[Snyk] Security upgrade cosmiconfig from 7.0.0 to 8.0.0

[apowers313]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Uncaught Exception SNYK-JS-YAML-5458867	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cosmiconfig

The new version differs by 36 commits.

• 7d1dce9 Merge pull request #274 from davidtheclark/prepare-v8
• 500dada correct changelog text
• 9254fb0 Merge branch 'main' into prepare-v8
• 68298d4 Merge pull request #282 from davidtheclark/add-filepath-to-loader-errors
• 706c2ee add changelog entry
• fea5937 add filepath to loader errors
• ec975e4 Merge pull request #281 from vkrol/vkrol-patch-1
• 8b8bcf7 don't install latest npm
• 93c009a fix changelog
• 195a1c5 drop node 12 support
• 386ff8c Merge branch 'main' into prepare-v8
• c2e52ac fix minor typo in readme
• b85d869 Merge branch 'v7.1' into main
• 18f1441 7.1.0
• 4ab669c Changelog 7.1.0
• 829893b Merge pull request #263 from d-fischer/config-subdir
• a4da8c1 add changelog entry
• 2a1a259 Fix the cosmiconfig() link in the cosmiconfigSync section
• 0160c2d Add "Maintainers wanted" note to readme (#277)
• 19bd87b Fix js-yaml, type imports (#275)
• bf455a3 Prepare v8
• c7dc6ab Remove badges for Travis and Appveyor (#273)
• 48c1e4a Add changelog note about yaml dependency (#272)
• 9155d8a @ types/parse-json should be a dev dependency (#256)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.