Update dependency grunt to v1.5.3 [SECURITY]

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
grunt (source)	1.3.0 -> 1.5.3

GitHub Vulnerability Alerts

CVE-2022-0436

Grunt prior to version 1.5.2 is vulnerable to path traversal.

CVE-2022-1537

file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user's .bashrc file or replace /etc/shadow file if the GruntJS user is root.

---

Release Notes

gruntjs/grunt (grunt)

v1.5.3

Compare Source

• Merge pull request #​1745 from gruntjs/fix-copy-op 572d79b
• Patch up race condition in symlink copying. 58016ff
• Merge pull request #​1746 from JamieSlome/patch-1 0749e1d
• Create SECURITY.md 69b7c50

v1.5.2

Compare Source

• Update Changelog 7f15fd5
• Merge pull request #​1743 from gruntjs/cleanup-link b0ec6e1
• Clean up link handling 433f91b

v1.5.1

Compare Source

• Merge pull request #​1742 from gruntjs/update-symlink-test ad22608
• Fix symlink test 0652305

v1.5.0

Compare Source

• Updated changelog b2b2c2b
• Merge pull request #​1740 from gruntjs/update-deps-22-10 3eda6ae
• Update testing matrix 47d32de
• More updates 2e9161c
• Remove console log 04b960e
• Update dependencies, tests... aad3d45
• Merge pull request #​1736 from justlep/main fdc7056
• support .cjs extension e35fe54

v1.4.1

Compare Source

• Update Changelog e7625e5
• Merge pull request #​1731 from gruntjs/update-options 5d67e34
• Fix ci install d13bf88
• Switch to Actions 08896ae
• Update grunt-known-options eee0673
• Add note about a breaking change 1b6e288

v1.4.0

Compare Source

• Merge pull request #​1728 from gruntjs/update-deps-changelog 63b2e89
• Update changelog and util dep 106ed17
• Merge pull request #​1727 from gruntjs/update-deps-apr 49de70b
• Update CLI and nodeunit 47cf8b6
• Merge pull request #​1722 from gruntjs/update-through e86db1c
• Update deps 4952368

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.