[Snyk] Fix for 1 vulnerabilities

[adamlaska]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: stylelint

The new version differs by 250 commits.

• 060310c 14.0.0
• ff4a1ef Prepare CHANGELOG
• 8d2f6e1 Bump postcss (fix: fixed theme flash on page load nodejs/nodejs.org#5619)
• f552608 Merge pull request fix: main download button for linux incorrect nodejs/nodejs.org#5618 from stylelint/dependabot/npm_and_yarn/husky-7.0.4
• 7ed17ad Bump husky from 7.0.2 to 7.0.4
• 4d9f75e Merge pull request chore: add static builds to ci to ensure static builds are still working nodejs/nodejs.org#5617 from stylelint/dependabot/npm_and_yarn/jest-27.3.1
• bc9dd0b Bump jest from 27.2.5 to 27.3.1
• 82e2507 Merge pull request fix: use correct matcher in middleware.ts nodejs/nodejs.org#5604 from stylelint/v14
• 16d259f Update CHANGELOG.md
• 70b1149 Fix false positives for dynamic-range keywords in media-feature-name-no-unknown (chore: node_env as global env nodejs/nodejs.org#5613)
• 8dca498 Show more info in missing customSyntax warning (blog: postpone sec release notice nodejs/nodejs.org#5611)
• 2eee0a9 Remove v14 CI triggers (Big green download button on nodejs.org from Linux/x64 gives source archive nodejs/nodejs.org#5610)
• 12f8081 14.0.0-0
• 5dd7ec1 Prepare 14.0.0
• 67313a3 Add support for `extends` in `overrides` config (Dist Is 404ing nodejs/nodejs.org#5603)
• b6fd2fc Document no need for postcss-html maintainer (What's new from the Website team - News nodejs/nodejs.org#5602)
• bf28025 Recommend using shared configs (meta: bump the storybook group with 6 updates nodejs/nodejs.org#5598)
• 07118d6 Update CHANGELOG.md
• 367142a Change `ignoreFiles` to be extendable (meta: bump the testing group with 5 updates nodejs/nodejs.org#5596)
• 1b4162f Fix conflicts in dependabot
• 87c5fde Bump picocolors from 0.2.1 to 1.0.0 (Link to security policy from blog post is 404ing nodejs/nodejs.org#5601)
• 1f32094 Bump typescript from 4.4.3 to 4.4.4 (fix: sitemap url for production deployments nodejs/nodejs.org#5599)
• 88b9575 Revise contributors section of README (blog: fix sec release date nodejs/nodejs.org#5585)
• e38da70 Use problem rather than violation in docs and types (chore: configuration for merge queues nodejs/nodejs.org#5592)

See the full diff

Package name: stylelint-config-twbs-bootstrap

The new version differs by 131 commits.

• 72bcc93 3.0.0
• bdc6948 3.0.0-beta1
• 95fb9df Update dependencies
• 8628f16 Switch to stylelint-config-recess-order (Change date format on blog nodejs/nodejs.org#134)
• 70ef812 3.0.0-alpha2
• d017370 package.json: remove eslint script
• 01814ef README.md: switch to shields.io for the CI badge too
• b5b20a7 Remove a couple of unneeded disabled rules
• 96dcac0 3.0.0-alpha1
• 1d4f2b3 Update eslint to v8.x. (Removed gulp stuff #131 nodejs/nodejs.org#133)
• db7a6cd Update ESLint config (remove mailing list from discussion section in get-involved nodejs/nodejs.org#132)
• 0c724d5 Upgrade to Stylelint 14 (Remove gulp stuff nodejs/nodejs.org#131)
• cafe843 Switch to Node.js 16/npm 8
• ad67be6 Regenerate package-lock.json
• 5560d4c 2.2.4
• 5600bf0 Bump ansi-regex from 5.0.0 to 5.0.1 (Adding Interactive press release, fixing category typo. nodejs/nodejs.org#127)
• 9ee9bb9 Bump stylelint-scss from 3.20.1 to 3.21.0 (Footer: Add "Report website issue" link nodejs/nodejs.org#126)
• 3ac1706 Bump eslint from 7.31.0 to 7.32.0 (dist-files redirected to blog (was: CDN misconfigured breaking npm < 2.13.2 and < 3.1.3) nodejs/nodejs.org#124)
• e796ce3 Add verbose formatter
• 5b57939 Remove .eslintignore
• fe1077d Test our v4-dev branch too
• 2f4899d 2.2.3
• eebc801 Revert the scss/index.js change from 6ca0b2e
• 7e48bce Bump stylelint-scss from 3.19.0 to 3.20.1 (interactive.nodejs.org nodejs/nodejs.org#122)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.

[socket-security]

Updated dependencies detected. Learn more about Socket for GitHub ↗︎

Packages	Version	New capabilities	Transitives	Size	Publisher
stylelint-config-twbs-bootstrap	0.9.0...3.2.1	None	+23/-191	2.02 MB	xhmikosr
postcss	7.0.39...8.4.31	environment	+2/-1	366 kB	ai
autoprefixer	9.8.8...10.4.16	None	+3/-3	565 kB	ai
stylelint	11.1.1...14.16.1	None	+11/-164	1.49 MB	ybiquitous