[Snyk] Security upgrade @strapi/strapi from 4.2.3 to 4.5.6

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	636/1000 Why? Recently disclosed, Has a fix available, CVSS 7	Access Restriction Bypass SNYK-JS-STRAPISTRAPI-5457880	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @strapi/strapi

The new version differs by 250 commits.

• d36609f v4.5.6
• 1d3694e Merge pull request #14789 from strapi/dependabot/npm_and_yarn/apollo-server-core-3.11.1
• 6750fbc Merge pull request #15011 from drubetti/fix/factories-types
• 467080c Merge pull request #15405 from strapi/dependabot/npm_and_yarn/storybook/manager-webpack5-6.5.15
• e3222fd chore(deps-dev): bump @ storybook/manager-webpack5 from 6.4.10 to 6.5.15
• e4a1b1c Merge pull request #14987 from strapi/dependabot/npm_and_yarn/graphql-scalars-1.20.1
• bf01fb9 Merge branch 'main' into dependabot/npm_and_yarn/apollo-server-core-3.11.1
• f1312e6 Merge pull request #14208 from strapi/fix/service-typings
• 576ef90 Merge pull request #14767 from iifawzi/single-types-not-publish
• 2e99401 Merge pull request #15399 from strapi/tooling/prevent-ee-license-checks-for-api-tests
• 82947f0 Merge pull request #15397 from strapi/security/fixJWT
• 4291b03 Merge branch 'main' into fix/service-typings
• e3995c5 Merge branch 'main' into fix/factories-types
• 0c00c19 Prevent license ping for api tests
• c0bd11c Merge pull request #15374 from denisukvadim/bagfix/15308
• c770a25 Fix CVE-2022-23539 / CVE-2022-23541 / CVE-2022-23540 / CVE-2022-23529
• 17a547e Merge branch 'main' into bagfix/15308
• 921d309 Merge pull request #15385 from strapi/fix/email-templates-interpolation
• 479bdde Merge pull request #15032 from lkho/pr/admin-content-type-builder-nav-sort
• 56aa69f Use lodash fp instead of lodash
• 6f07d33 Disable lodash template's escape
• e2d6cc6 Merge pull request #15295 from strapi/chore/document-fetch-client
• 7c391c2 Merge branch 'main' of github.com:strapi/strapi into fix/email-templates-interpolation
• 835b47f fix sort CM LeftMenu

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Access Restriction Bypass