[Snyk] Security upgrade atom-package-manager from 1.14.0 to 2.1.5

[leo191]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • apm/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	Yes	No Known Exploit
	539/1000 Why? Has a fix available, CVSS 6.5	Improper Input Validation SNYK-JS-XMLDOM-1534562	Yes	No Known Exploit
	639/1000 Why? Has a fix available, CVSS 8.5	Prototype Pollution SNYK-JS-XMLDOM-3042242	Yes	No Known Exploit
	811/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.8	Improper Input Validation SNYK-JS-XMLDOM-3092935	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: atom-package-manager

The new version differs by 227 commits.

• 6e8366f 2.1.5
• fc1477b Rely on a published fork of node-plist instead of a Git repo
• da016ad 2.1.4
• 003761c Merge pull request #830 from wesinator/patch-1
• aa4f64f Fix language package README name generation
• 7be49cf 2.1.3
• efdb958 Merge pull request #821 from atom/dw-tt-avoid-unnecessary-installs
• 3f471c5 Minor tweaks for review feedback
• bd123d8 Avoid duplicate installs of repo-local bundled packages in package.json
• c8fec5c Merge pull request #820 from atom/dot-github-update
• 3948363 📝 Update .github
• 8a89733 Merge pull request #819 from atom/dot-github-update
• 0ff1c2a 📝 Update .github
• 36e16a2 📝 Update issue and PR templates
• a795bf2 2.1.2
• 4ec23e8 Merge pull request #816 from atom/aw/rebuild-again
• 4a9ebf2 Restore npm rebuild call
• ed8d76a Merge pull request #815 from atom/aw/thats-async
• 802c30b server.listen and server.close are async
• 327a4b4 2.1.1
• 81ec7fb 2.1.0
• acb8796 Merge pull request #812 from atom/aw/mr-clean
• 2f7b148 Alias "clean" as "prune"
• 4b97cc2 Replace implementation of "apm clean" with "npm prune"

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 XML External Entity (XXE) Injection
🦉 Prototype Pollution
🦉 Improper Input Validation