[Snyk] Security upgrade @strapi/strapi from 4.0.2 to 4.22.0

[renata-nerenata]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	644/1000 Why? Has a fix available, CVSS 8.6	Origin Validation Error SNYK-JS-KOACORS-6117545	No	No Known Exploit
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Information Exposure SNYK-JS-SANITIZEHTML-6256334	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @strapi/strapi

The new version differs by 250 commits.

• 45fb7bc v4.22.0
• cf82c83 test: restructure test dirs
• a0da7e7 fix: dont close modal on error (#19946)
• 48f5eea docs: upgrade to docusaurus 3.1.1
• a8ca954 Merge pull request #19967 from strapi/fix/v4-low-hanging-fruits
• e1634d3 chore: fix #19349
• a3e2926 test(e2e): close 'saved' notification box after confirming it exists
• c9afae3 fix(releases): Scheduling info capitalization (#19945)
• 734763e Merge branch 'releases/4.21.1' into develop
• 32d9b66 v4.21.1
• 2e80eaf fix(cm): Creating a new locale doesn't pre-fill the non-internationalized fields (#18773)
• ae6b923 fix: sanitize file name when uploading image (#19913)
• 4fa6d95 fix:issue on do not validate locale if not creating for all locales (#19799)
• a4bd82c fix(content-releases): fix flaky FE unit tests (#19927)
• 3c5ba45 chore(docs): update README.md (#19719)
• 9bff6e6 Merge pull request #19168 from ekreative/graphql-get
• dd543b1 Feat(releases): Bulk Release (#19891)
• c7385f2 Merge pull request #19921 from strapi/dep/updateKoaCors
• 3439680 fix: relations lazy loading (#19932)
• 63c0d83 chore(deps): bump sanitize-html (and types) from 2.11.0 to 2.13.0 (#19922)
• 9ffea33 chore(deps): bump @ koa/cors from 3.4.3 to 5.0.0
• 1e46ca9 fix(admin): show purchase pages also with Cloud plans and change message (#19855)
• e037d5f Merge pull request #19865 from strapi/fix/releases-timezones
• 10659c5 Merge pull request #19870 from strapi/fix/dts-fk-constraint

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.