[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-D3COLOR-1076592	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: d3

The new version differs by 92 commits.

• 1b8bada 7.0.0
• b98d63a update API
• 23b0212 Adopt type: module. (#3506)
• 0f01226 Fix broken markdown for link
• 5149a2f 6.7.0
• a8ebbc5 update d3-time, d3-scale
• 31d73d1 6.6.2
• 1836b64 update d3-scale
• 76c92ca 6.6.1
• ff34b4c d3-array 2.12.1
• cff66a4 add space
• b62d444 fix a typo in API.md
• 607a60f 6.6.0
• 11aa552 update dependencies
• 37cd9bf 6.5.0
• 73110b9 d3-array 2.11
• 12336e3 6.4.0
• afd34bb update dependencies
• e9fee2c 6.3.1
• ec388d8 Update d3-array.
• a8baadf 6.3.0
• 4d3baf7 Update d3-array.
• 3c63660 6.2.0
• ffb43e6 Update d3-array, d3-scale.

See the full diff

Package name: d3-scale

The new version differs by 28 commits.

• f7cb35b 4.0.0
• 120ad7a adopt InternMap for ordinal scales (chore(deps): update dependency color-string to 1.5.5 [security] - autoclosed hopetambala/puente-react-cra-dashboard#237)
• ac30873 Adopt type=module (PLATFORM-448: Refactor data export hopetambala/puente-react-cra-dashboard#246)
• 2b7db62 3.3.0
• f3cfd2c update dependencies
• 80ff9b2 adopt d3-time’s ticks
• 8afe6bd 3.2.4
• 60e10c4 update dependencies
• 116ac06 Treat null as undefined. (chore(deps): update dependency path-parse to 1.0.7 [security] - autoclosed hopetambala/puente-react-cra-dashboard#241)
• c7efc99 3.2.3
• 5d3e9c3 Update d3-array.
• 1ff6522 yarn
• 957482b Update tickFormat.js
• 42d546e scaleQuantile performance fixup
• 0a427eb time_copy is part of the API but was missing from the README
• 1dd3f5a Merge pull request chore(deps): bump dns-packet from 1.3.1 to 1.3.4 hopetambala/puente-react-cra-dashboard#219 from d3/links-v6
• 8460207 v3.2.2
• 6169111 d3 dependencies
• 0a55cc8 Merge pull request chore(deps): bump handlebars from 4.7.6 to 4.7.7 hopetambala/puente-react-cra-dashboard#210 from domoritz/fix-nice
• 5046251 links to d3@6 versions
• d0a2fe4 fix documentation: the diverging scale's default domain is [0, 0.5, 1]
• da99948 Use var
• 0932d15 Merge pull request chore(deps): update dependency lodash to 4.17.21 [security] - autoclosed hopetambala/puente-react-cra-dashboard#211 from oluckyman/patch-1
• 2751067 Fix a typo

See the full diff

Package name: recharts

The new version differs by 250 commits.

• 3115b4d build 2.1.3
• 6f2551e fix: Customized component has no key (#2637)
• f5b8414 Fix XAxis scale propery type (#2641)
• ae02a4d Update README.md (#2649)
• 9aba237 build 2.1.2
• 300f726 Fix fragment children (#2481)
• 2805e0b fixes undefined field reference when optional variables not supplied (#2630)
• 89f3232 build 2.1.1
• c3381af fix: responsive container (#2622)
• 213d4a9 fix: fix format
• 8da1b74 build 2.1.0
• 2093a6b Wrap ResponsiveContainer with forwardRef (#2612)
• 281ea48 Add chart type to tooltip payload (#2599)
• 857663f Fix for recharts issue #1787 (#2604)
• af948a7 build 2.0.10
• 40a18f8 fix: show scatter chart tooltip cross cursor (#2592)
• 94e5808 Update Bar.tsx (#2582)
• e91fad3 Merge pull request #2516 from ckotyan/patch-1
• d857b4e Merge pull request #2512 from andy128k/patch-1
• e90a4e1 Merge pull request #2477 from bsell93/patch-1
• 8340d63 Merge pull request #2457 from anselmpaul/master
• 35840a0 Passthrough position attribute on createLabeledScales
• a0ab49c Fix barchart for a single data point
• d0b5781 allow automated axis padding for "gap" and "no-gap"

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.