Merge pull request #1169 from CartoDB/update-deps

Update deps

NEWS.md

@@ -9,7 +9,7 @@ Breaking changes:
 
 Announcements:
 - Support Node.js 12
-- Upgrade `windshaft` to version [`7.0.0`](https://github.com/CartoDB/Windshaft/releases/tag/7.0.0)
+- Upgrade `windshaft` to version [`7.0.1`](https://github.com/CartoDB/Windshaft/releases/tag/7.0.1)
 - Upgrade `camshaft` to version [`0.65.3`](https://github.com/CartoDB/camshaft/blob/0.65.3/CHANGELOG.md#0653):
   - Fix noisy message logs while checking analyses' limits
   - Fix CI setup, explicit use of PGPORT while creating the PostgreSQL cluster
@@ -24,7 +24,8 @@ Announcements:
 - Remove `bootstrapFonts` at process startup (now done in `windshaft@6.0.0`)
 - Stop checking the installed version of some dependencies while testing
 - Send metrics about `map views` (#1162)
-- Add custom headers in responses to allow to other components to be able to get insights about user activity.
+- Add custom headers in responses to allow to other components to be able to get insights about user activity
+- Update dependencies to avoid security vulnerabilities
 
 Bug Fixes:
 - Parsing date column in numeric histograms (#1160)

package.json

@@ -60,8 +60,8 @@
     "step-profiler": "0.3.0",
     "turbo-carto": "0.21.2",
     "underscore": "1.6.0",
-    "windshaft": "^7.0.0",
+    "windshaft": "^7.0.1",
-    "yargs": "11.1.0"
+    "yargs": "^15.3.1"
   },
   "devDependencies": {
     "@carto/mapnik": "^3.6.2-carto.16",
@@ -71,7 +71,7 @@
     "eslint-plugin-node": "^10.0.0",
     "eslint-plugin-promise": "^4.2.1",
     "eslint-plugin-standard": "^4.0.1",
-    "mocha": "5.2.0",
+    "mocha": "^7.2.0",
     "moment": "2.22.1",
     "nock": "9.2.6",
     "nyc": "^14.1.1",