[Snyk] Security upgrade gulp-ejs from 3.3.0 to 5.0.0

[ch-snyk-sa]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-ejs

The new version differs by 44 commits.

• 1871de5 5.0.0
• 56c37d2 chore(changelog): update to v5.0.0
• 04ec96e chore(deps): bump ejs from 2.7.4 to 3.0.1 (#168)
• 74aa2dd Merge pull request #169 from rogeriopvl/dependabot/npm_and_yarn/eslint-6.7.2
• 6fa33e7 chore(deps-dev): bump eslint from 6.7.1 to 6.7.2
• 1afc0a4 Merge pull request #167 from rogeriopvl/dependabot/npm_and_yarn/eslint-6.7.1
• 3b99431 chore(deps-dev): bump eslint from 6.6.0 to 6.7.1
• 8eadd9b Merge pull request #166 from rogeriopvl/dependabot/npm_and_yarn/ejs-2.7.4
• 9413628 chore(deps): bump ejs from 2.7.3 to 2.7.4
• d9a475f Merge pull request #165 from rogeriopvl/dependabot/npm_and_yarn/ejs-2.7.3
• 5e079bb chore(deps): bump ejs from 2.7.2 to 2.7.3
• 223c989 Merge pull request #164 from rogeriopvl/dependabot/npm_and_yarn/ejs-2.7.2
• d2c2dec chore(deps): bump ejs from 2.7.1 to 2.7.2
• 75470b9 Merge pull request #163 from rogeriopvl/dependabot/npm_and_yarn/prettier-1.19.1
• 03fe086 chore(deps-dev): bump prettier from 1.18.2 to 1.19.1
• aa61005 Merge pull request #162 from rogeriopvl/dependabot/npm_and_yarn/eslint-6.6.0
• 6fde366 chore(deps-dev): bump eslint from 6.5.1 to 6.6.0
• 89b33b5 Merge pull request #161 from rogeriopvl/dependabot/npm_and_yarn/mocha-6.2.2
• 519014f chore(deps-dev): bump mocha from 6.2.1 to 6.2.2
• c9d6328 chore(deps-dev): bump eslint-plugin-node from 9.2.0 to 10.0.0 (#160)
• a6cb7e5 chore(deps-dev): bump eslint from 6.3.0 to 6.5.1 (#159)
• 2cb9547 chore(deps-dev): bump mocha from 6.2.0 to 6.2.1 (#158)
• 951c8d6 docs: remove greenkeeper badge
• 3c769f3 4.1.2

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Control of Dynamically-Managed Code Resources