[Snyk] Security upgrade cos-js-sdk-v5 from 0.5.7 to 0.5.18

[Hoofoo-WHU]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cos-js-sdk-v5

The new version differs by 39 commits.

• 6c9a10c fix getObject bug
• d18e01a Merge remote-tracking branch 'origin/getObjectFixed'
• 7d0edcf 修改默认展示的日志长度
• f7fd3e7 修复 getObject 问题
• 0aa6085 修改 package.json 文件。
• 5489730 修复 BucketLifecycle 接口的参数问题。
• 03f04d7 README 加上 Start demo
• 98c730b 上传支持 UploadAddMetaMd5
• cdd1f1f 上传支持 AddMetaMd5
• f4eeea4 上传支持 AddMetaMd5
• 811bc40 Merge remote-tracking branch 'origin/master'
• 3c291b4 上传支持 AddMetaMd5
• 0eed45a 修改README文字。
• ff6b2fd Update LICENSE
• c1316f6 Update sts.js
• 746e580 特殊处理微信分片上传图片
• 1a71b0c 特殊处理微信分片上传图片
• 0f010d0 优化 list-update 事件，加 setTimeout 截流
• 00d04fc 修改复制参数、任务增加 _custom 字段
• 7e8a406 fix authorization error
• fe74e2d getObjectUrl add Expires
• a8e6f08 修复 clearQueue Bug
• 1e00556 支持 ServerTime 校正时间
• cc8bc75 add onTaskStart

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 XML External Entity (XXE) Injection