Security upgrade file-type from 3.9.0 to 16.5.4

[appendixshuffle]

Hi
I would like to ask for reopening this PR , which was closed without review.
It is blocking our pipelines because of CVE-2022-36313

[evanrolfe]

+1 we are also having this issue

[mtica]

+1 for this issue

[codenirvana]

I verified using this test that [email protected] is not affected by the reported CVE, because the vulnerable code doesn't exist in this version.

I don't see this getting flagged using npm audit as well, which tool is reporting this version?

[alhalama]

This is being flagged by snyk as a vulnerability.

[scotty6435]

Yeah, if the code is not present in this version then getting the CVE updated would be ideal. Then again, 3.9.0 is a liiitttle bit outdated so it's being flagged in our VMS on that basis alone. 3.9.0 is 7 years old and there's been 78 releases since that one.