[Snyk] Security upgrade @mdn/yari from 0.4.853 to 0.14.62

[abood640]

Snyk has created this PR to fix 1 vulnerabilities in the yarn dependencies of this project.

Snyk changed the following file(s):

• package.json
• yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-FASTXMLPARSER-7573289	631

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/helper-builder-react-jsx@7.24.7	None	0	93.7 kB	nicolo-ribaudo
npm/@babel/helper-string-parser@7.24.8	None	0	31.8 kB	nicolo-ribaudo
npm/@babel/helper-validator-identifier@7.24.7	None	0	49.3 kB	nicolo-ribaudo
npm/@babel/types@7.25.2	None	0	2.42 MB	existentialism, hzoo, jlhwung, ...1 more
npm/@caporal/core@2.0.7	environment, filesystem	0	99.3 kB	mattallty
npm/@colors/colors@1.6.0	environment	0	41.5 kB	dabh
npm/@dabh/diagnostics@2.0.3	environment	0	30.1 kB	dabh
npm/@mdn/browser-compat-data@4.2.1	None	0	10.5 MB	ddbeck
npm/@mdn/yari@0.14.62	None	0	24 MB	mdn-npmjs
npm/@types/http-proxy@1.17.14	None	0	14.4 kB	types
npm/@types/lodash@4.17.7	None	0	867 kB	types
npm/@types/triple-beam@1.3.5	None	0	3.36 kB	types
npm/@use-it/interval@1.0.0	environment	0	14.4 kB	donavon
npm/accepts@1.3.8	None	0	16.8 kB	dougwilson
npm/async@3.2.5	None	0	808 kB	aearly
npm/body-parser@1.20.2	network	0	60.8 kB	dougwilson
npm/browser-specs@3.75.0	None	0	743 kB	tidoust
npm/call-bind@1.0.7	None	0	22.1 kB	ljharb
npm/cheerio-select@2.1.0	None	0	62.6 kB	feedic
npm/cheerio@1.0.0-rc.12	None	0	558 kB	feedic
npm/cli-progress@3.12.0	None	0	62.2 kB	andidittrich
npm/content-disposition@0.5.4	None	0	19.1 kB	dougwilson
npm/content-type@1.0.5	None	0	10.5 kB	dougwilson
npm/cookie@0.5.0	None	0	23.1 kB	dougwilson
npm/css-what@6.1.0	None	0	66 kB	feedic
npm/dayjs@1.11.12	None	0	669 kB	iamkun
npm/define-data-property@1.1.4	None	0	30.9 kB	ljharb
npm/depd@2.0.0	environment, eval	0	27.1 kB	dougwilson
npm/destroy@1.2.0	filesystem	0	9.02 kB	dougwilson
npm/dexie@3.2.7	None	0	2.59 MB	dfahlander
npm/dom-serializer@2.0.0	None	0	28.8 kB	feedic
npm/domelementtype@2.2.0	None	0	6.86 kB	feedic
npm/domhandler@5.0.3	None	0	75.3 kB	feedic
npm/domutils@3.1.0	network	0	162 kB	feedic
npm/dotenv@16.4.5	environment, filesystem	0	79.1 kB	motdotla
npm/ejs@3.1.10	eval, filesystem	0	143 kB	mde
npm/enabled@2.0.0	None	0	5.89 kB	3rdeden
npm/entities@4.5.0	None	0	413 kB	feedic
npm/es-define-property@1.0.0	None	0	11.8 kB	ljharb
npm/es-errors@1.3.0	None	0	12.3 kB	ljharb
npm/express@4.19.2	environment, filesystem, network	0	215 kB	wesleytodd
npm/fast-xml-parser@4.4.1	None	0	172 kB	amitgupta
npm/fdir@5.3.0	filesystem	0	31.9 kB	thecodrr
npm/file-type@16.5.4	eval	0	76.7 kB	sindresorhus
npm/filelist@1.0.4	filesystem	0	18.6 kB	mde
npm/finalhandler@1.2.0	environment	0	18.6 kB	dougwilson
npm/fn.name@1.1.0	None	0	6.21 kB	3rdeden
npm/forwarded@0.2.0	None	0	5.88 kB	dougwilson
npm/fs-extra@10.1.0	None	0	63.3 kB	ryanzim
npm/function-bind@1.1.2	None	0	31.4 kB	ljharb
npm/get-intrinsic@1.2.4	eval	0	41.6 kB	ljharb
npm/gopd@1.0.1	None	0	7.7 kB	ljharb
npm/got@11.8.6	filesystem, network	0	269 kB	sindresorhus
npm/graceful-fs@4.2.11	environment, filesystem	0	32.5 kB	isaacs
npm/has-property-descriptors@1.0.2	None	0	10.9 kB	ljharb
npm/has-proto@1.0.3	None	0	12 kB	ljharb
npm/has-symbols@1.0.3	None	0	20.6 kB	ljharb
npm/hasown@2.0.2	None	0	8.77 kB	ljharb
npm/html-dom-parser@1.2.0	None	0	149 kB	remarkablemark
npm/html-react-parser@1.4.14	None	0	416 kB	remarkablemark
npm/htmlparser2@8.0.2	None	0	265 kB	feedic
npm/http-errors@2.0.0	None	0	18.8 kB	dougwilson
npm/http-proxy-middleware@2.0.6	network	0	64.1 kB	chimurai
npm/image-size@1.1.1	filesystem	0	50 kB	netroy
npm/inquirer@8.2.6	None	0	87.6 kB	sboudrias
npm/jake@10.9.2	environment, filesystem, shell	0	175 kB	mde
npm/klaw-sync@6.0.0	None	0	10.4 kB	manidlou
npm/kuler@2.0.0	None	0	6.09 kB	3rdeden
npm/logform@2.6.1	None	0	114 kB	dabh
npm/lru-cache@7.18.3	None	0	134 kB	isaacs
npm/mdn-data@2.8.0	None	0	641 kB	mdn-bot
npm/minimatch@3.1.2	None	0	34.9 kB	isaacs
npm/negotiator@0.6.3	None	0	27.4 kB	dougwilson
npm/object-inspect@1.13.2	None	0	99.1 kB	ljharb
npm/on-finished@2.4.1	unsafe	0	13.7 kB	dougwilson
npm/one-time@1.0.0	None	0	6.09 kB	3rdeden
npm/parse5-htmlparser2-tree-adapter@7.0.0	None	0	19.1 kB	feedic
npm/prismjs@1.29.0	None	0	2.05 MB	rundevelopment
npm/proxy-addr@2.0.7	None	0	15.4 kB	dougwilson
npm/qs@6.11.0	None	0	229 kB	ljharb
npm/raw-body@2.5.2	network, unsafe	0	25.8 kB	dougwilson
npm/react-modal@3.16.1	environment	0	186 kB	diasbruno
npm/react-property@2.0.0	None	0	40.6 kB	remarkablemark
npm/rxjs@7.8.1	None	0	4.5 MB	blesh
npm/safe-buffer@5.2.1	None	0	32.1 kB	feross
npm/safe-stable-stringify@2.4.3	None	0	30.1 kB	bridgear
npm/send@0.18.0	filesystem, network	0	50.1 kB	dougwilson
npm/serve-static@1.15.0	None	0	25.2 kB	dougwilson
npm/set-function-length@1.2.2	None	0	14.7 kB	ljharb
npm/setprototypeof@1.2.0	None	0	4.03 kB	wesleytodd
npm/side-channel@1.0.6	None	0	23.2 kB	ljharb
npm/statuses@2.0.1	None	0	12.1 kB	dougwilson
npm/strnum@1.0.5	None	0	17.7 kB	amitgupta
npm/style-to-js@1.1.1	None	0	50 kB	remarkablemark
npm/to-fast-properties@2.0.0	None	0	3.5 kB	sindresorhus
npm/toidentifier@1.0.1	None	0	4.68 kB	dougwilson
npm/tslib@2.6.3	None	0	84.9 kB	typescript-bot
npm/winston-transport@4.7.1	None	0	54.6 kB	dabh
npm/winston@3.13.1	filesystem, network	0	269 kB	dabh

🚮 Removed packages: npm/@mdn/browser-compat-data@4.1.1, npm/@mdn/yari@0.4.853, npm/@types/http-proxy@1.17.5, npm/@types/lodash@4.14.149, npm/accepts@1.3.7, npm/async@0.9.2, npm/body-parser@1.19.0, npm/browser-specs@2.18.0, npm/cheerio-select@1.5.0, npm/cheerio@1.0.0-rc.10, npm/cli-progress@3.9.1, npm/colornames@1.1.1, npm/colors@1.4.0, npm/content-disposition@0.5.3, npm/content-type@1.0.4, npm/cookie@0.4.1, npm/css-what@5.0.0, npm/cssesc@3.0.0, npm/dayjs@1.10.7, npm/depd@1.1.2, npm/destroy@1.0.4, npm/diagnostics@1.1.1, npm/dom-serializer@1.3.2, npm/domelementtype@2.0.1, npm/domhandler@4.2.2, npm/domutils@2.8.0, npm/dotenv@10.0.0, npm/ejs@3.1.6, npm/enabled@1.0.2, npm/entities@2.0.3, npm/env-variable@0.0.6, npm/express@4.17.1, npm/fast-safe-stringify@2.0.7, npm/fast-xml-parser@3.21.1, npm/fdir@5.1.0, npm/file-type@16.5.3, npm/filelist@1.0.1, npm/finalhandler@1.1.2, npm/forwarded@0.1.2, npm/graceful-fs@4.2.4, npm/htmlparser2@6.1.0, npm/http-errors@1.7.3, npm/http-proxy-middleware@2.0.1, npm/image-size@1.0.0, npm/inquirer@8.2.0, npm/jake@10.8.2, npm/kuler@1.0.1, npm/logform@2.2.0, npm/mdn-data@2.0.23, npm/negotiator@0.6.2, npm/on-finished@2.3.0, npm/one-time@0.0.4, npm/parse5-htmlparser2-tree-adapter@6.0.1, npm/prismjs@1.25.0, npm/proxy-addr@2.0.6, npm/qs@6.7.0, npm/raw-body@2.4.0, npm/react-modal@3.14.4, npm/rxjs@7.2.0, npm/send@0.17.1, npm/serve-static@1.14.1, npm/setprototypeof@1.1.1, npm/statuses@1.5.0, npm/strnum@1.0.4, npm/toidentifier@1.0.0, npm/tslib@2.3.1, npm/winston-transport@4.4.0, npm/winston@3.2.1

View full report↗︎