[Snyk] Fix for 1 vulnerabilities

[mrnil]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cross-spawn

The new version differs by 11 commits.

• 0e7cd3d chore(release): 7.0.0
• 6fdaf5a chore: update deps
• 16feb53 refactor: drop support for versions below Node.js 8 (#125)
• 48bee1d chore: fix tests
• 9c9d627 chore: remove extra space after badges (made with screpto)
• 47aff71 chore: do not auto-publish on release due to 2FA (made with screpto)
• 85339d4 chore: remove greenkeeper badge (made with screpto)
• 6450fe7 chore: update babel preset
• 18ebd93 chore: update dev deps
• bbd342b chore: add missing new line to readme
• 8f20cbc chore: fix some more linting errors

See the full diff

Package name: gulp-sass

The new version differs by 2 commits.

• 5775044 Update CHANGELOG.md
• 978b8f6 Update to major version 5 (#802)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)