[Snyk] Fix for 1 vulnerabilities

[MaxMood96]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @storybook/react

The new version differs by 250 commits.

• 4f2afa6 v7.0.0
• 03292b0 Update root, peer deps, version.ts/json to 7.0.0 [ci skip]
• b2dc5cf Revert "Update root, peer deps, version.ts/json to 7.0.0 [ci skip]"
• 7f391a3 Update root, peer deps, version.ts/json to 7.0.0 [ci skip]
• f0b53cb 7.0.0 changelog
• 930917d Merge pull request Avoid using inline RichText element for navigation link WordPress/gutenberg#21856 from storybookjs/docs/interactions-addon-migration
• f1c13da 7.0.0-rc.11 next.json version file [skip ci]
• 512a2ae Update git head to 7.0.0-rc.11, update yarn.lock [ci skip]
• 908c324 v7.0.0-rc.11
• 5edc7c0 Update root, peer deps, version.ts/json to 7.0.0-rc.11 [ci skip]
• 324d9bb 7.0.0-rc.11 changelog
• 37d9737 interactions debugger is now default
• 9682f7c Merge pull request Framework: WP_Block: Use reflected type hint for render_callback WordPress/gutenberg#21833 from storybookjs/kasper/fix-strict-args-decorator-with-interface
• a08ffc7 Put @ storybook/csf version back into next
• 2cc1d36 Merge pull request Add current post type being edited in Gutenberg WordPress/gutenberg#21850 from storybookjs/fix/tone-down-dependency-alerts
• 941103b Merge pull request Template Parts: Support REST API meta queries. WordPress/gutenberg#21851 from storybookjs/valentin/export-application-config-decorator
• 31700c0 Export applicationConfig decorator and adjust documentation for usage
• 3d9544f Merge pull request Remove negative margin on help text WordPress/gutenberg#21846 from storybookjs/chore_docs_webpack_tweaks
• 79b590b Tweaks to the Webpack docs
• d193be5 Merge pull request Improve User Experience of Left/Right-Aligning Images WordPress/gutenberg#21836 from storybookjs/fix/downgrade-remark-deps
• 79b1fde Merge pull request Edit unsupported blocks in a RN web view WordPress/gutenberg#21832 from storybookjs/fix/polyfill-global
• 590f053 downgrade remark related dependencies
• b421d95 only provide critical duplicated dependency warning on major version difference
• acace30 Merge pull request New paragraph placeholder changes font-style/size after focus in many themes WordPress/gutenberg#21724 from jungpaeng/docs/fix-controls

See the full diff

Package name: lerna

The new version differs by 221 commits.

• 3900fe9 chore(misc): publish 7.0.0
• ede2a31 chore: merge pull request Make classic the default editor from admin bar WordPress/gutenberg#3716 from lerna/v7
• 405cfe3 chore: docs
• 63180d0 chore: fix tests after merge commit
• 40f5226 Merge branch 'main' into v7
• 7307520 chore: release v7.0.0-alpha.8
• 5095b04 chore: deps updates (Text Columns: Fix error with when changing column count. WordPress/gutenberg#3715)
• aca9efc chore: deps updates (fix text columns undefined index WordPress/gutenberg#3714)
• 16df3e9 chore: deps updates (Editable: separate out content ops and switch to using tinymce tree output WordPress/gutenberg#3713)
• 83f9a05 chore: remove unnecessary deps duplication between root and main pkg (Make it easier to deselect a block WordPress/gutenberg#3712)
• ab5ecd3 chore: add missing deps in legacy-package-management
• 83b45d2 chore: docs updates
• e7e0489 chore: rework publish directory and assets (Change a Post from Publish to Draft WordPress/gutenberg#3711)
• d326fd7 chore: release v7.0.0-alpha.7
• bb0ea3c chore: bump to latest nx
• 53e71e4 fix: share project data when nesting commands (Can't change number of columns in Text Column block WordPress/gutenberg#3709)
• fd57e02 chore: release v7.0.0-alpha.6
• ce4b352 fix: improve github client missing env var error
• e82618b fix: daemon communication
• a6be819 chore: docs updates
• 52c11ed chore: restore command tests
• 647dbb5 fix: support nx 16.3.1+ (Bullet position error with image WordPress/gutenberg#3707)
• 59d7146 chore: fix init test (Interface is getting more & more confusing rather than easier WordPress/gutenberg#3708)
• b0c5cd3 chore: release 7.0.0-alpha.5

See the full diff

Package name: make-dir

The new version differs by 24 commits.

• 54612e8 4.0.0
• c419a8a Update dependencies
• 55af5b8 Rename `master` branch to `main`
• 1dd6443 Fix code coverage
• 397e48e Move to GitHub Actions
• cf02568 Fix tests
• 064e92d Require Node.js 10 ([pull] trunk from WordPress:trunk #32)
• 4616c03 Fix Travis
• 5e95e00 Meta tweaks
• 978bee9 Cleanup from [pull] trunk from WordPress:trunk #28 ([pull] trunk from WordPress:trunk #30)
• 6d029fe 3.1.0
• b5a98ef Stop using deprecated `process.umask()` ([pull] trunk from WordPress:trunk #28)
• 960ecf1 Fix readme typo ([pull] trunk from WordPress:trunk #26)
• 66ba0d9 3.0.2
• 25231fe Throw original error if stat fails; to match sync implementation ([pull] trunk from WordPress:trunk #24)
• cde3270 3.0.1
• dea15ae Fetch fresh `process.umask()` on every method call ([pull] trunk from WordPress:trunk #19)
• 8632e52 Upgrade `nyc`
• 7201491 Fix linting
• 3354122 Fix tests on Windows and Node.js 12 ([pull] trunk from WordPress:trunk #22)
• 9de6474 Test ENOTDIR|EEXIST error when parent is a file ([pull] trunk from WordPress:trunk #15)
• 49b26bd Tidelift tasks
• f03a4db Create funding.yml
• 0efa10f Add Node.js 12 to testing ([pull] trunk from WordPress:trunk #16)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)