fix(deps): upgrade tap to 18.0.0

[snyk-io]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Inefficient Algorithmic Complexity SNYK-JS-JSYAML-17342520	738

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[snyk-io]

This upgrade contains a high-risk major version update for tap and a low-risk patch update for typeorm.

tap 11.1.5 → 18.0.0 (HIGH)

This is a significant upgrade across 7 major versions, introducing substantial breaking changes. Tests written for v11 will require significant refactoring to work with v18.

Key Breaking Changes:

• Execution Model: Test files now run in separate processes by default, which can affect tests that rely on shared state.
• Coverage Reporting: The nyc dependency has been replaced with c8. Coverage is now enabled by default, and missing coverage is treated as a test failure. Many CLI flags like --cov, --no-cov, and --check-coverage have been removed or replaced.
• Configuration: Configuration via test-regex is replaced by include/exclude glob patterns. The CLI has been overhauled, with commands like tap report and tap replay replacing older flags.
• API & Plugins: Functionality previously built-in is now handled by plugins (@tapjs/typescript, @tapjs/mocha-globals). Assertion synonyms (e.g., t.is_not_equal()) have been removed.
• Node.js Support: Support for all Node.js versions below 16.x has been dropped.

Recommendation:
This upgrade requires a dedicated effort to migrate test suites. Developers must review the official upgrade guide, refactor test configurations, update CI/CD scripts to use the new CLI commands, and adapt tests to the new plugin-based architecture and assertion APIs.

Source: Tap Changelog, Upgrade Guide

typeorm 0.2.24 → 0.2.32 (LOW)

This is a minor update within the same major version. The changelogs indicate that this range consists primarily of bug fixes and minor feature enhancements. No breaking API changes are documented for this specific version span.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[snyk-io]

⛔ Snyk checks have failed. 10 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (10)
⛔	Open Source Security	0	5	5	0	10 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.