[Snyk] Fix for 1 vulnerabilities

[adamlui]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Improper Input Validation SNYK-JS-POSTCSS-5926692	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: tailwindcss

The new version differs by 250 commits.

• 0bc3eeb 2.2.0
• 729b09a Update CHANGELOG
• 674d79d move cssnano to devDependencies
• f63b453 Add `tailwindcss/nesting` plugin (#4673)
• 243e881 Resolve purge paths relative to the current working directory (#4655)
• 38a71d8 Use `tmp` file as a touch file (#4650)
• af4a77a Remove unused import
• 81816df Support arbitrary values for object-position
• 0d47ffd Fix cloning issues (#4646)
• 03eab31 Update prettier to version 2.3.1
• 7f564d2 Update eslint to version 7.28.0
• 546cff8 Allow quotes in arbitrary value blocks (#4625)
• cb2598c Add support for transform, filter, backdrop-filter, box-shadow and ring to pseudo-elements (#4624)
• d6da12f Update CHANGELOG
• ff64417 Add `blur-none` with intent to deprecate `blur-0` (#4614)
• 34d0551 Remove need for `filter` and `backdrop-filter` toggles (#4611)
• f4799a3 add tests for the `--postcss` option in the new CLI (#4607)
• b86aa5c Remove need for `transform` toggle (#4604)
• 6f1d5f0 prefer local plugins (#4598)
• 976acb4 Update changelog
• 8518fee implement purge safelist (#4580)
• 3569d49 fix cli purge option when using commas (#4578)
• 40645d7 Rename `--files` option in CLI to `--purge`
• 63a67cb improve integration tests (#4572)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Improper Input Validation

[guardrails]

⚠️ We detected 12 security issues in this pull request:

Vulnerable Libraries (12)

Severity	Details
High	pkg:npm/[email protected] (t) upgrade to: > 7.28.0
High	pkg:npm/[email protected] (t) upgrade to: > 27.0.4
Medium	pkg:npm/[email protected] (t) upgrade to: > 27.0.2
Medium	pkg:npm/[email protected] (t) upgrade to: > 0.2.2
High	pkg:npm/[email protected] (t) upgrade to: > 5.0.6
Medium	pkg:npm/@babel/[email protected] (t) upgrade to: > 7.14.5
Medium	pkg:npm/[email protected] (t) upgrade to: > 0.2.2
High	pkg:npm/[email protected] upgrade to: > 2.2.0
High	pkg:npm/@types/[email protected] (t) upgrade to: > 26.0.23
High	pkg:npm/[email protected] (t) upgrade to: > 27.0.4
Medium	pkg:npm/[email protected] (t) upgrade to: > 0.2.2
Medium	pkg:npm/@babel/[email protected] (t) upgrade to: > 7.14.6

More info on how to fix Vulnerable Libraries in JavaScript.

---

👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
0.0% Duplication