[Snyk] Upgrade moment from 2.15.1 to 2.30.1

[drmikebio]

Snyk has created this PR to upgrade moment from 2.15.1 to 2.30.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 33 versions ahead of your current version.

• The recommended version was released 3 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Directory Traversal SNYK-JS-MOMENT-2440688	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:moment:20161019	589	No Known Exploit
	Regular Expression Denial of Service (ReDoS) npm:moment:20170905	589	No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: moment

• 2.30.1 - 2023-12-27
  

  2.30.1

• 2.30.0 - 2023-12-26
  

  2.30.0

• 2.29.4 - 2022-07-06
  

  2.29.4

• 2.29.3 - 2022-04-17
  

  2.29.3

• 2.29.2 - 2022-04-03
  

  2.29.2

• 2.29.1 - 2020-10-06
  

  2.29.1

• 2.29.0 - 2020-09-22
  

  2.29.0

• 2.28.0 - 2020-09-13
  

  2.28.0

• 2.27.0 - 2020-06-18
  

  2.27.0

• 2.26.0 - 2020-05-20
  

  2.26.0

• 2.25.3 - 2020-05-04
• 2.25.2 - 2020-05-04
• 2.25.1 - 2020-05-01
• 2.25.0 - 2020-05-01
• 2.24.0 - 2019-01-21
• 2.23.0 - 2018-12-13
• 2.22.2 - 2018-06-01
• 2.22.1 - 2018-04-15
• 2.22.0 - 2018-03-30
• 2.21.0 - 2018-03-02
• 2.20.1 - 2017-12-19
• 2.20.0 - 2017-12-17
• 2.19.4 - 2017-12-11
• 2.19.3 - 2017-11-29
• 2.19.2 - 2017-11-11
• 2.19.1 - 2017-10-11
• 2.19.0 - 2017-10-10
• 2.18.1 - 2017-03-21
• 2.18.0 - 2017-03-18
• 2.17.1 - 2016-12-04
• 2.17.0 - 2016-11-22
• 2.16.0 - 2016-11-10
• 2.15.2 - 2016-10-24
• 2.15.1 - 2016-09-21

from moment GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[drmikebio]

This upgrade spans multiple versions of Moment.js, from 2.15.1 to 2.30.1. While there are no direct breaking API changes, there are significant behavioral changes and important context to consider.

Project Status:
As of September 2020, Moment.js is a legacy project in maintenance mode. The maintainers will not add new features and may not fix bugs or quirks. They recommend using modern alternatives like Luxon, Day.js, or the native Intl API for new projects.

Potential Behavioral Changes:

• Stricter String Parsing: Since version 2.24.0, using moment() with strings that are not in a recognized ISO 8601 format is deprecated. While it may still work, it will produce a console warning and can be unreliable. Code that relied on Moment's previous lenient, non-standard string parsing may need to be updated to provide an explicit format.
• Bug Fixes: The upgrade includes numerous bug fixes, including security patches for Directory Traversal and Regular Expression Denial of Service (ReDoS) vulnerabilities. While beneficial, bug fixes can occasionally alter behavior that applications may have inadvertently relied upon.

Recommendation:
Verify that your application is not relying on Moment's deprecated string-parsing behavior. Test date and time parsing functionality thoroughly to ensure that bug fixes do not introduce unexpected changes. Consider planning a future migration to a more modern date/time library.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.