[Snyk] Security upgrade log4js from 0.6.38 to 3.0.0

[thonatos]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: log4js

The new version differs by 250 commits.

• 45eca69 3.0.0
• 7597c52 Merge pull request #755 from log4js-node/inspect-deprecated
• 16b8754 fix: removed semver dep, not needed
• 20a6b29 fix: removed the custom inspect thing as it was only need for node < 6
• 58cd7d2 chore: added node v10 to the travis builds, removed v7
• 7f2b1c2 docs: fixed references to external appenders
• dcdf2ad Merge pull request #754 from log4js-node/version-3.x
• 8c8eea5 test: fixed up the types test
• 8ad2c39 2.11.0
• 24d2663 Merge pull request #753 from log4js-node/remove-logfaces-udp
• 467f670 chore: removed the logFaces-UDP appender
• 2db6bb0 Merge branch 'master' into version-3.x
• e605365 Merge pull request #752 from log4js-node/deprecate-logfaces-udp
• db9271b chore: deprecated logFaces-UDP
• 6031257 Merge pull request #748 from log4js-node/remove-logFaces-HTTP
• 3a56566 chore: removed logFaces-HTTP appender
• 06c56b4 chore: turned off unused locals complaint for types (caused by levels)
• 5618fdb Merge branch 'master' into version-3.x
• 111fced Merge pull request #747 from log4js-node/deprecate-logfaces-http
• 29a238a chore: deprecated logFaces-HTTP appender
• 83440fa Merge pull request #745 from nicojs/744-fix-levels-typing
• 18ad653 fix(typings): correctly type the `levels` property
• 6b60cd9 Merge pull request #742 from log4js-node/remove-logstash-http
• 16603ca chore: removed logstash-http appender

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)