[Snyk] Fix for 2 vulnerabilities

[Robthreefold]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Arbitrary Code Injection SNYK-JS-LODASH-15869625	630
	Prototype Pollution SNYK-JS-LODASH-15869619	545

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Arbitrary Code Injection

[Robthreefold]

Both mongoose and tap have undergone major version upgrades with significant breaking changes that will require code and configuration modifications.

mongoose 4.11.14 → 5.7.3

This is a major upgrade from v4 to v5. Key breaking changes include:

• Required Runtimes: Support for Node.js versions below 4.0.0 and MongoDB versions below 3.0.0 has been dropped. [1]
• Connection Logic: The mongoose.connect() method has a stricter signature. The useMongoClient option has been removed and its behavior is now default. [1]
• Promises: Mongoose v5 uses native ES6 promises by default. The previously used mpromise library is no longer supported. [2, 5]
• Middleware: Query middleware must now be defined before calling mongoose.model(). If defined after, it will not be executed. [1, 9]
• Removed/Changed Functions: The return values for remove() and deleteX() have changed. You should review their usage in your code. [1]

Recommendation: Developers must review the official migration guide to address changes in connection logic, promise handling, and middleware registration. Code changes are required for this upgrade.

Source: Mongoose 4.x to 5.x Migration Guide

tap 11.1.5 → 18.0.0

This is a substantial upgrade across multiple major versions (v11 through v18), introducing numerous breaking changes. Key changes include:

• Node.js Support: Support for Node.js versions below 12 has been dropped (v12 dropped support for <10, v16 dropped support for <12). [7]
• Configuration: Configuration has been significantly overhauled in v18. nyc is no longer used for code coverage, and coverage is now enabled and checked at 100% by default. Many command-line options have been removed or replaced. [3]
• File Paths: Test file matching has moved from regular expressions (test-regexp, test-ignore) to glob patterns (include, exclude). [3]
• ES Modules: v15 and later favor native ES Modules over @std/esm. [7]
• Plugins: Assertion synonyms (e.g., t.is_not_equal()) and Mocha-style globals (describe, it) have been moved to optional plugins (@tapjs/synonyms, @tapjs/mocha-globals). [3]

Recommendation: This upgrade will require significant refactoring of test configurations, command-line scripts, and potentially test code itself to align with modern tap conventions.

Source: Upgrading from tap v16 and before

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[Robthreefold]

⛔ Snyk checks have failed. 6 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (6)
⛔	Open Source Security	0	3	3	0	6 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Robthreefold]

⛔ Snyk checks have failed. 6 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (6)
⛔	Open Source Security	0	3	3	0	6 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Robthreefold]

⛔ Snyk checks have failed. 6 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (6)
⛔	Open Source Security	0	3	3	0	6 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Robthreefold]

⛔ Snyk checks have failed. 6 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (6)
⛔	Open Source Security	0	3	3	0	6 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Robthreefold]

⛔ Snyk checks have failed. 6 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (6)
⛔	Open Source Security	0	3	3	0	6 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[Robthreefold]

⛔ Snyk checks have failed. 6 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (6)
⛔	Open Source Security	0	3	3	0	6 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.