[Snyk] Security upgrade @cyclonedx/cyclonedx-npm from 1.13.0 to 1.13.2

[lholmquist]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @cyclonedx/cyclonedx-npm

The new version differs by 78 commits.

• 0446bff 1.13.2
• 7172cd8 chore(deps-dev): bump the eslint group with 2 updates (#1099)
• 0983a0a chore(deps-dev): bump the jest group with 1 update (#1056)
• 8817683 chore(deps-dev): bump the typescript group with 1 update (#1098)
• 9519c4b chore: pin, not lock (#1097)
• 60f9c45 chore(deps): support `@ cyclonedx/cyclonedx-library@^3||^4||^5||^6` (#1096)
• d8ae194 docs: fix typo in HISTORY
• 8cae56c 1.13.1
• a6d2c12 chore: prep v1.13.1
• 80d964a chore(deps-dev): bump electron-to-chromium from 1.4.494 to 1.4.495 (#1049)
• aa62969 chore(deps): bump semver from 5.7.1 to 5.7.2 (#950)
• 3c2aa11 chore(deps-dev): bump the typescript group with 1 update (#1046)
• 0ea0b96 chore(deps): bump normalize-package-data from 5.0.0 to 6.0.0 (#1047)
• a4c2144 chore(deps-dev): bump @ jridgewell/resolve-uri from 3.1.0 to 3.1.1 (#1048)
• 3354768 chore(deps-dev): bump caniuse-lite from 1.0.30001519 to 1.0.30001521 (#1045)
• bcab638 chore(deps-dev): bump electron-to-chromium from 1.4.490 to 1.4.494 (#1044)
• 94d20cf docs: white HISTORY
• 5b50290 chore(deps): bump `normalize-package-data@^6` (#1043)
• 62c902b chore(deps-dev): bump es-abstract from 1.21.2 to 1.22.1 (#972)
• 0982bf3 chore(deps-dev): bump fast-glob from 3.3.0 to 3.3.1 (#968)
• abc96a7 chore(deps-dev): bump is-typed-array from 1.1.10 to 1.1.12 (#966)
• 411dace chore(deps-dev): bump which-typed-array from 1.1.9 to 1.1.11 (#965)
• eb1d837 chore(deps-dev): bump the typescript group with 1 update (#1027)
• 4f35cd2 chore(deps-dev): bump @ jridgewell/trace-mapping from 0.3.18 to 0.3.19 (#1040)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.