Upgrade blessed-contrib dep to latest 4.9.0 to avoid indirect vulnerabilities

Prerequisites

• I have written a descriptive issue title
• I have searched existing issues to ensure it has not already been reported

Fastify version

2.13.0

Plugin version

No response

Node.js version

14

Operating system

macOS

Operating system version (i.e. 20.04, 11.3, 10)

10.15.7

Description

The current version of the blessed-contrib dependency has some indirect vulnerabilities, so I went ahead with releasing a new version (4.9.0) with those indirect deps on blessed-contrib up to date now.

Note: the vulnerabilities by these indirect dependencies probably have no real impact on the project, but it’s nicer to stay on an updated version of deps and those that don’t introduce any issues.

Steps to Reproduce

Scan the project for vulnerabilities

Expected Behavior

No vulnerabilities reported for dependencies used by fastify-cli

[lirantal]

I maintain blessed-contrib, let me check what’s the issue there.

[seriousme]

Just ran npm audit fix on my fastify-openapi-glue package which depends on fastify-cli. This installed blessed-contrib@4.11.0. Running npm test after that produced no errors with 100% code coverage.

Fastify-cli itself has dependabot active so blessed-contrib@4.11.0 will automatically be picked up, tested and merged on succesfull test. (e.g. see https://github.com/fastify/fastify-cli/pull/459)

@lirantal thanks for the fix !