chore: bumps prismjs dependency from 1.22.0 to 1.25.0

[rusackas]

Bumps the prismjs dependency to 1.25.0 in order to resolve vulnerabilities in the prismjs package including:

• CVE-2021-32723 (high severity)
• CVE-2021-23341 (high severity)
• CVE-2021-3801 (moderate severity)

Resolves part of #429
Fixes #415

[rusackas]

I'm a rookie here, but I'm attempting a different approach to bumping this package, as opposed to the dependabot bump. Doing it via the package.json file and running npm install generated a lot of files... I hope this helps.

[rusackas]

I'm pretty shocked at the size of the PR... not sure if these files should be gitignored or what. I don't see a contributing.md so I could use a little help if I'm just doing this all wrong ¯\_(ツ)_/¯

[michael-s-molina]

+1

[rusackas]

@conorhastings @simmerer any help/tips here would be appreciated.

[jonathansantilli]

Hello! who can merge this PR? I have tried upgrading the prismjs dependency in the same way and got the same results as @rusackas

[conorhastings]

Hey @rusackas thanks for the email to draw my attention here published as 15.4.5