Security version updates

[flying-sheep]

Supersedes #6344

The d3-color module provides representations for various color spaces in the browser. Versions prior to 3.1.0 are vulnerable to a Regular expression Denial of Service. This issue has been patched in version 3.1.0. There are no known workarounds.

Weaknesses

• CWE-400
• GHSA-36jr-mh4h-2g58

– @mik-patient

Also fixes this security issue in JSON5

• GHSA-9c47-m6qq-7p4h

[archmoj]

Good start.
Could you please investigate why some jasmine tests are failing?
Perhaps adjusting this webpack config could help

plotly.js/test/jasmine/karma.conf.js

Lines 263 to 309 in b03f295

	webpack: {
	target: ['web', 'es5'],
	module: {
	rules: [{
	test: /\.js$/,
	use: [
	'transform-loader?' + path.resolve(__dirname, '..', '..', 'tasks/util/shortcut_paths')
	]
	}, {
	test: /\.js$/,
	include: /node_modules/,
	use: {
	loader: 'babel-loader',
	options: {
	babelrc: false,
	configFile: false,
	plugins: [
	'@babel/plugin-transform-modules-commonjs'
	]
	}
	}
	}, {
	test: /\.(js|glsl)$/,
	use: [
	'ify-loader'
	]
	}]
	},
	resolve: {
	fallback: {
	'stream': require.resolve('stream-browserify')
	}
	},
	plugins: [
	new NodePolyfillPlugin({ includeAliases: ['process'] }),
	new LoaderOptionsPlugin({
	// test: /\.xxx$/, // may apply this only for some modules
	options: {
	library: {
	name: 'Plotly',
	type: 'umd',
	umdNamedDefine: true
	}
	}
	})
	]
	},

[flying-sheep]

Sorry, I have no webpack experience. Feel free to make changes to this PR!

[archmoj]

Addressed in #6463.
Thank you!