Upgrade karma in NPM dependencies

[Chris Sharp]

Creating a branch to upgrade karma to version 6.3.17 to fix known security problems.

[Chris Sharp (chrissharp123)]

Branch implementing this change at security/user/csharp/lp1965432_upgrade_karma_npm

I've tested this for both AngularJS and Angular builds and saw no problems.

[Jane Sandberg (sandbergja)]

Thank you, Chris! Signoff and small follow-up commit here: security/user/sandbergja/lp1965432_upgrade_karma_npm_signoff

Since the karma vulnerabilities are already known and public, I would advocate making this bug public and release it through the typical release process. If we go that route, I'd be happy to merge this.

[Jason Boyer (jboyer)]

+1 to making this public, especially since it's a build-time only issue.

[Chris Sharp (chrissharp123)]

Updated to public security - thanks, Jane.

[Jane Sandberg (sandbergja)]

Thank you, Chris. I pushed to master and will work on the backport in a bit.

[Jane Sandberg (sandbergja)]

Backported to rel_3_8.