[Snyk] Fix for 1 vulnerabilities

[saumilmac]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-BRACEEXPANSION-18512280	828

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

[saumilmac]

This set of upgrades includes several major and minor version changes, with the most significant being the update to glob. Other packages have breaking changes related to Node.js version support.

High-Impact Upgrades

glob@7.2.0 → glob@12.0.0
This is a HIGH risk upgrade due to a complete rewrite of the library between the versions. Key breaking changes include:

• v9.0.0: A full rewrite introduced a Promise-based API, replacing the old callback-style functions. Exported function names and methods on the Glob class have changed. Support for Node.js versions below 16 was also dropped.
• v10.0.0: Default exports were removed in favor of named exports.

Recommendation: A significant refactor will be required to adapt to the new API. This should be handled as a separate, dedicated effort.

grunt-contrib-compress@1.6.0 → grunt-contrib-compress@2.0.0
This is a MEDIUM risk upgrade. The breaking change in version 2.0.0 is the requirement for Node.js version 10.16 or higher. The iltorb dependency was also replaced with native zlib brotli features, which is an internal change but worth noting.

grunt@1.4.1 → grunt@1.6.1
This is a MEDIUM risk upgrade. Version 1.6.0 introduced a requirement for Node.js 16 or higher. Projects running on older Node.js versions will need to upgrade their environment.

Other Major and Minor Upgrades

• libxmljs2@0.26.7 → libxmljs2@0.35.0: MEDIUM risk, as support for Node.js 10 and 15 was dropped.
• sqlite3@5.0.2 → sqlite3@5.1.7: MEDIUM risk, as the underlying pre-build tooling was changed, which could affect installation in some environments.
• node-pre-gyp@0.15.0 → node-pre-gyp@0.17.0: LOW risk, with no documented breaking changes in this range.
• unzipper@0.9.15 → unzipper@0.12.1: LOW risk, as the main change was an internal dependency update from fstream to fs-extra.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.