[Snyk] Security upgrade contentful from 8.1.7 to 10.4.0

[ryanhefner]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	748/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.1	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: contentful

The new version differs by 250 commits.

• d497590 Merge pull request #1967 from contentful/chore/bump-axios-1.x
• 0c420a5 Merge branch 'master' into chore/bump-axios-1.x
• 5462ba0 build(deps): bump type-fest from 4.0.0 to 4.1.0 (#1976)
• f7386ab build(deps-dev): bump core-js from 3.31.1 to 3.32.0 (#1975)
• 0e6f33f build(deps-dev): bump eslint-config-prettier from 8.8.0 to 8.9.0 (#1974)
• 09af8f4 chore: increase max bundle size
• c48c5a9 all scripts working as expected
• 8caf835 feat: bump axios 1.x [NONE]
• 198333a build(deps-dev): bump tslib from 2.6.0 to 2.6.1 (#1971)
• 570804d build(deps): bump contentful-sdk-core from 7.1.0 to 8.1.0 (#1968)
• 0c33234 build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 (#1966)
• 857d04a build(deps-dev): bump webpack from 5.88.1 to 5.88.2 (#1965)
• 31316a5 build(deps): bump type-fest from 3.13.0 to 4.0.0 (#1962)
• fc966fa Merge pull request #1949 from contentful/fix/validation-message-null-type
• e653e6a fix: allow null type for validation message
• c12397b build(deps-dev): bump nodemon from 2.0.22 to 3.0.1 (#1960)
• bd7e8ff build(deps): bump type-fest from 3.12.0 to 3.13.0 (#1959)
• 53cc6b4 build(deps): bump tough-cookie from 4.0.0 to 4.1.3 (#1958)
• a859a3e build(deps-dev): bump core-js from 3.31.0 to 3.31.1 (#1957)
• 62d476b build(deps-dev): bump semantic-release from 21.0.6 to 21.0.7 (#1954)
• c45fcff fix: downgrade browseslist to support old browsers [PHX-2717] (#1948)
• 03883b4 build(deps-dev): bump ts-loader from 9.4.3 to 9.4.4 (#1952)
• 9c9edd4 build(deps-dev): bump semantic-release from 21.0.5 to 21.0.6 (#1950)
• bd3a5ec build(deps-dev): bump webpack from 5.88.0 to 5.88.1 (#1951)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Request Forgery (CSRF)