[Snyk] Security upgrade node-7z from 1.0.1 to 3.0.0

[theamazingfedex]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: node-7z

The new version differs by 77 commits.

• cc2ab16 doc: Official Linux version of 7-Zip works
• b0a8d9d dist: Do not publish useless files to npm
• eb15385 dist: v3.0.0
• e955111 feat: Hides cmd on Windows #89
• b7f799c feat: Do not build string switch with falsy values #102
• 48a74d6 ci: Ignore a test du to mismatch 7z versions
• 6e35dfe test: Mark as executable (NTFS removed it)
• e91e7d4 dist: VSCode workspace
• 1305071 chore: Ignore .exe used for local testing
• 30fac0e Merge pull request #99 from quentinrossetti/dependabot/npm_and_yarn/glob-parent-5.1.2
• 3af1385 Merge pull request #103 from pixelastic/patch-1
• f05d6e2 test: Don't test dates because AppVeyor changes them
• 411d5cb fix: Support for `-slt` switch #97
• 9e6ded4 docs: Fix options table parsing
• 59f83ee chore(deps): bump glob-parent from 5.1.1 to 5.1.2
• ac91cd7 fix: Garbled encoding with two or more byte UTF-8 encoding filenames #93
• 801a79b doc: Fix typos
• e06792f Merge pull request #91 from quentinrossetti/snyk-upgrade-47a37160b0906e6c34f7779f74a0881c
• a45c897 Merge pull request #94 from quentinrossetti/dependabot/npm_and_yarn/y18n-4.0.1
• 091de72 Merge pull request #95 from quentinrossetti/dependabot/npm_and_yarn/lodash-4.17.21
• 0df2914 Merge pull request #96 from quentinrossetti/dependabot/npm_and_yarn/hosted-git-info-2.8.9
• f9746d0 chore(deps): bump hosted-git-info from 2.8.8 to 2.8.9
• 0bf9517 chore(deps): bump lodash from 4.17.20 to 4.17.21
• f30d5b4 chore(deps): bump y18n from 4.0.0 to 4.0.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)