[Snyk] Fix for 3 vulnerabilities

[m-ajay]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • superset-frontend/plugins/legacy-plugin-chart-map-box/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	539/1000 Why? Has a fix available, CVSS 6.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ESM-72880	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: mapbox-gl

The new version differs by 250 commits.

• 9df0494 v1.10.0 ([database] Fix, test connection error message for module not found apache/superset#9634)
• 4632600 Reverse tap-drag-zoom direction ([BUG] Explore table viz returns no result when filter is NULL or NOT NULL apache/superset#9618) (fail after run npm run dev apache/superset#9633)
• ffd5b5d Documentation improvements sprint (Chart email schedules not delivering apache/superset#9607) (Point superset metadata Tables to Custom postgresql schema  apache/superset#9629)
• a60e952 Add changelog for 1.10.0 ([Build] Collect frontend code coverage from Cypress tests apache/superset#9542)
• 65b914d update changlogs to add 1.9.1 and style-spec@v13.13.1 ([copy] fix: Row Level Security get_rls_filters func SELECT statement apache/superset#9541)
• 5be4ca3 fix mapTouchEvent.point for touchend events (docs: point our README the maintained Docker image apache/superset#9536)
• 516f44f export isExpressionFilter from spec ([charts] adds new filters ui apache/superset#9530) (Discussion Forum for apache superset? apache/superset#9534)
• 388424a [master] Fix style-spec isolation for within expression (Another attempt to fix a viz.py bug apache/superset#9522)
• f4c148f fix [dashboard] New, add statsd incr to the API apache/superset#9519 click map event on touch devices (SQL_MAX_ROW limit is not working as expected apache/superset#9526)
• 3f08a28 Fix for issue 9518 ([api] refactor, remove unnecessary code, using command pattern now apache/superset#9520)
• acb48ab remove handler event listeners when map is removed (Feat/package apache/superset#9508) ([Build] Add Github workflows apache/superset#9517)
• 97037a4 fix DragRotateHandler#isActive (Update docker readme for /docker/pythonpath_dev/ apache/superset#9511) ([Build] Add Github workflows apache/superset#9515)
• 164b0be refactor and expand gesture handling (fix: Row Level Security get_rls_filters func SELECT statement apache/superset#9365)
• 6088941 Remove docs pages from .gitignore file (Chart embedding without using iframe apache/superset#9504)
• c10c618 Add methods to mapboxgl namespace to allow preloading of workers. (Removing WordCloud controls from CONTRIBUTING.md apache/superset#9391)
• e7deb5c Fix several listener leaks in popups (Scheduled email worker is reporting an error apache/superset#9498)
• d912efb Allow client to retry RTLTextPlugin load after NetworkError (Dashboards View on welcome page shows loading gears if there is no dashboards available in the list apache/superset#9489)
• 274d215 Add `slice` and `index-of` expressions (npm run prod error at 0.36.0rc3 apache/superset#9450)
• 469b9ff Ensure each tile symbol tile uses its own unique Program based on its state (Upgrade table chart plugin to 0.12.13 apache/superset#9493)
• cfc57d7 fix documented type of the locale option to Map (feat: change default time range in sql lab explore apache/superset#9486)
• 0a7ecc5 Update per mdn webgl recommendations (Enable beautiful json for dashboard metadata editor apache/superset#9474)
• 928f3dd optimize tail calls in feature state sorting (Deckgl ViewPort on Polygon Layer didnt Update when Filter Set apache/superset#9463)
• 2faf0ab Fix pattern attributes vertex layout (Enable beautiful json for dashboard metadata editor apache/superset#9482)
• 8131815 Ensure padding is not propagated from fitBounds to transform padding (Migrate to CircleCI? apache/superset#9481)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)