Merge pull request #250 from google/update-deps

Update dependencies to address security alerts

Author: ChadKillingsworth

package.json

@@ -34,11 +34,17 @@
   "devDependencies": {
     "glob": "7.x",
     "graphlib": "2.x",
-    "mocha": "6.x",
+    "mocha": "10.x",
     "ncp": "2.x",
     "semver": "5.x",
     "should": "13.x"
   },
+  "resolutions": {
+    "**/glob-stream/**/glob-parent": "^5.1.2",
+    "**/glob-watcher/**/chokidar/**/glob-parent": "^5.1.2",
+    "**/gulp-cli/**/yargs-parser": "^13.1.2",
+    "**/union-value/**/set-value": "^2.0.1"
+  },
   "scripts": {
     "build": "./build-scripts/build.sh",
     "test": "./build-scripts/test.sh",

packages/google-closure-compiler/package.json

@@ -37,7 +37,7 @@
   },
   "homepage": "https://developers.google.com/closure/compiler/",
   "dependencies": {
-    "chalk": "2.x",
+    "chalk": "4.x",
     "google-closure-compiler-java": "^20220803.0.0",
     "minimist": "1.x",
     "vinyl": "2.x",
@@ -51,9 +51,9 @@
   "devDependencies": {
     "gulp": "4.x",
     "gulp-filter": "6.x",
-    "gulp-mocha": "6.x",
+    "gulp-mocha": "8.x",
     "gulp-sourcemaps": "2.x",
-    "mocha": "6.x",
+    "mocha": "10.x",
     "ncp": "^2.0.0",
     "semver": "^5.1.0",
     "should": "^13.2.3",