[Snyk] Security upgrade mosca from 1.4.1 to 2.6.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	671/1000 Why? Recently disclosed, Has a fix available, CVSS 7.7	Remote Memory Exposure SNYK-JS-BL-608877	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mosca

The new version differs by 121 commits.

• 1332f1a Bumped v2.6.0
• 97b1d90 Merge pull request #689 from mcollina/update
• 8a73749 Updated st package
• 5ce88b5 Merge branch 'nanoid' of https://github.com/killbillsbor/mosca into update
• 705b19a updated deps
• e4c22bb shortid replaced with nanoid
• 91ae05c Merge pull request #666 from AcrossTheCloud/docker
• 8c1076e fixes #546
• 7774359 Bumped v2.5.2
• bdd54c0 Merge pull request #662 from mitsos1os/issue-616
• e0db65b Fixed accidental break replace
• 93f8deb fixes #616 and some lintings
• 0f45823 Merge pull request #651 from fullergalway/master
• 896fd2f Added missing payload param for authorizePublish
• 229e407 Bumped v2.5.1
• 45303eb Merge pull request #643 from jyotman/remove-moment
• 4240bed remove moment as a dependency
• 26233af Bumped v2.5.0.
• 19b6d25 Merge pull request #642 from btsimonh/btsimonh-qos-2-mk2
• 32f0714 fix onQos2publish code & update comments
• f06c665 fix QoS2 'disconnect' test
• 79fb720 fix testing typo
• 9a7e3ec change qos2puback option to a string called onQoS2publish, which is initially 'noack', and can optionally be 'disconnect' or 'dropToQoS1'
• fe294f1 Add option 'qos2Puback' - if set to true, will modify published messages to QOS-1, resulting in a puback message.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic