[Snyk] Security upgrade lerna from 8.2.4 to 9.0.4

[Datzu712]

Snyk has created this PR to fix 3 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Directory Traversal SNYK-JS-TAR-15032660	693
	Improper Handling of Unicode Encoding SNYK-JS-TAR-15038581	641
	Directory Traversal SNYK-JS-TAR-15127355	596

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Directory Traversal

[cr-gpt]

The code patch you provided shows a change in the version of the "lerna" dependency from "^8.0.2" to "^9.0.4". Here is a brief code review and suggestions:

1. Dependency Version Change:

   • The change in the version of the "lerna" dependency from "^8.0.2" to "^9.0.4" seems like a routine update to a higher version.
   • It's generally a good practice to keep dependencies up-to-date for security fixes, performance improvements, and new features.

2. Risk:

   • If there are significant changes between versions 8.0.2 and 9.0.4, your application might break due to potential breaking changes in the updated package.
   • Before updating, it's advisable to check the release notes of "lerna" to identify any breaking changes which might impact your project.

3. Improvement Suggestions:

   • Check if the updated version "^9.0.4" of "lerna" is compatible with other dependencies in your project.
   • Consider updating all dependencies to their latest versions to ensure compatibility and reduce security risks.
   • Running tests after updating the dependency can help catch any issues that might arise due to the version change.

In summary, the code change seems like a routine dependency update. Before merging this change, ensure compatibility with other dependencies and assess any potential impacts due to the version update.

[github-actions]

Code review by ChatGPT

[github-actions]

Upgrading 'lerna' from version 8.0.2 to 9.0.4 could introduce breaking changes, as the major version has changed. Ensure that the new version is compatible with your existing code and any other dependencies in your project. It's also important to check the Lerna changelog for any significant changes that may affect your usage.