Fixing frontend code scanning vulnerability alerts (#18042)

#17903

- Fixing https://osv.dev/vulnerability/GHSA-crh6-fp67-6883 by updating
@xmldom/xmldom@0.8.3 to @xmldom/xmldom@0.8.4
- Fixing https://osv.dev/vulnerability/GHSA-wf5p-g6vw-rhxx by overriding
axios@0.21.1 to axios@0.28.0
- Fixing https://osv.dev/vulnerability/GHSA-p6mc-m468-83gw by removing
lodash.set dependency by updating nock@13.2.4 to nock@13.5.4
- Fixing https://osv.dev/vulnerability/GHSA-4wf5-vphf-c2xc by updating
terser from 5.12.1 to 5.14.2
- Fixing https://osv.dev/vulnerability/GHSA-566m-qj78-rww5 and
https://osv.dev/vulnerability/GHSA-7fh5-64p2-3v2j by:
- Updating to autoprefixer@10.4.19, node-sass-glob-importer@5.3.3, and
postcss-loader@4.3.0
- Overriding css-selector-extract@3.3.6 to css-selector-extract@4.0.1
- Overriding css-node-extract@2.1.3 to css-node-extract@3.0.4 and
overriding its postcss dependency to ^8.4.31
This commit is contained in:
Victor Lyuboslavsky 2024-04-05 16:45:22 -05:00 committed by GitHub
parent c19ebfee46
commit ffc2d9f68a
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 244 additions and 953 deletions

View file

@ -117,7 +117,7 @@
"@types/uuid": "8.3.4",
"@typescript-eslint/eslint-plugin": "5.58.0",
"@typescript-eslint/parser": "5.58.0",
"autoprefixer": "9.8.8",
"autoprefixer": "10.4.19",
"babel-core": "7.0.0-bridge.0",
"babel-eslint": "9.0.0",
"babel-jest": "29.2.0",
@ -150,10 +150,9 @@
"json-loader": "0.5.7",
"mini-css-extract-plugin": "2.7.5",
"msw": "0.47.4",
"nock": "13.2.4",
"node-bourbon": "4.2.8",
"node-sass-glob-importer": "5.3.2",
"postcss-loader": "3.0.0",
"node-sass-glob-importer": "5.3.3",
"postcss-loader": "4.3.0",
"prettier": "2.2.1",
"react-docgen-typescript-plugin": "1.0.5",
"regenerator-runtime": "0.13.9",
@ -169,6 +168,12 @@
"webpack-cli": "5.0.1",
"webpack-notifier": "1.12.0"
},
"resolutions": {
"**/css-node-extract": "~3.0.4",
"**/css-node-extract/postcss": "^8.4.31",
"**/css-selector-extract": "~4.0.1",
"**/wait-on/axios": "^0.28.0"
},
"browserslist": [
"defaults"
],

1184
yarn.lock

File diff suppressed because it is too large Load diff