[Snyk] Fix for 1 vulnerabilities

[aliscco]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	718/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ecmarkup

The new version differs by 88 commits.

• 016c0bb Version 10.0.1
• 5ce4e28 Version 10.0.0 (Remove interoperability between TypedArrays and DataView instances tc39/ecma262#411)
• a7ebc3c fix build-spec (Remove unnecessary step on %ArrayIteratorPrototype%.next tc39/ecma262#412)
• 92a4e60 drop changelog (Allow non-HTML-encoded entities tc39/ecma262#404)
• e919955 completion-record local typechecking (Editorial: Correct typo tc39/ecma262#408)
• b0cc87e rename some cli flags (Editorial: Minor ReturnIfAbrupt cleanup tc39/ecma262#406)
• 5b19588 various tweaks to the biblio (Normative: account for possible abrupt completion tc39/ecma262#405)
• 33de657 Bump various dependencies (B.1.4 AtomEscape production syntax incomplete tc39/ecma262#378)
• a5f95e9 remove runtime dependency on eslint by depending on the codeframe formatter directly (Behavior of for-in on null or undefined tc39/ecma262#377)
• 8471723 switch from nomnom to command-line-args (editorial: tweak recent commit tc39/ecma262#376)
• 8e577d8 ecmascript spelling (Editorial: Start all fields and slots with an uppercase code point tc39/ecma262#407)
• 6b5838b Version 9.8.1
• ce4a276 Fix header parser (RegExp fixes tc39/ecma262#403)
• 74db0e9 Version 9.8.0
• b971460 Add shortcuts help dialog (Normative: Fix Annex B FiB to only assign function Objects out of blocks and allow redeclarations. tc39/ecma262#400)
• f34a045 Version 9.7.1
• da3f316 Ensure emu-meta tags are fenced by the same mechanisms that xrefs are (Built-in Modules tc39/ecma262#395)
• 7f9c84c fix test broken in last commit, oops
• 2e7e5f2 stop trying to use the ecmarkdown parse tree from the linting phase (Make Realm's field records start with an uppercase code point tc39/ecma262#393)
• 57cf9cb Version 9.7.0
• ff18989 Add [fence-effects=""] to stop effect propagation (PropertyName doesn't inherit Yield in AssignmentProperty tc39/ecma262#388)
• 67b40a0 bump ecmarkdown and support arbitrary attributes for steps (NewPromiseCapability & GetCapabilitiesExecutor Functions tc39/ecma262#392)
• da9b7e9 Rename Xref#canHaveEffect to Xref#shouldPropagateEffect (Typo: "must be true so, let" should be "must be true, so let" tc39/ecma262#389)
• d457b66 Version 9.6.5

See the full diff

Package name: jsdom

The new version differs by 150 commits.

• 2d82763 Version 16.5.0
• 9741311 Fix loading of subresources with Unicode filenames
• 5e46553 Use domenic's ESLint config as the base
• 19b35da Fix the URL of about:blank iframes
• 017568e Support inputType on InputEvent
• 29f4fdf Upgrade dependencies
• e2f7639 Refactor create‑event‑accessor.js to remove code duplication
• ff69a75 Convert JSDOM to use callback functions
• 19df6bc Update links in contributing guidelines
• 1e34ff5 Test triage
• 1d6cb3c XHR: clear response buffer on errors
• 1e86b2e XHR: mark Content-Length as CORS-safelisted
• 6a8f012 XHR: avoid a redundant final progress event
• 021555b Allow mutating disabled <input type=checkbox/radio>
• a62d9fe Remove ondragexit from GlobalEventHandlers
• 745fbaf Call mutation observer callbacks with the MutationObserver as this
• 6c758c9 Implement window.event
• a88d0bf Clean up navigator.plugins and navigator.mimeTypes
• 31eb938 Implement queueMicrotask()
• 2ab99ad Stop replacing / with : in the File constructor
• ffd4aa3 Reduce log spam when starting WPT server
• e0de8be Upgrade to-upstream WPTs to Python 3
• c94ceeb Automatically omit all testdriver tests
• b3f6056 Update WPT

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution