[Snyk] Upgrade npm from 6.13.4 to 6.13.7

[snyk-bot]

Snyk has created this PR to upgrade npm from 6.13.4 to 6.13.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2020-01-28.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Denial of Service (DoS) npm:mem:20180117	No Known Exploit

Release notes

Package name: npm

• 6.13.7 - 2020-01-28
  

  6.13.7 (2020-01-28)

  BUG FIXES

  • 7dbb91438 #655 Update CI detection cases (@isaacs)

  DEPENDENCIES

  • 0fb1296c7 libnpx@10.2.2 (@mikemimik)
  • c9b69d569 node-gyp@5.0.7 (@mikemimik)
  • e8dbaf452 bin-links@1.1.7 (@mikemimik)
    • #613 Fixes bin entry for package
• 6.13.6 - 2020-01-09
  

  6.13.6 (2020-01-09)

  DEPENDENCIES

  • 6dba897a1 pacote@9.5.12:
    • d2f4176 fix(git): Do not drop uid/gid when executing in root-owned directory (@isaacs)
• 6.13.5 - 2020-01-09
  

  6.13.5 (2020-01-09)

  BUG FIXES

  • fd0a802ec #550 Fix cache location for npm ci (@zhenyavinogradov)
  • 4b30f3cca #648 fix(version): using 'allow-same-version', git commit --allow-empty and git tag -f (@rhengles)

  TESTING

  • e16f68d30 test(ci): add failing cache config test (@ruyadorno)
  • 3f009fbf2 #659 test: fix bin-overwriting test on Windows (@isaacs)
  • 43ae0791f #601 ci: Allow builds to run even if one fails (@XhmikosR)
  • 4a669bee4 #603 Remove the unused appveyor.yml (@XhmikosR)
  • 9295046ac #600 ci: switch to actions/checkout@v2 (@XhmikosR)

  DOCUMENTATION

  • f2d770ac7 #569 fix netlify publish path config (@claudiahdz)
  • 462cf0983 #627 update gatsby dependencies (@felixonmars)
  • 6fb5dbb72 #532 docs: clarify usage of global prefix (@jgehrcke)
• 6.13.4 - 2019-12-11
  

  6.13.4 (2019-12-11)

  BUGFIXES

  • 320ac9aee npm/bin-links#12 npm/gentle-fs#7 Do not remove global bin/man links inappropriately (@isaacs)

  DEPENDENCIES

  • 52fd21061 gentle-fs@2.3.0 (@isaacs)
  • d06f5c0b0 bin-links@1.1.6 (@isaacs)

from npm GitHub release notes

Commit messages

Package name: npm

• f533d61 6.13.7
• 5897df4 update AUTHORS
• dcafdd9 updated changelog for npm@6.13.7
• 0fb1296 libnpx@10.2.2
• 1a5d209 chore: removed reference to package.community as a source for npm team support
• 68fc88e docs: updated the CONTRIBUTING file; added references to benchmarking
• 1ce0344 feat: updated workflow for pull-ruquest benchmark dispatch requests
• 5967fa4 feat: added workflow file for commenting on a pull-request to dispatch trigger benchmark suite
• 3590e40 fix: removed authorization header from benchmark dispatch request
• c9b69d5 node-gyp@5.0.7
• e8dbaf4 bin-links@1.1.7
• 7230e13 docs: fix header parsing that was breaking misc config manpage
• 7dbb914 Update CI detection cases
• 7852c0c Use the npm lint script on CI.
• b1aeeb6 docs: mention --no-optional in package-json
• 88cfb88 chore: fixes nodejs tests
• ac3739f 6.13.6
• c56c847 docs: changelog for 6.13.6
• 6dba897 pacote@9.5.12
• 787bb66 6.13.5
• e099866 update AUTHORS
• 4812866 docs: changelog for 6.13.5
• 6fb5dbb npm-link: clarify usage of global prefix
• 4b30f3c feat(version): using 'allow-same-version', git commit --allow-empty and git tag -f

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs