[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Improper Privilege Management SNYK-JS-SHELLJS-2332187	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) npm:underscore.string:20170908	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: grunt

The new version differs by 10 commits.

• 9ba3a99 1.0.3
• eee4c33 Changelog v1.0.3
• 46da7f2 Merge pull request #1636 from gruntjs/upt
• 00f4d8a Drop support for Node 0.10 and 0.12
• e852727 util update
• 56d702e Update deps
• 0105524 Fix race condition with file.mkdir and make it operate more similarily to mkdir -p (#1627) r=@ vladikoff
• 303d445 https links (#1629)
• d969132 Merge pull request #1624 from gruntjs/rm-bump-deps
• 289ff91 Remove old bump task and deps

See the full diff

Package name: jshint

The new version differs by 250 commits.

• 61c868c v2.13.4
• eb4609a [[FIX]] Remove shelljs
• b23e125 [[CHORE]] Remove shelljs from internal tooling
• 56d4a47 [[CHORE]] Use consistent interface for fs ops
• 33cfc87 [[CHORE]] Migrate from TravisCI to CircleCI
• a53cc95 [[CHORE]] Update version of package manifest (#3602)
• 2a842ac v2.13.3
• 06accfa [[CHORE]] Correct annotation for globals
• b1426f1 [[FIX]] Recognize ES2020 globals
• be94b1d [[DOCS]] Remove david-dm badges (#3596)
• 5608b03 v2.13.2
• 043f98a [[CHORE]] Add package-lock.json
• cc1adf6 [[FIX]] Add missing well-known globals (#3582)
• 057b1c6 [[FIX]] Tolerate keyword in object shorthand
• ecae54a [[FIX]] Tolerate unterminated nullish coalescing
• ca06e6a [[FIX]] add URL for node in src/vars.js (#3570)
• 75e48b7 [[FIX]] change escape-sequence handler for double quotes (\") (#3566)
• 4a681b9 [[FIX]] Limit "Too many Errors" (E043) to errors only (#3562)
• fddcd02 v2.13.1
• 11dc0a6 [[FIX]] Allow optional chaining call as satement
• 7c890aa [[FIX]] Tolerate dangling NewExpression
• 71ec395 [[FIX]] Allow invoking result of optional chaining
• 7bae44b v2.13.0
• 7c36c81 Merge pull request #3486 from jshint/v2.12.0

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic