[Snyk] Security upgrade metalsmith from 2.3.0 to 2.5.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: metalsmith

The new version differs by 154 commits.

• 3a0517c Release 2.5.0
• e988eaa chore: Final JSDoc updates & changelog fixes
• c44edb2 chore: prepare changelog for 2.5.x
• 366dae1 chore: npm update
• 3a11a24 feat: add org migration notification to postinstall script
• 09f5bbd dev: Update devDependencies
• 7df9157 chore: Remove accidentally included local test files
• 880c5d7 fix: remove stray this._files assignment, cfr release 2.4.3 compat
• 63d784c Security: npm audit fix
• 0a53007 chore: update supported Node versions & CI to >=12
• 8ca017f chore: enable ESlint for tests & fix issues
• 1eea24b Merge branch 'docs/readme-examples' into release/2.5.x
• 91e2f46 Merge branch 'feature/Update handlebars to version 4.0.3 🚀 nodejs/nodejs.org#259-debug-method' into release/2.5.x
• 7d39a76 Finalize Update handlebars to version 4.0.3 🚀 nodejs/nodejs.org#259: Metalsmith#debug first implementation
• c21026a docs: update README.md for 2.5
• 7bd37eb docs: Update examples package.json & syntax
• b8b05cc Updates README.md with relevant links, restructured sections
• 5d75539 Resolves Travis PR integration broken nodejs/nodejs.org#355: proper path resolution for edge-cases using CLI
• 1dae1cb Reworks CLI logging, removes chalk dependency
• 4c483a3 Implements env in CLI with var expansion; sets metalsmith.env('CLI', true) flag; part of adding collaborators, Nov 2015 nodejs/nodejs.org#354
• a753b51 Merge branch 'release/2.5.x' into feature/Update handlebars to version 4.0.3 🚀 nodejs/nodejs.org#259-debug-method
• 2666846 Merge master into release/2.5.x & fix conflicts
• 40a7de8 Release 2.4.3
• cec2ce4 chore: Update changelog

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.