[Snyk] Upgrade crypto-js from 4.0.0 to 4.1.1

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade crypto-js from 4.0.0 to 4.1.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2021-07-22.

Release notes

Package name: crypto-js

• 4.1.1 - 2021-07-22
  No content.
• 4.1.0 - 2021-07-22
  No content.
• 4.0.0 - 2020-02-12
  No content.

from crypto-js GitHub release notes

Commit messages

Package name: crypto-js

• 7c26cc7 Merge branch 'release/4.1.1'
• 81ed562 Update release notes.
• 0326a86 Bump version.
• a30519d Fix order of release modules.
• 56ebdb9 Include browser field in release package.json.
• c3f2a42 Merge branch 'release/4.1.0' into develop
• d97e5d9 Merge branch 'release/4.1.0'
• 495890c Update release notes.
• 37275c7 Bump release version.
• aa9a708 Merge pull request #357 from Spencer17x/develop
• 228b0a7 Merge pull request #364 from hkjpotato/develop
• 058b8e7 add browser field to avoid shimming crypto-browserify
• ae0696f feat: add urlsafe
• 971c31f Add support for crypto from globalThis.
• 7f36db9 Merge pull request #305 from fredericrous/patch-1
• b529d90 Merge pull request #283 from LubosD/develop
• 1adcb50 lint 🚀
• 1241fdb Support self.crypto in Web Workers
• 90884e6 Merge pull request #263 from astutejoe/patch-1
• 2a801f6 Update README.md
• 31d827d Merge branch 'release/4.0.0' into develop

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[socket-security]

New dependency changes detected. Learn more about Socket for GitHub ↗︎

---

👍 No new dependency issues detected in pull request

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore foo@1.0.0 bar@* or ignore all packages with @SocketSecurity ignore-all

Pull request alert summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script confusion	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

---

📊 Modified Dependency Overview:

⬆️ Updated Package	Version Diff	Capability Access	+/- Transitive Count	Publisher
crypto-js@4.1.1	4.0.0...4.1.1	None	+0/-0	evanvosberg