[Snyk] Fix for 3 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:

  • package.json
  • package-lock.json

• Adding or updating a Snyk policy (.snyk) file; this file is required in order to apply Snyk vulnerability patches.
  Find out more.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Denial of Service (DoS) SNYK-JS-VUEAPOLLO-474013	No	No Known Exploit
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	Yes	Proof of Concept

Commit messages

Package name: ts-jest

The new version differs by 250 commits.

• ad58c9b chore(release): 25.3.0
• 949e3e1 chore: update package-lock.json
• b8ebf36 docs: add Troubleshoting section (#1463)
• 8b5325e chore(transformer): only do type checking for js/jsx/ts/tsx file (#1464)
• 58b05b1 chore: replace travis-ci.org with travis-ci.com (#1469)
• 79e8fdf build(deps-dev): bump jest from 25.2.3 to 25.2.4 (#1468)
• dddce1c build(deps-dev): bump @jest/transform from 25.2.3 to 25.2.4 (#1467)
• d811bae build(deps-dev): bump lint-staged from 10.0.9 to 10.0.10 (#1466)
• ecc8312 build(deps-dev): bump @types/react from 16.9.26 to 16.9.27 (#1462)
• c10ad4a chore(compiler): improve performance for language service (#1461)
• 455ee5b build(deps-dev): bump @jest/transform from 25.2.1 to 25.2.3 (#1459)
• 1641cfb build(deps-dev): bump jest from 25.2.2 to 25.2.3 (#1460)
• 3010ec8 build(deps-dev): bump @jest/types from 25.2.1 to 25.2.3 (#1458)
• 26a81f0 build(deps-dev): bump @types/react from 16.9.25 to 16.9.26 (#1457)
• 99c552d build(deps-dev): bump jest from 25.2.1 to 25.2.2 (#1455)
• 5214f1b build(deps): bump yargs-parser from 18.1.1 to 18.1.2 (#1456)
• 79478ae build(deps-dev): bump tslint-plugin-prettier from 2.2.0 to 2.3.0 (#1454)
• 107e062 fix: always do type check for all files provided to ts-jest transformer (#1450)
• 1e34075 build(deps-dev): bump @jest/types from 25.2.0 to 25.2.1 (#1452)
• ba5a6c4 build(deps-dev): bump @jest/transform from 25.2.0 to 25.2.1 (#1451)
• e857f5b build(deps-dev): bump jest from 25.2.0 to 25.2.1 (#1453)
• 4981da8 Merge pull request #1447 from kulshekhar/dependabot/npm_and_yarn/jest/types-25.2.0
• ea8240a Merge pull request #1448 from kulshekhar/dependabot/npm_and_yarn/jest/transform-25.2.0
• e50db11 build(deps-dev): bump @jest/types from 25.1.0 to 25.2.0

See the full diff

Package name: vue-apollo

The new version differs by 57 commits.

• 8a55533 docs(readme): docs link
• 428b5cb docs(readme): move link
• a35f50d docs(readme): contributing guide
• 5420630 chore: add test:ssr to test script
• 4d15268 Create CONTRIBUTING.md
• dc138f2 chore: Create CODE_OF_CONDUCT.md (#839)
• 87785af chore: Update issue templates
• b95388f fix: security issue
• 198b383 test(e2e): manual add smart query: loadingKey
• 14ea90a fix(ci): generate schema files
• 4f9bba4 test(ci): fix yarn cache id
• 73e970a test(ci): fix install
• 6afceec test(e2e): SSR
• af0b69d Merge branch 'dev' of github.com:Akryum/vue-apollo into dev
• c3b840c fix(ssr): memory leak, closes https://github.com/Memory leak with Smart Query nuxt-modules/apollo#231
• 94bbb52 chore(deps-dev): bump vue-cli-plugin-apollo in /tests/demo
• b7e214b chore(deps-dev): bump rollup from 1.24.0 to 1.25.1
• 7733edc test(e2e): rename test.js to chat.js
• 8da4777 test(e2e): errorPolicy support
• ae4713e fix(smart query): handling errorPolicy, closes #526
• ef9c7a0 docs(smart query): new `error` args
• 932c5b9 feat(errorHandler): added options arg
• aea6c93 feat(errorHandler): added vm, key, type arguments
• b7642cd fix(ts): DataDef not defined error?!?

See the full diff

With a Snyk patch:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-LODASH-567746	Proof of Concept

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic