[Snyk] Upgrade prompt from 1.1.0 to 1.3.0

[mikr13]

Snyk has created this PR to upgrade prompt from 1.1.0 to 1.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 4 versions ahead of your current version.

• The recommended version was released 4 years ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PARSELINKHEADER-1582783	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	479	Proof of Concept
	Prototype Pollution SNYK-JS-UTILE-8706797	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	479	Proof of Concept
	Prototype Pollution SNYK-JS-ASYNC-2441827	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-1579269	479	Proof of Concept
	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	479	Proof of Concept
	Excessive Platform Resource Consumption within a Loop SNYK-JS-BRACES-6838727	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-CROSSSPAWN-8303230	479	Proof of Concept
	Improper Handling of Extra Parameters SNYK-JS-FOLLOWREDIRECTS-6141137	479	Proof of Concept
	Prototype Pollution SNYK-JS-LODASHSET-1320032	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	479	Proof of Concept
	Code Injection SNYK-JS-SNYKGRADLEPLUGIN-8248487	479	No Known Exploit
	Code Injection SNYK-JS-SNYKPHPPLUGIN-8248485	479	No Known Exploit
	Command Injection SNYK-JS-SSH2-1656673	479	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	479	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	479	No Known Exploit
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	479	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	479	No Known Exploit
	Symlink Attack SNYK-JS-TMP-11501554	479	Proof of Concept
	Prototype Pollution SNYK-JS-XML2JS-5414874	479	Proof of Concept
	Allocation of Resources Without Limits or Throttling SNYK-JS-AXIOS-12613773	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	479	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9292519	479	Proof of Concept
	Server-side Request Forgery (SSRF) SNYK-JS-AXIOS-9403194	479	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DIFF-14917201	479	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	479	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	479	Proof of Concept
	Open Redirect SNYK-JS-GOT-2932019	479	No Known Exploit
	Open Redirect SNYK-JS-GOT-2932019	479	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HTTPCACHESEMANTICS-3248783	479	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-I-1726768	479	No Known Exploit
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	479	Proof of Concept
	Prototype Pollution SNYK-JS-JSYAML-13961110	479	No Known Exploit
	Prototype Pollution SNYK-JS-JSYAML-13961110	479	No Known Exploit
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-JSZIP-3188562	479	No Known Exploit
	Arbitrary File Write via Archive Extraction (Zip Slip) SNYK-JS-JSZIP-3188562	479	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-15053838	479	No Known Exploit
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	479	No Known Exploit
	Command Injection SNYK-JS-SNYK-3037342	479	Proof of Concept
	Command Injection SNYK-JS-SNYK-3038622	479	Proof of Concept
	Code Injection SNYK-JS-SNYK-3111871	479	No Known Exploit
	Command Injection SNYK-JS-SNYKDOCKERPLUGIN-3039679	479	Proof of Concept
	Command Injection SNYK-JS-SNYKGOPLUGIN-3037316	479	Proof of Concept
	Command Injection SNYK-JS-SNYKGRADLEPLUGIN-3038624	479	Proof of Concept
	Command Injection SNYK-JS-SNYKMVNPLUGIN-3038623	479	Proof of Concept
	Command Injection SNYK-JS-SNYKPYTHONPLUGIN-3039677	479	Proof of Concept
	Command Injection SNYK-JS-SNYKSBTPLUGIN-3038626	479	Proof of Concept
	Command Injection SNYK-JS-SNYKSNYKCOCOAPODSPLUGIN-3038625	479	Proof of Concept
	Command Injection SNYK-JS-SNYKSNYKHEXPLUGIN-3039680	479	Proof of Concept
	Directory Traversal SNYK-JS-TAR-15032660	479	Proof of Concept
	Improper Handling of Unicode Encoding SNYK-JS-TAR-15038581	479	Proof of Concept
	Directory Traversal SNYK-JS-TAR-15127355	479	No Known Exploit
	Uncontrolled Resource Consumption ('Resource Exhaustion') SNYK-JS-TAR-6476909	479	Proof of Concept
	Symlink Attack SNYK-JS-TMP-11501554	479	Proof of Concept
	Symlink Attack SNYK-JS-TMP-11501554	479	Proof of Concept
	Uninitialized Memory Exposure npm:utile:20180614	479	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BRACEEXPANSION-9789073	479	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	479	No Known Exploit
	Insertion of Sensitive Information into Log File SNYK-JS-SNYK-10497607	479	Proof of Concept

Release notes

Package name: prompt

• 1.3.0 - 2022-04-11
• 1.2.2 - 2022-02-17
• 1.2.1 - 2022-01-10
• 1.2.0 - 2021-08-25
• 1.1.0 - 2020-12-21
  

  1.1.0

from prompt GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Copilot]

Pull request overview

Upgrades the prompt npm dependency to a newer patch/minor version as part of a Snyk-driven dependency update to address reported vulnerabilities in the dependency tree.

Changes:

• Bump prompt dependency version in package.json from ^1.2.0 to ^1.3.0.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This repo includes a yarn.lock that still pins prompt to 1.2.0, so bumping package.json alone won’t upgrade prompt for yarn installs. Please update yarn.lock accordingly (or remove it if yarn isn’t supported) to avoid inconsistent dependency trees and leaving the vulnerable version in place for some consumers.

[Copilot]

PR description says this upgrades prompt from 1.1.0, but package.json was already at ^1.2.0 before this change. Please adjust the PR description (or confirm the intended starting version) to avoid confusion when auditing dependency upgrades.