[Snyk] Fix for 1 vulnerabilities

[jmatsushita]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	713/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: html-loader

The new version differs by 55 commits.

• d7cccfa chore(release): 1.0.0
• 3c9a1d8 refactor: `attributes` option (#265)
• 8c73761 feat: `preprocessor` option (#263)
• f2ce5b1 feat: improve errors
• 9923244 chore(deps): update (#260)
• 9835bde feat: supports `link:href` attribute for css (#258)
• 7af2eff refactor: improve schema (#257)
• 98412f9 docs: `filter` sources (#256)
• ff0f44c feat: implement the `filter` option for filtering some of sources (#255)
• 1c24662 refactor: move the `root` option under the `attributes` option (#254)
• 888b8fe docs: add footnote for `-attributes` (#252)
• 3d2907e refactor: remove the `interpolate` option
• bd979e2 refactor: remove the `interpolate` option
• fcba4ec fix: handle only valid srcset tags (#253)
• 9e5ce56 perf: improve source parse (#251)
• c9c8dad refactor: improve source parse (#250)
• 079d623 fix: respect `#hash` in sources
• a17df49 fix: reduce `import`/`require` count
• d0b0150 fix: adding quotes when necessary for unquoted sources (#247)
• e3727ab test: minifier
• 0bbe29c feat: migrate on `htmlparse2`
• b7af031 fix: escape `\u2028` and `\u2029` characters (#244)
• 24b0427 fix: parser tags and attributes according spec (#243)
• 3df909d feat: support `script:src` attributes

See the full diff

Package name: next

The new version differs by 250 commits.

• 07431d3 v12.0.9
• c938e20 v12.0.9-canary.12
• c385d1b REMOVE: duplicate key in docs/testing.md (#33681)
• 9b98c5a chore(docs): update security headers specification (#33673)
• 865a079 v12.0.9-canary.11
• b5d4564 Revert "Relay Support in Rust Compiler" (#33699)
• 5c6c385 Use relative path for example (#33565)
• 65c63c9 v12.0.9-canary.10
• b20eb99 Relay Support in Rust Compiler (#33240)
• 99d4d6c Implement web server as the request handler for edge SSR (#33635)
• f0e31ee feat(next-swc): Update swc (#33675)
• d055fee Updated docs for getServerSideProps and getStaticProps return values (#33577)
• 8d1c585 v12.0.9-canary.9
• 72658c9 fix(errors/no-cache): `netlify-plugin-cache-nextjs` has been deprecated (#33629)
• 7452c0b Add `lazyRoot` optional property to `next/image` component (#33290)
• 9dd0399 feat(next-swc): Update swc (#33628)
• eba64c2 Clarify `headers` config option description (#33484)
• f60a480 v12.0.9-canary.8
• c13d9a0 Update other instances of node-fetch (#33617)
• e8c15e5 Ensure fetch polyfill is loaded in next-server (#33616)
• 9a2d97c [examples] Add new Tailwind CSS Prettier plugin to example (#33614)
• 562439d Update to latest version of turbo (#33613)
• 3329ac6 v12.0.9-canary.7
• c71465d Clarify `next/image` usage with `next export` based on feedback. (#33555)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution