[Snyk] Security upgrade cson from 3.0.2 to 6.5.0

[cssecautomation]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • tool/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cson

The new version differs by 40 commits.

• b55bad1 v6.5.0 - boundation, changelog, version bump
• 5628afb Bump safefs from 5.1.0 to 5.2.0
• b447225 Bump requirefresh from 2.3.0 to 3.0.0
• 6efcf2b Bump kava from 4.0.0 to 4.1.0
• d50a64e Bump valid-directory from 1.1.1 to 1.3.0
• 6b7927a Bump projectz from 1.10.0 to 1.12.0
• 1b10b66 Bump extract-opts from 3.4.0 to 4.0.0
• 51faf50 Bump safeps from 8.1.0 to 9.0.0
• ca6a1ac v6.4.0 - boundation, changelog, version bump
• 564ff3b v6.3.0 - boundation, changelog, version bump
• bab6c8e Bump valid-directory from 1.0.0 to 1.1.1
• c6f82ac Bump safeps from 8.0.0 to 8.1.0
• 9153fd1 Bump safefs from 5.0.0 to 5.1.0
• 2dc8274 Bump extract-opts from 3.3.1 to 3.4.0
• 6b3a9e3 Bump projectz from 1.9.0 to 1.10.0
• 49a93f4 Bump requirefresh from 2.2.0 to 2.3.0
• a6c1091 Bump kava from 3.1.0 to 3.2.0
• bbde6ea Bump assert-helpers from 5.2.1 to 5.3.0
• 3b87761 fix test require of index
• 9702e64 v6.2.0 - boundation, changelog, version bump
• bc1dbbb v6.1.0 - boundation, changelog, version bump
• 39c6012 Bump assert-helpers from 5.0.0 to 5.1.0
• a72b20c Bump safefs from 4.1.0 to 4.2.0
• ec12a81 v6.0.0 - coffeescript v2, boundation, min node v8

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)