[Snyk] Security upgrade passport-local-mongoose from 4.5.0 to 6.0.0

[vaibhavpacharya]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: passport-local-mongoose

The new version differs by 57 commits.

• 7ae942a chore(release): 6.0.0
• a5cc105 chore: switch to prettier and prettify
• e37894e chore: switch to latest 4x version on fastdl downloads
• 2c5d46d chore: renovate build matrix
• 6e5297e chore: remove cross-env and revert version to last released version
• b76a22e chore: remove default option for npm i
• 09d6c2b chore: bump dependencies in example package-lock.json
• 2e66b35 chore: bump dependencies in example
• feb196a chore: update dependencies
• 63ad94e chore: remove the never released 6.0.0 version from the changelog
• bc3122d chore: move updating from 1.0 to 2.0 near to end of readme
• 10f522a chore: remove codellama badge
• 1b74a3d chore: fix deprecated connect
• e190a3a chore: update drop-mongodb-collections
• c9b0a78 fix: make debug a dev dependency
• 83e5ad3 chore: add error messages to login form of example (#284)
• 40a1fc2 chore: more descriptive customValidator docs in readme (#285)
• aa3d16f chore: Add convenient link to API documentation (#287)
• ff7d718 chore: switch example from jade to pug
• 8215074 chore: update dependencies, npm audit fix (#282)
• 9ff1921 chore: update login example dependencies (#281)
• faa856a chore(release): 6.0.0
• 37375b8 fix: use Buffer.from instead of new Buffer
• 807d9cf fix: update dependencies and specify server port in tests

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)