[Snyk] Upgrade web-push from 3.4.4 to 3.5.0

[snyk-bot]

Snyk has created this PR to upgrade web-push from 3.4.4 to 3.5.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2022-05-03.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-MINIMIST-2429795	185/1000 Why? CVSS 3.7	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: web-push

• 3.5.0 - 2022-05-03
  

  3.5.0

• 3.4.5 - 2021-06-29
  

  3.4.5

• 3.4.4 - 2020-05-10
  

  3.4.4

from web-push GitHub release notes

Commit messages

Package name: web-push

• 644d5a0 3.5.0
• 92b2f28 Add proxy CLI variable (#710)
• 55c9b09 Bump chromedriver from 100.0.0 to 101.0.0 (#708)
• 8b93a75 Bump mocha from 8.3.2 to 10.0.0 (#707)
• cc33c0d Drop mocha-lcov-reporter package
• caa2bb7 Use newer nyc instead of istanbul CLI
• 71c04b8 Update some node dependencies
• a3def72 Bump minimist from 1.2.5 to 1.2.6 (#693)
• 0c5c44c Update eslint, eslint-config-airbnb, and eslint-plugin-import, and fix some new eslint lint errors
• e1c9f66 Bump asn1.js from 5.3.0 to 5.4.1 (#700)
• aa1116d Initial setup for CI with GitHub Actions
• 1793def Bump geckodriver from 1.22.3 to 3.0.1 (#705)
• 42c0d8b Bump chromedriver from 89.0.0 to 100.0.0 (#699)
• b5e6159 Create Dependabot configuration
• ef3f68e 3.4.5
• 2ef7acd Remove duplicated word "only" (#667)
• e8b2a84 Update dependency chalk to v4.1.1 (#665)
• b58c133 Update dependency mocha to v8.3.2 (#660)
• 46aab3c Update dependency geckodriver to v1.22.3 (#659)
• 743bfdc Update dependency chromedriver to v89 (#658)
• 86ffd1d Update dependency eslint to v7.24.0 (#654)
• 3e12e49 Validate VAPID keys are URL safe Base64 (#657)
• e716efb No conversion needed before calling PushManager.subscribe() (#663)
• 61ea3bf Update dependency mocha to v8.3.0 (#655)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs