[Snyk] Security upgrade gulp-purgecss from 4.0.3 to 6.0.0

[adamlui]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	631/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.2	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: gulp-purgecss

The new version differs by 250 commits.

• b8bb2a8 docs: add sponsor bairesdev to homepage
• 5e8ce91 Update CHANGELOG.md
• dbada97 v6.0.0
• 2e944d2 chore: format using prettier
• 3eb1d36 build(dev-deps): update lerna from 6.6.1 to 8.1.2
• 6e7401a build(deps-dev): bump @ types/node from 20.11.16 to 20.11.30 (#1235)
• 7c29ca2 build(deps-dev): bump the npm_and_yarn group with 1 update (#1236)
• f8f2a68 build(deps-dev): bump follow-redirects from 1.15.5 to 1.15.6 (#1231)
• a1cc67a docs: fix typo (#1232)
• d12a77e build(deps-dev): bump prettier from 3.0.3 to 3.2.5 (#1226)
• d357cad build(deps): bump acorn from 8.11.2 to 8.11.3 (#1227)
• bd843a1 build(deps-dev): bump @ typescript-eslint/eslint-plugin (#1223)
• 9fbb592 fix: collect of used variables for changed selector (#1217)
• eef05cd build(deps-dev): bump @ vuepress/plugin-search (#1222)
• 118afec build(deps-dev): bump @ microsoft/api-documenter from 7.22.33 to 7.23.34 (#1220)
• 919586c build(deps): bump commander from 11.1.0 to 12.0.0 (#1221)
• b8d3131 docs: Update Hugo docs (#1216)
• f086de5 build(deps-dev): bump ip from 2.0.0 to 2.0.1 (#1219)
• f79ef3d Fix [class*=foo] with HTML extractor (#1133)
• c56275f build(deps): bump glob from 8.0.3 to 10.3.10 (#1166)
• 41f21c9 build(deps-dev): bump vite from 4.4.11 to 4.4.12 (#1198)
• 56e06fd build(deps-dev): bump @ types/node from 18.15.11 to 20.11.16 (#1214)
• 9cd06d0 build(deps-dev): bump @ types/vinyl from 2.0.7 to 2.0.11 (#1194)
• 1f9ac23 build(deps-dev): bump lint-staged from 14.0.1 to 15.2.1 (#1209)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud