[Snyk] Fix for 5 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	591/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JS-BRAINTREESANITIZEURL-2339882	Yes	Proof of Concept
	394/1000 Why? Has a fix available, CVSS 3.6	Code Injection SNYK-JS-MDXMERMAID-3009151	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Information Exposure SNYK-JS-MERMAID-2936793	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	Yes	Proof of Concept
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @docusaurus/core

The new version differs by 250 commits.

• 2a9e8f5 v2.0.0
• 2ef40c2 chore: Netlify branch deploys should only deploy default locale "en" (#7788)
• d88f248 chore: add Netlify config for major version branch deploys (docusaurus-v2 branch) (#7787)
• e4fc47b Merge branch 'main' into docusaurus-v2
• 7f40350 chore: fix codesandbox playgrounds, use Node.js 16 version (#7784)
• 1065e55 refactor(core): log Docusaurus & Node version before exiting (#7781)
• 965a01e chore: port-2.0.0-rc.1 (#7782)
• e78a15e chore: ci tests should run on version branches "docusaurus-vX" (#7783)
• c751bc6 chore: regen v2.0.0-rc.1 examples (#7780)
• d255389 chore: prepare v2.0.0-rc.1 release (#7778)
• 443914a docs: add Bruce Wiki website to showcase (#7770)
• f913af0 docs: release process, versioning, breaking changes, public API surface (#7706)
• 9788944 refactor(theme): fix duplicate page metadata usage (#7777)
• c48f338 fix(core): swizzle --eject js should not copy theme .d.ts files (#7776)
• c3d2e0d fix(sitemap): complete gracefully when all pages have noIndex meta (#7774)
• 665c311 chore: bump Infima to 0.2.0-alpha.42, fix a:hover link bug (#7771)
• 1899a2e docs: add EverShop website to showcase (#7765)
• 542228e fix(deploy): revert "feat(deploy): copy local git config to tmp repo (#7702)" (#7750)
• a4b4a7f fix(migrate): import siteConfig with file extension (#7766)
• 337463a chore(theme-translations): complete ko translations (#7762)
• 9467da6 chore(deps): bump actions/setup-node from 3.3.0 to 3.4.0 (#7764)
• cba8be0 fix(theme-classic): validate options properly (#7755)
• 636d470 refactor(core): use has instead of get to test for existence in ExecEnv (#7763)
• f21dadf docs: add StackQL Provider Registry to showcase (#7760)

See the full diff

Package name: @docusaurus/preset-classic

The new version differs by 250 commits.

• 2a9e8f5 v2.0.0
• 2ef40c2 chore: Netlify branch deploys should only deploy default locale "en" (#7788)
• d88f248 chore: add Netlify config for major version branch deploys (docusaurus-v2 branch) (#7787)
• e4fc47b Merge branch 'main' into docusaurus-v2
• 7f40350 chore: fix codesandbox playgrounds, use Node.js 16 version (#7784)
• 1065e55 refactor(core): log Docusaurus & Node version before exiting (#7781)
• 965a01e chore: port-2.0.0-rc.1 (#7782)
• e78a15e chore: ci tests should run on version branches "docusaurus-vX" (#7783)
• c751bc6 chore: regen v2.0.0-rc.1 examples (#7780)
• d255389 chore: prepare v2.0.0-rc.1 release (#7778)
• 443914a docs: add Bruce Wiki website to showcase (#7770)
• f913af0 docs: release process, versioning, breaking changes, public API surface (#7706)
• 9788944 refactor(theme): fix duplicate page metadata usage (#7777)
• c48f338 fix(core): swizzle --eject js should not copy theme .d.ts files (#7776)
• c3d2e0d fix(sitemap): complete gracefully when all pages have noIndex meta (#7774)
• 665c311 chore: bump Infima to 0.2.0-alpha.42, fix a:hover link bug (#7771)
• 1899a2e docs: add EverShop website to showcase (#7765)
• 542228e fix(deploy): revert "feat(deploy): copy local git config to tmp repo (#7702)" (#7750)
• a4b4a7f fix(migrate): import siteConfig with file extension (#7766)
• 337463a chore(theme-translations): complete ko translations (#7762)
• 9467da6 chore(deps): bump actions/setup-node from 3.3.0 to 3.4.0 (#7764)
• cba8be0 fix(theme-classic): validate options properly (#7755)
• 636d470 refactor(core): use has instead of get to test for existence in ExecEnv (#7763)
• f21dadf docs: add StackQL Provider Registry to showcase (#7760)

See the full diff

Package name: @svgr/webpack

The new version differs by 74 commits.

• af9a6cb v6.0.0
• e9469c3 Merge pull request #629 from gregberge/rewriting-docs
• eb3282b docs: rewriting
• 6f832f0 Merge pull request #627 from gregberge/support-css-variables
• cbdb47f fix: support CSS variables
• 985444d chore: fix package-lock.json
• a5effba v6.0.0-alpha.4
• 3f071d6 Merge pull request #626 from gregberge/upgrade-deps
• daf6a08 chore(deps): upgrade
• 1c5f163 Merge pull request #625 from gregberge/icon-size
• 483560d chore: fix package-lock.json
• 3c0b779 feat: allow to specify icon size
• 6ba16a3 Merge pull request #624 from gregberge/various-things
• f61c8ba chore: fix ref following refactoring
• 261e1b5 v6.0.0-alpha.3
• fe5c117 Merge pull request #623 from gregberge/webpack
• 9a4cbce docs(examples): update examples
• 1a8cc98 fix(webpack): fix webpack 5 behaviour with url-loader
• a857bb1 feat: support mask-type property (#621)
• 5966714 fix(template): make it possible to use type in template (#619)
• 9ea5da4 refactor(core): use exportName transform (#616)
• 8a1b0aa docs(readme): Fixing CRA link (#618)
• 00a1d4b chore: fix package-lock.json
• f729efa v6.0.0-alpha.2

See the full diff

Package name: mdx-mermaid

The new version differs by 24 commits.

• efc6116 chore(release): prepare for release v1.3.0
• 2ef7e6a fix(build): jest config
• f2b9938 Merge pull request from GHSA-rvgm-35jw-q628
• 138147d build(esm): bundle to cjs and esm
• c263a0c chore(release): v1.2.3
• 4f62a74 build(deps): bump async from 2.6.3 to 2.6.4 in /react-example-app ([Snyk] Security upgrade @docusaurus/preset-classic from 2.0.0-beta.18 to 2.0.1 #53)
• 682cfea build(deps): bump ejs from 3.1.6 to 3.1.8 in /react-example-app ([Snyk] Security upgrade @docusaurus/preset-classic from 2.0.0-beta.18 to 2.0.1 #52)
• 9babc82 build(deps): bump cross-fetch from 3.1.4 to 3.1.5 in /doc ([Snyk] Fix for 2 vulnerabilities #48)
• a5b0991 build(deps): bump async from 2.6.3 to 2.6.4 in /doc ([Snyk] Fix for 2 vulnerabilities #50)
• ca60eef fix: add default export
• 4b22995 Fix type error TS2666: Exports and export assignments are not permitted in module augmentations. ([Snyk] Security upgrade @docusaurus/preset-classic from 2.0.0-beta.18 to 2.0.1 #49)
• a5c15e8 build(deps): bump ansi-regex from 3.0.0 to 3.0.1 ([Snyk] Security upgrade mermaid from 8.14.0 to 10.3.1 #45)
• 080dd56 build(deps): bump node-forge from 1.2.1 to 1.3.0 in /doc ([Snyk] Fix for 1 vulnerabilities #40)
• d61f6c5 build(deps): bump minimist from 1.2.5 to 1.2.6 ([Snyk] Fix for 1 vulnerabilities #42)
• 105bc48 build(deps): bump node-forge from 1.2.1 to 1.3.0 in /react-example-app ([Snyk] Security upgrade @docusaurus/preset-classic from 2.0.0-beta.18 to 2.0.1 #41)
• 80de8d0 build(deps): bump minimist from 1.2.5 to 1.2.6 in /doc ([Snyk] Fix for 1 vulnerabilities #43)
• 2a0ef9d build(deps): bump minimist from 1.2.5 to 1.2.6 in /react-example-app ([Snyk] Fix for 1 vulnerabilities #44)
• a2cc447 docs(readme): link to doc site
• 25ea07d docs: add homepage banner in support of Ukraine
• 59a8daf build(deps): bump ansi-regex from 5.0.0 to 5.0.1 in /react-example-app ([Snyk] Fix for 1 vulnerabilities #37)
• b421f0c build(deps): bump glob-parent from 5.1.1 to 5.1.2 in /react-example-app ([Snyk] Fix for 1 vulnerabilities #38)
• 2c68b86 build(deps): bump browserslist in /react-example-app ([Snyk] Fix for 1 vulnerabilities #39)
• 6f0c6da doc(react): update react example
• 9385a86 doc(css): update to match docusaurus css

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Code Injection
🦉 More lessons are available in Snyk Learn