[Snyk] Fix for 1 vulnerabilities

[papicella]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Inefficient Algorithmic Complexity SNYK-JS-JSYAML-18593780	125

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[papicella]

The upgrade of tap from version 11.1.5 to 18.0.0 is a high-risk major version jump that includes numerous significant breaking changes. The upgrade of cfenv is low risk.

tap: 11.1.5 → 18.0.0 (High Risk)

This upgrade spans multiple major versions with substantial changes to configuration, command-line options, and API. Developers will need to significantly refactor their test setup and potentially their tests.

Key Breaking Changes:

• Node.js Version: Support for Node.js versions below 10 was dropped in v15.
• Coverage Enforcement: As of v18, test coverage is enabled by default, and 100% coverage is required for tests to pass. This can be configured if needed.
• Configuration: Configuration has been overhauled. The runner now looks for a .taprc file or a "tap" object in package.json. Many command-line options have been removed or replaced.
• File Matching: The --test-regexp and --test-ignore options have been replaced with include and exclude glob patterns in the configuration.
• ES Modules: Switched from @std/esm to native ES Modules in v15.
• Mocha Interface: Mocha-style globals (describe, it) are no longer included by default and must be enabled via the @tapjs/mocha-globals plugin.
• TypeScript/JSX: Support for TypeScript and JSX is no longer built-in and requires plugins.

Recommendation:

Due to the scale of these changes, it is highly recommended to consult the official tap changelog and the "Upgrading from tap v16 and before" guide. A dedicated effort will be required to migrate test configurations and ensure all tests are compatible with the new versions.

cfenv: 1.2.2 → 1.2.7 (Low Risk)

This is a minor update. The changes primarily consist of dependency upgrades to address security vulnerabilities and maintain compatibility, such as updating js-yaml and underscore. These changes are internal and should not impact the public API of cfenv.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[papicella]

⛔ Snyk checks have failed. 9 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (9)
⛔	Open Source Security	0	9	0	0	9 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[papicella]

⛔ Snyk checks have failed. 8 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (8)
⛔	Open Source Security	0	8	0	0	8 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.