High Severity Dependabot alerts for @commercetools-frontend/mc-scripts

[nick-loyalty]

This issue is relevant to Dependabot alerts, we got two High Severity Alerts from Dependabot as it needs two components update

These two components are both relevant to @commercetools-frontend/mc-scripts when we do npm ls


As we can see in the above, with the latest @commercetools-frontend/mc-scripts, it is still using minimatch@3.0.4 which Dependabot needs minimatch@3.0.5 and json5@0.5.1 which Dependabot needs json5@1.0.2.

Can we upgrade the @commercetools-frontend/mc-scripts to support newer version minimatch and json5 ?

[kark]

Hi @nick-loyalty,

thank you for creating the issue.
We'll look into it.