[Snyk] Security upgrade node-gcm from 0.14.10 to 1.1.0

[ebarahona]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	Yes	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: node-gcm

The new version differs by 52 commits.

• c6b9eab Restore old dependency versions in package-lock.json (#373)
• 42afc1b Replace request with axios (#372) (thanks @ pmb-cl)
• d5cfe6a README: Update instructions on obtaining FCM Server Key (#368)
• e034e7d ci: improve node job names (#363)
• 46f03d7 ci: add CI tests (#361)
• 924a4f8 #360: Improve code sample for unregistered device token detection
• a4df9a3 Fix #358: rectify coding mistake in failedTokens snippets
• 345392c 1.0.5
• f268b8b #353: npm audit: update vulnerable dependencies
• 31e89bd 1.0.4
• 72a883f Merge pull request #349 from marneborn/upgrade-request
• dc80fc5 Merge pull request #337 from yog27ray/internalServer
• 29bb027 upgrade lodash
• 2b82cac use [email protected]
• 4bec224 1.0.3
• cbb1115 1.0.2
• 6d0bcc6 Merge pull request #345 from pertu/allow-uri-override
• fcb8d8c Move options.uri to overridable section
• 6c77b95 Add unit tests for uri override
• 2390554 Fix package.json: remove trailing comma in contributor list
• 456b0de README: Fix formatting of `fcm_options` param doc
• db66259 Merge pull request #342 from SpellChucker/add-fcm-options-message
• e435347 Fix syntax of link
• 859625a Update README with usage

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Prototype Pollution