[Snyk] Security upgrade lighthouse from 2.0.0 to 2.2.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • scripts/bench/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-ASYNC-2441827	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: lighthouse

The new version differs by 157 commits.

• e5f3a7b bump extension to 2.2.1
• 187c6d5 v2.2.1
• fe99052 fix(extension): Restore status logging to extension (Give context aware message if markup reuse fails facebook/react#2629)
• 5501779 v2.2.0
• 664b2d9 bump extension to 2.2.0
• fc39851 launcher to 0.3.0
• edbb40d fix(driver): move performance observer registration to setupDriver (Feature request: ability to configure a custom html escaping function. facebook/react#2611)
• b50bbfd docs (launcher): mention LIGHTHOUSE_CHROMIUM_PATH in readme
• 1bf0e07 update helpText for custom-splash.js ("Unable to find element" error on <option> elements facebook/react#2620)
• 2efc5d6 fix(event-listeners): Add missing DOM.enable (CSSTransitionGroup throws when a child returns null from render facebook/react#2619)
• 4f069b8 docs (hacking-tips): more details on docker travis
• 6d862b0 Remove /deep/ usage (ReactCSSTransitionGroup. How to specify component's properties? facebook/react#2371)
• 57bcf43 feat(config): add extends lighthouse:full (Support for default params with JSXTransformer's harmony flag. facebook/react#2557)
• 7b2e404 docs: headless doc was missing flag (Add top-level API docs section for React.createElement. facebook/react#2615)
• 2d7aca8 Merge pull request Add additional field for ART reconciler facebook/react#2593 from GoogleChrome/streamingjson
• 5363ba3 add streaming json parser
• 7d5e06e add streaming trace writer in saveAssets
• fadaef9 remove report v1 and dependencies (reactComponentExpect expects itself facebook/react#2596)
• 56eaa50 fix(driver): wait for CPU idle via clientside perfObserver (Add React at SoundCloud talk facebook/react#2473)
• 673c3ba CRC audit: child chain renders using its own transfersize. Fixes Replaced document.createElement with ReactTestUtil facebook/react#2597 (Update commonjs example for 0.12 facebook/react#2610)
• 5c8d4ec fix(report): use locale string for all our number output (Permit th headers attribute facebook/react#2553)
• f870d5e [cli] Move bin.ts core into -cli/run.ts (Warn if context values differ, related to issue #2 facebook/react#2602)
• 5d75194 Improve tests around chrome launcher and flags. (Replace mountDepth with isTopLevel facebook/react#2571)
• bb58523 plots: disable flaky smoke test ([RFC] Add enum utility function facebook/react#2606)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution