[Snyk] Fix for 3 vulnerabilities

[sb-cecilialiu]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	No	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-AXIOS-6144788	No	No Known Exploit
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: axios

The new version differs by 11 commits.

• 8790b8e chore(release): v1.6.4 (#6173)
• 0ad520d chore(ci): fix notify action; (#6172)
• 3c0c11c fix(security): fixed formToJSON prototype pollution vulnerability; (#6167)
• 75af1cd fix(security): fixed security vulnerability in follow-redirects (#6163)
• 90864b3 docs: update logos
• 1542719 docs: updated headline sponsors
• b15b918 chore(release): v1.6.3 (#6151)
• b76cce0 chore(ci): added branches filter for notify action; (#6084)
• 5e7ad38 fix: Regular Expression Denial of Service (ReDoS) (#6132)
• 8befb86 docs: update alloy link (#6145)
• d18f40d docs: add headline sponsors

See the full diff

Package name: twin.macro

The new version differs by 241 commits.

• 7a309e1 3.0.0
• ac9401b Lint fixes
• 9211179 Package updates
• 659d78b Make shortcss notice show original className
• 83bfc38 Tweak sassyPseudo check
• 3031a63 Fix parent selector on last variant
• 85a0620 Improve auto parent selector on last variant
• fce60bb Merge pull request Mat 7844 reset execution results after change #749 from ajmnz/theme-default-fix
• 9b08c07 Add support for container queries
• 11ee3a3 allow omitting DEFAULT when using theme
• d55deb9 Add className suggestions for new nested group/peer classes
• aa7f7b0 Update tailwindcss + daisyui deps + add tests
• 2776bca Adjust variant ordering
• f2d5f9f Further improve the auto parent selector
• 404ed35 Add tests for extra dividers
• 090b54e Add extra class divider validation
• b8510db Strip tab escape characters
• 29d55f8 Improve auto variant parent selector
• a40f87d Cover !bg-clip-text
• 946bd52 Add webkit prefix for background-clip: text
• 091b5ff Show suggestion for not-prose when used as class
• 80211db 3.0.0-rc.5
• 83ab7a2 Merge pull request MAT-7737 validate test case bundles based on model type #743 from ben-rogerson/feature/test-upgrades
• a364268 Add jest tests for arbitrary items, config, animation

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution