[Snyk] Fix for 3 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • examples/cms-storyblok/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	616/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.9	Server-Side Request Forgery (SSRF) SNYK-JS-AXIOS-1038255	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: storyblok-js-client

The new version differs by 25 commits.

• cc2a834 Merge pull request [Snyk] Security upgrade next from 9.5.5 to 10.0.7 #55 from storyblok/feature/use-module-bundler
• 5ef1687 chore: add prepare script and releases key to configure semantic-release
• fd61a81 Merge branch 'master' into feature/use-module-bundler
• f662676 fix: add missing resolveRelations ts definition
• f134bde docs: add custom tag rendering example
• c3b96d3 Merge pull request [Snyk] Fix for 1 vulnerabilities #57 from storyblok/hotfix/missing-semicolon
• c006b7d test: update test to contemplate more cases of html escape
• f569203 fix: fix missing semicolon in `htmlEscapes` object
• 1fb2aaf chore: move corejs to devDependencies
• e7b90a8 docs: add documentation about new bundles
• 6bf21e9 feat: create a separate bundle to RichTextResolver class
• 0a23803 chore: update bundle process
• 2aa0bd5 docs: add `config.richTextSchema` documentation and update the example
• 9399907 test: add test to custom schema and change resolver to use Storyblok client
• 61ac493 feat: add `config.richTextSchema` option when instantiate the Storyblok client to better support custom schema
• 30f1cc3 clean and ignore the dist folder
• 9e60e33 chore: update rollup.config
• 4381ace chore: update the test process
• d661a38 chore: remove the named exports
• 8fdb379 chore: add .browserslistrc
• 9711704 refactor: move type definition to types folder
• d733324 chore: setup standalone build
• a9b3fc4 chore: implement use of rollup as module bundler
• 228f40a chore: update babel config

See the full diff

Package name: tailwindcss

The new version differs by 250 commits.

• 0bc3eeb 2.2.0
• 729b09a Update CHANGELOG
• 674d79d move cssnano to devDependencies
• f63b453 Add `tailwindcss/nesting` plugin (Problem with redux-observable vercel/next.js#4673)
• 243e881 Resolve purge paths relative to the current working directory (Remove unnecessary environment check in lib/app.js vercel/next.js#4655)
• 38a71d8 Use `tmp` file as a touch file ([with-jest] Move jest deps to devDeps vercel/next.js#4650)
• af4a77a Remove unused import
• 81816df Support arbitrary values for object-position
• 0d47ffd Fix cloning issues (Slow TTFB (Time to First Byte) for a very simple production deployment. vercel/next.js#4646)
• 03eab31 Update prettier to version 2.3.1
• 7f564d2 Update eslint to version 7.28.0
• 546cff8 Allow quotes in arbitrary value blocks (Failing test for #4620 vercel/next.js#4625)
• cb2598c Add support for transform, filter, backdrop-filter, box-shadow and ring to pseudo-elements (Update with-universal-configuration vercel/next.js#4624)
• d6da12f Update CHANGELOG
• ff64417 Add `blur-none` with intent to deprecate `blur-0` (Flow Type Error with Next.js 6 vercel/next.js#4614)
• 34d0551 Remove need for `filter` and `backdrop-filter` toggles (Added note for AWSAppSyncClient vercel/next.js#4611)
• f4799a3 add tests for the `--postcss` option in the new CLI (Catch errors thrown in _app.js vercel/next.js#4607)
• b86aa5c Remove need for `transform` toggle (Process available chunk names properly in dev mode vercel/next.js#4604)
• 6f1d5f0 prefer local plugins (Error: Cannot find module 'dist/build-manifest.json' vercel/next.js#4598)
• 976acb4 Update changelog
• 8518fee implement purge safelist (Typescript custom server example is broken vercel/next.js#4580)
• 3569d49 fix cli purge option when using commas (I cannot setup next.js vercel/next.js#4578)
• 40645d7 Rename `--files` option in CLI to `--purge`
• 63a67cb improve integration tests (Polyfill documentation vercel/next.js#4572)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic