[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Deserialization of Untrusted Data SNYK-JS-BSON-561052	Yes	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MOCHA-561476	Yes	No Known Exploit

Commit messages

Package name: mocha

The new version differs by 250 commits.

• 42303e2 Release v6.0.0
• a553ca7 punctuation updates for changelog v6.0.0
• c710792 grammar updates for changelog v6.0.0
• 9f9293a update changelog for v6.0.0
• a540eb0 remove "projects" section from MAINTAINERS.md [ci skip]
• 52b5c42 Uppercased JSON reporter name in `describe` title (#3739)
• 82307fb Fix `.globals` to remove falsy values (#3737)
• 56dc28e Remove unnecessary post-processing code having no effect; closes #3708 (#3733)
• 16b4281 Documentation updates (#3728)
• 5d9d3eb Update nyc
• 118c9ae Refactor out usages of Suite#_onlyTests and Suite#_onlyTests (#3689) (#3707)
• 0dacd1f Add ability to unload files from `require` cache (redux) (#3726)
• 66a52f2 update release steps [ci skip]
• 45ae014 Refactor `lookupFiles` and `files` (#3722)
• 94c9320 fix --reporter-option to allow comma-separated options; closes #3706
• 0f546fc Refactor checkGlobals() error message creation (#3711)
• 2d21fd6 add missing user reference in CHANGELOG.md [ci skip]
• 6cb4e27 add all changes since v6.0.0-1 to CHANGELOG.md [ci skip]
• 186ca36 add createInvalidArgumentError(); see #3676 (#3677)
• 3a7fa37 Revert 00ca06b0e957ec4f067268c98053782ac5dcb69f; closes #3414 (#3715)
• 21ba5ce fix --inspect and its ilk; closes #3681 (#3699)
• 52b9a5f refactor: use constants for event names instead of string literals
• 29aa611 Eliminated variable shadowing from test event listeners (runner.spec.js) (#3712)
• e01a54e update usage info in docs [ci skip]

See the full diff

Package name: mongodb

The new version differs by 250 commits.

• 79da11f 3.1.3
• 337cb79 feat(core): update to mongodb-core 3.1.2
• ff5fafc refactor(topology-base): `getServer` => `selectServer`
• b33fc74 3.1.2
• 78f6977 fix(mongo_client): translate options for connectWithUrl
• 36e92f1 fix(db_ops): call collection.find() with correct parameters (#1795)
• 759dd85 fix(buffer): replace deprecated Buffer constructor
• cb9d915 docs(connect): remove references to MongoClient.connect
• b8d2f1d fix(teardown): properly destroy a topology when initial connect fails
• 64027e8 refactor(export): expose CommandCursor
• 6ef85c4 refactor(export): expose AggregationCursor
• 13d776f fix(cursor): set readPreference for cursor.count
• a5d0f1d feat(deprecation): wrap deprecated functions
• 4f907a0 feat(deprecation): create deprecation function
• 666b8fa refactor(bulk): Unify bulk operations
• a0d84f6 test(evergreen): adding evergreen config to native driver
• b8471f1 fix(collection): isCapped returns false instead of undefined
• 86344f4 fix(collection): ensure findAndModify always use readPreference primary
• c25c519 test(countDocuments): full test coverage for countDocuments
• 25ca557 docs(contributing): fix link to HISTORY.md
• 4395110 chore(MongoClient): add missing legacy option name on warning message
• 297d843 docs(sessions): updating docs for sessions
• 15dc808 fix(db_ops): fix two incorrectly named variables
• fca1185 fix(count-documents): return callback on error case

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic