[Snyk] Security upgrade @umijs/fabric from 2.5.7 to 4.0.1

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @umijs/fabric

The new version differs by 78 commits.

• 44d3b92 4.0.1
• a071c01 up to latest verison
• 8541197 create pnpm.lock
• 3e315aa create pnpm.lock
• 4e8714f 4.0.0
• e944532 feat: replace eslint-plugin-babel with @ babel/eslint-plugin and enable new rules (#145)
• e55d834 fix: 锁定 prettier-plugin-packagejson@2.3.0, 修复 node 14.17 环境 prettier 无法使用的问题 (#149)
• 7d31a05 v3.0.0
• 644eb07 add prettier-plugin-organize-imports
• 6529909 v2.12.2
• 3e6d061 docs: update snapshot
• 4d1b0e2 v2.12.1
• fd8a21f remove prettier-plugin-organize-imports
• 842dfc8 prettier all
• c986166 chore: fix warning React version not specified (#139)
• 064757f chore: prettier all code
• 7357e50 v2.12.0
• 13c46b4 chore: bump eslint-plugin-promise version
• ffca881 v2.11.1
• a8db023 lock: update lock file
• d353f97 v2.11.0
• d827f8d feat：: add prettier-plugin-organize-imports prettier-plugin-packagejso
• 78b2663 Update verifyCommit.ts (#130)
• d739b70 docs: show more info when verify commit fails (#125)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation