[Snyk] Upgrade np from 7.6.2 to 10.0.7

[Chere3]

Snyk has created this PR to upgrade np from 7.6.2 to 10.0.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

• The recommended version is 19 versions ahead of your current version.

• The recommended version was released on 21 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	482	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	482	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	482	Proof of Concept
	Open Redirect SNYK-JS-GOT-2932019	482	No Known Exploit
	Open Redirect SNYK-JS-GOT-2932019	482	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	482	Proof of Concept

Release notes

Package name: np

• 10.0.7 - 2024-07-16
  
  • Allow publishConfig.registry to be npm default registry when using Yarn berry (#750) 6c5eee3

  v10.0.6...v10.0.7

• 10.0.6 - 2024-06-19
  
  • Fix usage with pnpm and --any-branch or --branch (#745) d0c1493

  v10.0.5...v10.0.6

• 10.0.5 - 2024-04-19
  
  • Fix npm 10 compatibility for real (#744) 34409be

  v10.0.4...v10.0.5

• 10.0.4 - 2024-04-17
  
  • Fix compatibility with npm 10 (#743) 4caa295

  v10.0.3...v10.0.4

• 10.0.3 - 2024-04-07
  
  • Fix publish OTP for Yarn Berry (#741) 02f60c7

  v10.0.2...v10.0.3

• 10.0.2 - 2024-03-24
  
  • Use npm for tagging versions when pnpm is the chosen package manager (#739) 770418f

  v10.0.1...v10.0.2

• 10.0.1 - 2024-03-13
  
  • Fix compatibility with npm 10 (#737) 9fdebd5

  v10.0.0...v10.0.1

• 10.0.0 - 2024-02-26
  

  Breaking

  • Remove the --yarn flag (#730) 4b3b599
    • The functionality is replaced by --package-manager. See below.

  Improvements

  • Add --package-manager flag (#730) 4b3b599
    • This acts like the packageManager field in package.json. np will default to reading package.json, and look for lockfiles to determine the best package manager as a last resort.
  • Add pnpm support (#730) 4b3b599

  v9.2.0...v10.0.0

• 9.2.0 - 2023-12-09
  
  • Fix yarn npm publish for scoped packages 8d3a984
  • Fix broken revert code after publish failure 819ed29

  v9.1.0...v9.2.0

• 9.1.0 - 2023-12-05
  
  • Add Yarn Berry support (#723) 0d9522b

  v9.0.0...v9.1.0

• 9.0.0 - 2023-11-27
• 8.0.4 - 2023-06-12
• 8.0.3 - 2023-06-11
• 8.0.2 - 2023-05-30
• 8.0.1 - 2023-05-28
• 8.0.0 - 2023-05-27
• 7.7.0 - 2023-03-30
• 7.6.4 - 2023-03-20
• 7.6.3 - 2022-12-27
• 7.6.2 - 2022-06-22

from np GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/[email protected]	Transitive: environment, eval, filesystem, network, shell, unsafe	+305	20.1 MB	sindresorhus

🚮 Removed packages: npm/@babel/[email protected], npm/@babel/[email protected], npm/@sindresorhus/[email protected], npm/@szmarczak/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/@types/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎