Dependabot Alerts

As I backup my user folder to github, I get a number of dependabot security alerts:

ansi-regex
moderate severity
by GitHub
plugins/form/yarn.lock
set-value
high severity
by GitHub
plugins/form/yarn.lock
path-parse
moderate severity
by GitHub
plugins/form/yarn.lock
tar
high severity
by GitHub
plugins/form/yarn.lock
postcss
moderate severity
by GitHub
plugins/form/yarn.lock
trim-newlines
high severity
by GitHub
plugins/form/yarn.lock
glob-parent
high severity
by GitHub
plugins/form/yarn.lock
browserslist
moderate severity
by GitHub
plugins/form/yarn.lock
hosted-git-info
moderate severity
by GitHub
plugins/form/yarn.lock
ssri
high severity
by GitHub
plugins/form/yarn.lock
y18n
high severity
by GitHub
plugins/form/yarn.lock
ini
high severity
by GitHub
plugins/form/yarn.lock
yargs-parser
moderate severity
by GitHub
plugins/form/yarn.lock
serialize-javascript
high severity
by GitHub
plugins/form/yarn.lock
elliptic
high severity
by GitHub
plugins/form/yarn.lock

lodash
high severity
by GitHub
plugins/form/yarn.lock
node-uuid
high severity
by GitHub
plugins/form/yarn.lock
minimist
moderate severity
by GitHub
plugins/form/yarn.lock
lodash.template
critical severity
by GitHub
plugins/form/yarn.lock
minimatch
high severity
by GitHub
plugins/form/yarn.lock

Start with plugins/form/yarn.lock and compare the listed packages with their current security advisories. Update the affected dependency resolutions while checking for compatibility with the form plugin. Done means the listed Dependabot alerts are resolved without breaking the plugin.

Written by the indexing model from the issue text.