[Snyk] Fix for 1 vulnerabilities

[DmytroSkrypnyk]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: postcss-flexbugs-fixes

The new version differs by 17 commits.

• ff3e5a2 Port to PostCSS 8 API. (#71)
• 5eb09c7 fix calc regex (#69)
• 85f7d29 remove indent rules
• 8a0cc84 Release 4.2.0
• f4886dc upgrade packages + prettier
• 04e66ac fix: don't mess with values that reference custom props ([Snyk] Fix for 2 vulnerabilities #64)
• c51f4e7 Bump mixin-deep from 1.3.1 to 1.3.2 ([Snyk] Fix for 17 vulnerabilities #60)
• fa13fa0 Bump js-yaml from 3.12.0 to 3.13.1 ([Snyk] Fix for 1 vulnerabilities #61)
• 629e11d Bump extend from 3.0.1 to 3.0.2 ([Snyk] Fix for 3 vulnerabilities #62)
• 95327e0 4.1.0
• 45d8db1 Add option to disable bug fixes ([Snyk] Security upgrade html-webpack-plugin from 3.2.0 to 4.0.0 #53)
• b5704e9 Add changelog entry
• 60c8e5f chore(deps): upgrade `postcss` to `7` ([Snyk] Fix for 1 vulnerabilities #51)
• 7974ef7 Update README.md ([Snyk] Fix for 1 vulnerabilities #47)
• d9d3955 Revert "Revert Autoremoval of 0% Basis" ([Snyk] Fix for 1 vulnerabilities #46)
• bae98c0 Push changelog
• fe6215e Revert Autoremoval of 0% Basis ([Snyk] Security upgrade react-map-gl from 4.1.16 to 5.0.0 #43)

See the full diff

Package name: postcss-loader

The new version differs by 112 commits.

• 792e217 chore(release): 4.0.0
• 598f36d docs: improve readme
• cad6f07 fix: avoid mutations of options and config (#470)
• 77449e1 test: union (#469)
• 9b75888 feat: reuse AST from other loaders (#468)
• 5e4a77b fix: resolve `from` and `to` from config and options (#467)
• 225b2e5 refactor: do not validate `postcss` options (#466)
• 3d32c35 fix: `default` export for plugins (#465)
• 38ebe08 refactor: `execute` option (#464)
• d0ea725 refactor: config loading
• 108d871 test: more
• b4d3bcc chore: remove unnecessary dev deps (#460)
• 475278c chore: move `postcss` to `peerDependencies` (#459)
• 98441ff fix: respect the `map` option and source maps (#458)
• ba88040 refactor: do not pass meta from other loaders (#457)
• 25a16a0 refactor: source map code
• 677c2fe refactor: removed `inline` value for the `sourceMap` option (#454)
• d8d84f7 refactor: code (#453)
• 3cd85df refactor: code
• 6eb44ed refactor: code
• 53da71a refactor: sourcemap paths
• d7bc470 feat: array syntax for plugins
• 2cd7614 refactor: code (#451)
• 60e4f12 docs: addDependency (#448)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation