[Snyk] Security upgrade lighthouse from 2.0.0 to 8.1.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • scripts/bench/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: lighthouse

The new version differs by 250 commits.

• 579e3cb v8.1.0 (Shallow renderer: pass component instance to setState updater as this facebook/react#12784)
• 22c4092 misc: run build-report for vercel deployment and lhci (React 16.3.1, setState of parent onMouseEnter in child incredibly sluggish facebook/react#12782)
• dec54e3 i18n: import (Guys I do not particularly like the React facebook/react#12783)
• 8c17786 tests(devtools): fix after renaming standalone-template.html (defaultChecked prop sets only checked attribute facebook/react#12765)
• 2bd13d6 tests: don't double count server network requests on retry (Support sharing context objects between concurrent renderers facebook/react#12779)
• c284253 core(fr): limit scope of audits to applicable modes (Add the missing @flow annotation facebook/react#12764)
• f41ca8d scripts(i18n): support es modules in collect-strings (Warning: Received true for a non-boolean attribute someProp facebook/react#12741)
• 000da66 core(canonical): proper explanation for url misuse (Call getDerivedStateFromProps even for setState of ShallowRenderer facebook/react#12676)
• 08425f0 core(fr): split timespan support for server-response-time (Open the react application with your phone browser， show error facebook/react#12758)
• a1362ef core: reference chromium main instead of master (Best practice for a meaningful componentStack in production? facebook/react#12757)
• 25cc9b6 core: fallback to selector, not tagName for nodeLabel (Rename internal property to fix React DevTools facebook/react#12727)
• 175619a core(trace): include additional perf categories (<textarea autoFocus/> seems to leak DOM nodes facebook/react#12692)
• 4a750a5 misc: fix common "typos" ([size: tiny] Rename methods exposed by ReactScheduler facebook/react#12742)
• 776fc93 i18n: allow strings with duplicate message and descriptions (The findByType method from react-test-renderer doesn't find ref-forwarding components facebook/react#12723)
• a66ae4e new_audit(fr): uses-responsive-images-snapshot (Update from 15.6.2 to 16 Breaks Web Application facebook/react#12714)
• 8bb2f21 misc: get LH_ROOT via new file root.js (React Context Consumer as a HOC facebook/react#12724)
• b877878 misc(build): add build step for report ([RFC] Schedule supports two priorities facebook/react#12707)
• 557c527 core(modern-images): update to include AVIF estimates (Add support for multiple callbacks in ReactScheduler facebook/react#12682)
• d8d1d39 misc(scripts): improve collision check in collect-strings (Ref callback is not called before componentDidMount facebook/react#12697)
• dbdc6a7 misc: npmignore larger unnecessary files (CSS transition not a drop-in substitute for  facebook/react#12627)
• 97caff5 tests: add explicit small-icu detection for i18n (Remove redundant feature flag in the test facebook/react#12696)
• 0af83bf deps: bump axe-core to 4.2.3 (* { all: initial; } in css is breaking the react app facebook/react#12706)
• a5be72c core(fr): enable traces artifact in timespan mode (Allow to specify displayName for createContext() providers and consumers facebook/react#12695)
• dddeb0d report: move renderer code to report/ (forwardRef() components should not re-render on deep setState() facebook/react#12690)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic