[Snyk] Security upgrade rxdb from 9.4.0 to 12.5.0

[cybersecmoo]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	539/1000 Why? Has a fix available, CVSS 6.5	Information Exposure SNYK-JS-NODEFETCH-2342118	Yes	No Known Exploit
	520/1000 Why? Has a fix available, CVSS 5.9	Denial of Service SNYK-JS-NODEFETCH-674311	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: rxdb

The new version differs by 250 commits.

• 4dafca8 12.5.0
• 440562f Feature/update node 18.2.0 (#3850)
• 1f624bd WIP Feature/stream replication (#3835)
• 0f7c29f UPDATE node 18.2.0 (#3825)
• 51d5b50 Update babel monorepo to v7.18.5
• fc03c6d Update GabrielBB/xvfb-action action to v1.6
• 8e3e699 Update vue monorepo to v3.2.37 (#3847)
• 7463fd0 Update dependency vue-router to v4.0.16
• c12807f Update renovate.json
• 2a58017 Update dependency testcafe-hammerhead to v24.5.20
• 5f53bee Update dependency terser-webpack-plugin to v5.3.3
• d2006a1 Update dependency fake-indexeddb to v3.1.8 (#3843)
• 5c216a0 Update dependency dexie to v4.0.0-alpha.4
• c482640 Update dependency apollo-server-express to v3.8.2
• b4550c4 Update dependency @ types/node to v14.18.21
• ec343f2 WIP CHANGE no _meta in revision (#3838)
• 3160e9d UPDATE premium tasks, remove #3832
• b3f0291 Merge pull request #3832 from hujiulong/master
• 9d46897 FIX changelog
• dab2fd9 FIX merge of #3807 was ignored
• fe5b246 Merge pull request #3837 from pubkey/renovate/concurrently-7.x
• 7239b31 FIX RxStorage should never emit an eventBulk with an empty events array
• feba58e Update dependency concurrently to v7.2.1
• 85e7273 FIX(vue) pin dependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.