[Snyk] Fix for 1 vulnerabilities

[xtiko14]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Uncaught Exception SNYK-JS-YAML-5458867	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-minimizer-webpack-plugin

The new version differs by 122 commits.

• 31d3d6e chore(release): v6.0.0
• cfcae0c feat!: update `cssnano` to v6 (fix typo insin/nwb#224)
• 6e9cdd8 chore(deps-dev): bump webpack from 5.75.0 to 5.76.0 (Support configuration of style rules, not just rule and loader options insin/nwb#223)
• f8a21a5 chore: update dependencies to the latest version (Properly drop support for Node.js v0.12 now it's EOL insin/nwb#222)
• 3637341 ci: use LTS node version in lint job (Use fast-async for async/await insin/nwb#220)
• c3ea76d chore: update dependencies to the latest version (Add inferno-devtools to the inferno template insin/nwb#219)
• a5d9997 ci: use concurrency in github workflows (Fir broken link markup in README insin/nwb#218)
• 5289f28 chore: update ignorePaths in .cspell.json (Retina ready shields and icons insin/nwb#217)
• d0520d3 chore: update typescript (Use Classes in the React Template insin/nwb#216)
• e32b5b3 chore(deps): bump json5 from 1.0.1 to 1.0.2 (Drop jsnext:main from templates insin/nwb#215)
• 0c284d2 chore: update dependency review action (Install missing dependencies (with --preact or --inferno flag) + Yarn support insin/nwb#214)
• d0b6309 chore: update dependencies to the latest version (Use Yarn for installing dependencies insin/nwb#213)
• f684e8e chore: update dependencies to the latest version (Install missing dependencies (with --preact or --inferno flag) insin/nwb#212)
• f191f06 chore: update styfle/cancel-workflow-action (Use update-notifier insin/nwb#211)
• 7bb7ab5 chore: add cSpell to check spelling issues (Create App with interactive Menu insin/nwb#209)
• 26dc402 chore: update dependencies to the latest version (Create App with an Interactive Menu insin/nwb#208)
• caf7ceb docs: update cla link (Fix preact-app Test insin/nwb#206)
• db03425 ci: add node v19 (Migrating to v0.13 causes issue insin/nwb#205)
• 530cd00 refactor: fix types (Use yarn for installing dependencies insin/nwb#204)
• 1c607f5 ci: add dependency review action (Progressive Web App support insin/nwb#203)
• a03ab02 chore(release): 4.2.2
• b1ce195 fix: handle `swc` errors (Fix cases where processes are spawned by generating a huge string instead of passing arguments as an array insin/nwb#202)
• cdcd290 chore(release): 4.2.1
• c50b2b2 fix: crash (Add Express middleware for Inferno and Preact development builds insin/nwb#200)

See the full diff

Package name: postcss-loader

The new version differs by 88 commits.

• b5c55fb chore(release): 7.1.0
• 8114be4 feat(deps): update `cosmiconfig` (#628)
• 054ee90 docs: fix default value of config (#626) (#627)
• f6e1cde chore(deps-dev): bump webpack from 5.75.0 to 5.76.0 (#625)
• d7070b2 chore: update dependencies to the latest version (#624)
• 5128bee ci: use LTS node version in lint job (#622)
• e1e5195 chore: update dependencies to the latest version (#621)
• e6b2282 ci: use concurrency in github workflows (#620)
• fa8ebf6 chore: update ignorePaths in .cspell.json (#619)
• 5999338 chore(deps): bump json5 from 1.0.1 to 1.0.2 (#618)
• bef937b chore: update dependency review action (#617)
• 2e7f227 chore: update dependencies to the latest version (#616)
• c3f6c57 chore: update dependencies to the latest version (#615)
• 2129116 chore(release): 7.0.2
• 955085f fix: support ESM version of `postcss.config.js` and `postcss.config.mjs` (#614)
• b0f4749 chore: update styfle/cancel-workflow-action (#612)
• ab3ff44 chore: add cSpell to check spelling issues (#610)
• 3177135 chore: update dependencies to the latest version (#609)
• 08b19c7 docs: update cla link (#608)
• 49a0943 ci: add node v19 (#607)
• d274f90 ci: add dependency review action (#606)
• 64af37b chore: update dependencies to the latest version (#605)
• 548e8aa chore: update commitlint action (#604)
• 42a085f chore: run cancel workflow on pull request (#603)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.