[Snyk] Security upgrade postman-collection from 3.0.8 to 4.2.0

[kamalaknn]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: postman-collection

The new version differs by 250 commits.

• 1bee9fd Merge branch 'release/4.2.0'
• dee62f5 Release v4.2.0
• 5641217 Update dependencies
• a751823 Merge pull request #1329 from postmanlabs/feature/file-toJSON
• 6b7b3a2 Retain string file content while parsing formdata and file bodies
• 93a3b19 Merge pull request #1328 from postmanlabs/dependabot/npm_and_yarn/engine.io-and-socket.io-6.5.2
• 776b791 Bump engine.io and socket.io
• cb88844 Merge pull request #1313 from postmanlabs/dependabot/npm_and_yarn/karma-chrome-launcher-3.2.0
• d5f19f4 Merge pull request #1327 from postmanlabs/dependabot/npm_and_yarn/socket.io-parser-4.2.4
• 405edb6 Bump karma-chrome-launcher from 3.1.1 to 3.2.0
• ca42843 Merge pull request #1308 from postmanlabs/dependabot/npm_and_yarn/eslint-plugin-security-1.7.1
• 39e2d5a Merge pull request #1323 from postmanlabs/dependabot/npm_and_yarn/semver-7.5.4
• 65dd098 Bump socket.io-parser from 4.2.1 to 4.2.4
• cf89348 Merge pull request #1325 from postmanlabs/dependabot/npm_and_yarn/word-wrap-1.2.4
• 8f78063 Bump word-wrap from 1.2.3 to 1.2.4
• cb3b78a Bump semver from 7.3.8 to 7.5.4
• 660b4cd Bump eslint-plugin-security from 1.6.0 to 1.7.1
• d9bea02 Delete travis-deploy-key.enc
• 85e4c05 Merge branch 'release/4.1.7'
• a030133 Merge branch 'release/4.1.7' into develop
• dd08902 Release v4.1.7
• 296a3e4 Merge pull request #1298 from postmanlabs/dependabot/npm_and_yarn/decode-uri-component-0.2.2
• 073395a Merge pull request #1303 from postmanlabs/dependabot/npm_and_yarn/json5-2.2.3
• 734565f Merge pull request #1305 from postmanlabs/dependabot/npm_and_yarn/ua-parser-js-0.7.33

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)