[Snyk] Security upgrade yo from 2.0.6 to 4.0.0

[jackturner271]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: yo

The new version differs by 33 commits.

• 0ec0280 4.0.0
• 263a96a Change yeoman-environment dep to auto update minor versions only.
• ea5e36b 4.0.0-beta.0
• 69e7b59 Fix test without color.
• 66f2684 Update .gitignore
• d8049ec Bump yeoman-environment to 3.1.0
• 741fbbd Fix test on windows.
• e71dbf0 Fix getGeneratorsMeta return mocking.
• acda684 Disable completion test for windows
• e48bec8 Drop node 8 and 10 from travis.
• 9d27f8a Bump xo to 0.38.1.
• 62b5be2 Bump minimum require node to 12.10.0
• e2b19a9 Run npm audit fix
• 9d3e098 Bump nyc to 15.1.0
• 46ff668 Bump mocha to 8.3.0
• 1e7ea75 Set FORCE_COLOR environment variable.
• b1e2947 Add npm test workflow.
• 2598967 Convert router to Promises/async.
• 5d533d7 Switch from listening to error event to catch rejected promise
• ec362f3 Lookup is a sync method at environment 2.x and 3.x.
• fd92eb8 Bump yeoman-environment to 3.0.0
• 540bd4c Recreate package-lock using npm 7.
• a0e8c51 Create FUNDING.yml
• d824db9 3.1.1

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Control of Dynamically-Managed Code Resources