[Snyk] Upgrade i18n from 0.11.1 to 0.13.3

[snyk-bot]

Snyk has created this PR to upgrade i18n from 0.11.1 to 0.13.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2021-05-08.

Release notes

Package name: i18n

• 0.13.3 - 2021-05-08
  

  Fixed

  • upgrade transitive dev dependency of eslint, mocha, zombie to [email protected]
  • upgrade transitive dev dependency of zombie to [email protected]
  • upgrade transitive dev dependency of eslint-plugin-import to [email protected]
• 0.13.2 - 2020-08-21
  

  Fixed

  • moved devDeps from dependencies to devDependencies #446
  • removed unused packages from all dependencies
• 0.13.1 - 2020-08-20
  

  Fixed

  • npx npm-force-resolutions failed #445

  Details

  A preinstall script was added to force resolving specific versions of lodash and ajv. Those are sub-dependencies of zombie and its packages. Zombie is devDependency of i18n. But zombie still refers to older versions reported to vulnerable - so I decided to force fixed versions.

  Of course that preinstall should count on any npm install i18n, it's renamed to force-resolutions so I can still resolve audit issues in dev while also supporting clean installs.

  "scripts": {
    "preinstall": "npx npm-force-resolutions"
  }

  now reads as

  "scripts": {
    "force-resolutions": "npx npm-force-resolutions"
  }

  And doesn't get triggered by npm install.

• 0.13.0 - 2020-08-20
  

  Added

  • new option retryInDefaultLocale as proposed by PR #206
  • new option header as proposed by PRs #390 and #407
  • pre-commit hooks to ensure code-style (even on contributions)

  Fixed

  • typos in README

  Changed

  • tooling: eslint with standard.js & prettier presets replaces jshint
• 0.12.0 - 2020-08-16
  

  Added

  • backward compatible default to singleton with const i18n = require('i18n')
  • create an instance of i18n by const i18n = new I18n()

  Example:

  /**
  * require I18n with capital I as constructor
  */
  const { I18n } = require("i18n");

/**
* create a new instance with it's configuration
*/
const i18n = new I18n({
locales:['en', 'de'],
directory: __dirname + '/locales'
});

0.11.1 - 2020-08-04

Fixed

• dependabot bumbed minimist

---

Minimist is a sub-dependency of mocha and messageformat:

$ npm ls minimist
[email protected] 
├─┬ [email protected]
│ └─┬ [email protected]
│   └── [email protected]
└─┬ [email protected]
  └─┬ [email protected]
    └── [email protected]  deduped

from i18n GitHub release notes

Commit messages

Package name: i18n

• 494a464 version bumb
• bab7853 Merge pull request Fix 2 typos in hints juice-shop/juice-shop#468 from mashpie/dependabot/npm_and_yarn/hosted-git-info-2.8.9
• a5cf052 Bump hosted-git-info from 2.8.8 to 2.8.9
• 74b39e4 Merge pull request Add CAPTCHA for feedback form juice-shop/juice-shop#467 from mashpie/dependabot/npm_and_yarn/lodash-4.17.21
• 9ac193c Bump lodash from 4.17.20 to 4.17.21
• 293dab8 Merge pull request Update sinon to the latest version 🚀 juice-shop/juice-shop#466 from mashpie/dependabot/npm_and_yarn/url-parse-1.5.1
• 3a8841d Bump url-parse from 1.4.7 to 1.5.1
• 4fb53f5 upgraded devDep y18n
• eaefbf9 version bumb
• 823be8c removed more unsused deps
• 1246632 Merge pull request Rate Limit Circumvention Challenge juice-shop/juice-shop#446 from DRoet/master
• 5b6444f fix: mark should and zombie as devDependencies
• f2145ab Merge tag '0.13.1'
• 0c20329 Merge branch 'hotfix/0.13.1' into npm
• fffb704 version bumb
• 19231c0 FIX force-resolutions Update lcov-result-merger to the latest version 🚀 juice-shop/juice-shop#445 & npm update
• 89df0aa Merge tag '0.13.0'
• c205742 Merge branch 'release/0.13.0' into npm
• 002c907 pack whats needed only
• 999aa76 version bumb
• 72ade60 linting readme
• 4a89660 force-resolutions
• b5fa5f6 linted tests
• 8d2a939 prepare linting tests

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs