[Snyk] Security upgrade tfx-cli from 0.7.8 to 0.16.0

[sanderaernouts]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Prototype Pollution SNYK-JS-XML2JS-5414874	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: tfx-cli

The new version differs by 65 commits.

• f2e79d9 Update package.json (#446)
• db306d0 Bump xml2js from 0.4.19 to 0.5.0 (#434)
• 9c9e409 Microsoft mandatory file (#438)
• af4afa8 Fix azure-pipeline.yml (#437)
• e247d17 Implement pipeline to publish TFX CLI automatically (#435)
• 59d2330 Implement caching value of skipCertValidation (#436)
• c0a2987 Update workflow (#433)
• 9ee9270 Bump package to 0.14.0 (#429)
• e8d8608 Resolve vulnerabilities (#428)
• 2048b21 Added deprecated runner validation (#426)
• f40ae9c Added new parameter skipCertValidation (#421)
• 5d20401 Add codeowners (#413)
• 75f28d7 Upgrade task.json to the new version (#412)
• 81b19ea Bump the cli version to 0.12.0 (#411)
• afdb90b Fixed vulnerabilities via npm audit fix (#410)
• 30ffb29 Resolve vulnerabilities (#401)
• d49fb32 Update dependencies (#398)
• e9efa2b Bumped package version (#390)
• 0cf8832 Enable use of --override and --overrides-file when --manifest-js is specified (#375)
• d49e19c Added action - to add tickets to the team's planning board (#387)
• 2dbd6ff delete wrong video-links (#386)
• 3e95e11 Bump version to 0.9.2.
• 00029a1 Merge pull request #374 from bworline/manifestjs-param-bug
• 7b25b8d Fix cmd line parsing bug for the --manifest-js parameter

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution