[Snyk] Upgrade pm2 from 5.2.0 to 5.2.2

[snyk-bot]

Snyk has created this PR to upgrade pm2 from 5.2.0 to 5.2.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 22 days ago, on 2022-10-13.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Sandbox Bypass SNYK-JS-VM2-3018201	495/1000 Why? CVSS 9.9	No Known Exploit
	Improper Input Validation SNYK-JS-SOCKETIOPARSER-3091012	495/1000 Why? CVSS 9.9	No Known Exploit
	Improper Input Validation SNYK-JS-SOCKETIOPARSER-3091012	495/1000 Why? CVSS 9.9	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	495/1000 Why? CVSS 9.9	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: pm2

• 5.2.2 - 2022-10-13
  
  • fix cluster error avoiding process restart (#5396)
  • ensure increment_var value is a number (#5435)
  • update dependencies
  • add node latest to travis testing
• 5.2.1 - 2022-10-13
• 5.2.0 - 2022-02-17
  
  • replace node-cron by croner (#5183 #5035)
  • upgrade mocha deps
  • fix pm2 report when daemon not running
  • remove semver check for legacy node.js versions
  • update node version in setup.deb.sh by using lts (#5201) + openrc
  • replace legacy util._extend by Object.assign (#5239)
  • add missing start options types (#5242)
  • recursive detection of package.json (#5267)
  • make tarball module uninstall cross-platform (#5269)
  • Fix unnecessary "ENOENT" console.error when serving a spa (#5272)
  • fix: used env variable instead of hardcode datetime format (#5277)
  • copyright update (#5278)
  • fix: remove constants import from VersionCheck (not needed) (#5279)
  • Reduce async import (#5280)

from pm2 GitHub release notes

Commit messages

Package name: pm2

• 5e70845 pm2@5.2.2
• d78f5ec pm2@5.2.1
• 09c5c52 add back 16/14/12 node.js versions
• 1dd1574 change php test dependency
• e13ab5c add dist:focal
• 7c472e2 try out node 18
• 7e2850e pm2@5.2.1
• fa16e17 Merge branch 'development' of github.com:Unitech/pm2 into development
• b3b2ca7 Merge pull request #5396 from TeamGuilded/restartonerror
• 8ef8fd2 Merge pull request #5435 from watsonian/master
• 5e4dcbf update deps
• 25d21ee Ensure increment_var value is a Number
• d72e79b Fix pm2 not restarting crashed processes
• e35684e add node.js 18 to travis testing

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs