Bump core version
• a57f7b3 Preparing release
• 8725574 chore(release): Publish [ci skip]
• c63f5e8 Preparing release
• fa6f57d Upgrade version in core package
• 51a16c1 Explicitly set `responseType` to `blob` rather than using `new… (#5260)
• 5b1d2e9 chore: publish:master does --canary release (#5247)
• 8bb1334 Publish
• 440f25e Bumping api-rest and api-graphql versions to match npm
• b4b40aa Merge pull request #5243 from aws-amplify/modularization
• 9f2800d Revert from-package and use conventional commits for master in first release
• 6b1ef79 Force lerna to publish major version from the package.json in unstable and latest release
• 7fef140 Merge branch 'master' into modularization
• c04349b Revert modularization specific circile CI changes
• 4f3b285 Fix exporting the right amplify version
• 815eef4 Publish
• 4002776 Change new version of api-rest and api-graphql modules to 0.1
• a105664 chore(release): Publish [ci skip]
• 30e4c29 Preparing release
• 21a00b4 Upgrade aws-sdk beta clients (#5234)
• 31a273e Merge branch 'master' into modularization
• 71044ae fix builds that were broken by new terser 4.6.8 version (#5233)
• 2925d5b Fix unit tests following merge from master

See the full diff

Package name: aws-api-gateway-client

The new version differs by 45 commits.

• 1f4cadc update package-lock
• ffb2682 downgrade eslint version
• 40bdf96 update version
• f41d546 update packages
• e1ff0db Merge pull request #95 from medington/babel-runtime-fix
• e9dad93 Merge branch 'master' into babel-runtime-fix
• 031891b Merge pull request #97 from adastradev/upstream-fix-issue-88
• 8c3895b fixes "POST body payload" issue kndt84/aws-api-gateway-client#88
• 5020461 Correct issue #90 - missing @ babel/runtime dep
• 44c3c1b Merge pull request #93 from kndt84/dependabot/npm_and_yarn/acorn-7.1.1
• e111464 Bump acorn from 7.1.0 to 7.1.1
• 069ad0b Merge pull request #92 from aneihouse/crypto-js-update
• 952f78e Version update
• c776c8b Updated crypto-js to address security vulnerability
• 62f645b Merge pull request #86 from kndt84/fix-error
• 3a70dc5 fix bug
• 621a2ca fix bug
• 10bd51f Merge pull request #84 from kndt84/fix-err
• afb92f7 fix error
• f0785a7 Merge pull request #80 from jamesl1001/master
• 53642cb Merge branch 'master' into master
• 734bd88 Merge pull request #83 from kndt84/package-update
• 0a0a1a8 Merge branch 'master' into package-update
• 7aa0777 Security update

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use of Weak Hash