[Snyk] Upgrade negotiator from 0.3.0 to 0.6.3

[snyk-bot]

Snyk has created this PR to upgrade negotiator from 0.3.0 to 0.6.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 18 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2022-01-23.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:negotiator:20160616	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: negotiator

• 0.6.3 - 2022-01-23
  
  • Revert "Lazy-load modules from main entry point"
• 0.6.2 - 2019-04-30
  
  • Fix sorting charset, encoding, and language with extra parameters
• 0.6.1 - 2016-05-03
  
  • perf: improve Accept parsing speed
  • perf: improve Accept-Charset parsing speed
  • perf: improve Accept-Encoding parsing speed
  • perf: improve Accept-Language parsing speed
• 0.6.0 - 2015-09-30
  
  • Fix including type extensions in parameters in Accept parsing
  • Fix parsing Accept parameters with quoted equals
  • Fix parsing Accept parameters with quoted semicolons
  • Lazy-load modules from main entry point
  • perf: delay type concatenation until needed
  • perf: enable strict mode
  • perf: hoist regular expressions
  • perf: remove closures getting spec properties
  • perf: remove a closure from media type parsing
  • perf: remove property delete from media type parsing
• 0.5.3 - 2015-05-11
  
  • Fix media type parameter matching to be case-insensitive
• 0.5.2 - 2015-05-07
  
  • Fix comparing media types with quoted values
  • Fix splitting media types with quoted commas
• 0.5.1 - 2015-02-15
  
  • Fix preference sorting to be stable for long acceptable lists
• 0.5.0 - 2014-12-19
  
  • Fix list return order when large accepted list
  • Fix missing identity encoding when q=0 exists
  • Remove dynamic building of Negotiator class
• 0.4.9 - 2014-10-15
  
  • Fix error when media type has invalid parameter
• 0.4.8 - 2014-09-28
  
  • Fix all negotiations to be case-insensitive
  • Stable sort preferences of same quality according to client order
  • Support Node.js 0.6
• 0.4.7 - 2014-06-24
• 0.4.6 - 2014-06-11
• 0.4.5 - 2014-05-29
• 0.4.4 - 2014-05-29
• 0.4.3 - 2014-04-16
• 0.4.2 - 2014-03-01
• 0.4.1 - 2014-01-16
• 0.4.0 - 2014-01-09
• 0.3.0 - 2013-10-18

from negotiator GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs