[Snyk] Fix for 2 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • superset-frontend/package.json
  • superset-frontend/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-ASYNCVALIDATOR-2311201	No	No Known Exploit
	593/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 4	Information Exposure SNYK-JS-NANOID-2332193	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: antd

The new version differs by 250 commits.

• 870b72a docs: 4.17.0 changelog (#32859)
• 3a5b6b8 chore(deps-dev): bump stylelint-config-standard from 23.0.0 to 24.0.0 (#32866)
• 7e2dc80 chore(.gitignore):add ignore for pnpm (#32860)
• 491cc4f fix: borderLeftRadius error for Input.Search #32808 (#32812)
• 958df3d docs: add demo for Input.Group (#32837)
• ce006bd docs: Version Robin (#32830)
• 3f495bb chore: Upgrade react router v6 (#32821)
• 43569b9 docs: update customize-theme-variable.zh-CN.md
• 7ed7c60 style: fix Tree icon align bug (#32822)
• 01887b4 fix: if breadcrumbRender return false, breadcrumb will hidden (#32738)
• 5f642cb fix: tag animation demo (#32804)
• 852a451 chore(Tag): update tween-one (#32800)
• 90aff3a docs: fix Spin API ts description (#32786)
• 8a3b5d9 fix: Form horizontal broken style when select item is too long (#32778)
• a73f4a3 docs: Fix the link in Table's API doc (#32779)
• ecc54dd fix: codepen demo error using hooks (#32766)
• cf15379 docs: add 4.17.0-alpha.10 changelog (#32775)
• f7380b7 chore(deps-dev): bump eslint-plugin-unicorn from 37.0.1 to 38.0.0 (#32765)
• b1ea2e4 fix: opening animation of the bottom drawer (#32761)
• 10a8578 fix: Spin tip can be react node (#32733)
• fa65cd3 chore(deps-dev): bump @ types/gtag.js from 0.0.7 to 0.0.8 (#32746)
• f88bd4d refactor: Move part mixins less to theme instead (#32763)
• 5360722 chore: update form demo
• ea52572 chore(💄): fix issue template

See the full diff

Package name: react-checkbox-tree

The new version differs by 101 commits.

• b6f0e6b Release v1.7.0
• 2e58976 Merge branch 'master' into v1.7-dev
• a15a464 Merge branch 'master' of github.com:jakezatecky/react-checkbox-tree
• 35a69b9 Remove accidentally added dependency
• 40c0b5f Merge branch 'master' into v1.7-dev
• 67beaad Update linting dependencies
• 4062c75 Merge branch 'master' into v1.7-dev
• e71562a Update linting dependencies
• 44a2383 Merge branch 'master' into v1.7-dev
• 9c26b67 Bump @ types/react from 16.14.8 to 17.0.9 ([Snyk] Security upgrade werkzeug from 1.0.1 to 3.0.1 #284)
• 7e2d3ff Upgrade to GitHub-native Dependabot ([Snyk] Fix for 1 vulnerabilities #268)
• 9a2e20d Bump gulp-autoprefixer from 7.0.1 to 8.0.0 ([Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.1 #283)
• d5fdbbb Use React 17 internally
• b41421c Bump mocha from 8.4.0 to 9.0.0 ([Snyk] Security upgrade werkzeug from 2.2.3 to 3.0.1 #285)
• 79f8b3f Allow React 17 as a peer dependency
• b6669de Bump gulp-mocha from 7.0.2 to 8.0.0 ([Snyk] Fix for 1 vulnerabilities #254)
• 1f36ab2 Bump react-test-renderer from 16.14.0 to 17.0.2 ([Snyk] Fix for 1 vulnerabilities #264)
• 622ddef Optimize large list performance ([Snyk] Fix for 1 vulnerabilities #250)
• 16691af Fix Unicode output from Sass file
• 041f91d Add missing `onExpand` argument in TypeScript definitions
• f75d5cd Fix stupid deep equal check
• 9c6d5de Update CHANGELOG
• 5ba907a Add `expandNodesToLevel` utility
• 0a18249 Drop gulp-sass

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic