[Snyk] Fix for 1 vulnerabilities

[naiba4]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/scripts/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: npm-package-json-lint

The new version differs by 47 commits.

• 40eebfe Update index.js
• d30cca2 Add logger for prod build (Blocks: Propose a server side rendering implementation WordPress/gutenberg#586)
• 171c26b Bump deps and roll back ajv (Add asset cache version helper function. WordPress/gutenberg#585)
• a4592a0 Update release.yml
• 6d6f8e4 Update prerelease.yml
• ccd1514 Add TypeScript support. Drop support for Node 10 and 12. (Fix formatting button hover style regression WordPress/gutenberg#584)
• 9a0ef3f Update release.yml
• 8ee8b98 Bump actions/checkout from 2 to 3 (Double enter should break out captions and lists (and similar) and onto a newline WordPress/gutenberg#579)
• 2c46b5e Bump url-parse from 1.5.7 to 1.5.10 in /website (Apply block order by Flexbox order property WordPress/gutenberg#563)
• 65e3b8a Update name-format to cover all cases (Merging text block with heading using backspace WordPress/gutenberg#537)
• e2f2f0d Bump prismjs from 1.25.0 to 1.27.0 in /website (Content blocks need to be labeled WordPress/gutenberg#562)
• 223eca0 Bump actions/setup-node from 2.5.1 to 3.0.0 (When blocks are emptied in content, TinyMCE passes in an empty <br /> to the Redux State. WordPress/gutenberg#561)
• 46275f0 Bump url-parse from 1.5.3 to 1.5.7 in /website ("Headless TinyMCE" WordPress/gutenberg#560)
• 7c3d959 Bump ajv from 6.11.0 to 6.12.6 in /website (TinyMCE Core: mobile support WordPress/gutenberg#559)
• e314bc5 Bump jest from 27.5.0 to 27.5.1 (Remove image block align none control WordPress/gutenberg#558)
• ef9220f Bump jest from 27.4.7 to 27.5.0 (Improve the block mover buttons accessibility WordPress/gutenberg#557)
• 8b1c4ec Bump tar from 4.4.13 to 4.4.19 in /website (Blocks: Reselect the current block if we click again on it WordPress/gutenberg#556)
• 936a058 Bump ajv from 8.9.0 to 8.10.0 (Block Toolbar: z-index issue WordPress/gutenberg#555)
• c211f09 Bump eslint-plugin-unicorn from 40.0.0 to 40.1.0 (List: block alignment controls should work WordPress/gutenberg#548)
• 5016397 Bump ajv from 8.8.2 to 8.9.0 (Quote alternative style WordPress/gutenberg#547)
• 635c855 Bump eslint-plugin-jest from 25.3.4 to 25.7.0 (List: implement levels of indent buttons WordPress/gutenberg#549)
• 167cb05 Bump shelljs from 0.8.3 to 0.8.5 in /website (Support two align variations: "full-width" and "wide". WordPress/gutenberg#546)
• 9aafee1 Update LICENSE
• dab0e95 Update README.md

See the full diff

Package name: read-pkg-up

The new version differs by 3 commits.

• c4f8985 8.0.0
• e6fbe7f Require Node.js 12 and move to ESM
• 021b1ec Move to GitHub Actions ([Snyk] Security upgrade react-native from 0.69.4 to 0.71.0 #16)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
gutenberg	❌ Failed (Inspect)			Jun 25, 2023 7:46pm
gutenberg-wd9x	❌ Failed (Inspect)			Jun 25, 2023 7:46pm

[socket-security]

New and updated dependency changes detected. Learn more about Socket for GitHub ↗︎

Packages		Version	New capabilities	Transitives1	Size	Publisher
read-pkg-up	🆕	8.0.0	None	+2	154 kB	sindresorhus

🚮 Removed packages: npm-package-json-lint@5.4.2

Footnotes

1. https://docs.socket.dev ↩