Eddiebot: Dependabot alerts

[mikeysan]

Is anyone else getting this alert?

[github-actions[bot]]

It's great having you contribute to this project

Feel free to raise an Issue! Welcome to the community :nerd_face:

If you would like to continue contributing to open source and would like to do it with an awesome inclusive community, you should join our Discord chat and our GitHub Organisation - we help and encourage each other to contribute to open source little and often 🤓 . Any questions let us know.

[BOLT04]

Yes @mikeysan, and it seems it has a high severity:

Running npm update and commiting the new package.lock.json should fix this right?

[mikeysan]

Yes, that's it @BOLT04 and the suggested fix is correct too.

[eddiejaoude]

That is a great suggestion for people wanting to contribute to open source. Updating dependencies 😍

[Vyvy-vi]

Can I contribute to this, since no one has yet been assigned?

[eddiejaoude]

Sure 👍

[Vyvy-vi]

I fixed a few outdated(high-risk) dependencies in #305
However, there are some node_module issues that are popping up in the build...

[Vyvy-vi]

I did not update these as I was not sure about weather updating them might create issues...