[Snyk] Fix for 2 vulnerabilities

[Thayaruban]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • portals/devportal/package.json
  • portals/devportal/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	No	No Known Exploit
	703/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2	Cross-site Scripting (XSS) SNYK-JS-DOMPURIFY-8184974	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: swagger-client

The new version differs by 250 commits.

• 3b76951 chore(release): cut the 3.29.4 release [skip ci]
• 1e18423 fix(security): fix unsafe cookie serialization (#3680)
• a4769b3 chore(deps): bump cookie from 0.7.1 to 0.7.2 (#3678)
• b6accf8 chore(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 (#3674)
• 41dadbe chore(deps): bump cookie from 0.7.0 to 0.7.1 (#3675)
• 57c7842 chore(deps): bump cookie from 0.6.0 to 0.7.0 (#3668)
• d487a1e chore(deps-dev): bump @ babel/plugin-transform-runtime (#3671)
• 395bd8c chore(deps-dev): bump @ babel/core from 7.25.2 to 7.25.7 (#3666)
• 8a7a738 chore(deps-dev): bump @ babel/cli from 7.25.6 to 7.25.7 (#3669)
• 75239b9 chore(deps-dev): bump @ babel/register from 7.24.6 to 7.25.7 (#3673)
• ef38b48 chore(deps-dev): bump @ babel/preset-env from 7.25.4 to 7.25.7 (#3670)
• 87af067 chore(deps): bump @ babel/runtime-corejs3 from 7.25.6 to 7.25.7 (#3672)
• a7430ec chore(deps-dev): bump @ babel/eslint-parser from 7.25.1 to 7.25.7 (#3667)
• 8f5671e chore(deps): bump cycjimmy/semantic-release-action from 4.1.0 to 4.1.1 (#3665)
• c9e5e44 chore(deps-dev): bump webpack from 5.94.0 to 5.95.0 (#3664)
• 5699d5c chore(deps-dev): bump babel-loader from 9.1.3 to 9.2.1 (#3661)
• aa3c85b chore(release): cut the 3.29.3 release [skip ci]
• d03f5cf Merge pull request #3660 from swagger-api/char0n/3656
• 6a151d9 fix(execute): do not encode server variables by default
• df83852 chore(deps-dev): bump @ commitlint/cli from 19.4.1 to 19.5.0 (#3658)
• d673b57 chore(deps-dev): bump @ commitlint/config-conventional (#3659)
• f539715 chore(deps-dev): bump husky from 9.1.5 to 9.1.6 (#3657)
• b52871e chore(deps-dev): bump eslint-plugin-import from 2.29.1 to 2.30.0 (#3654)
• be5cfbf chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10 (#3653)

See the full diff

Package name: swagger-ui

The new version differs by 250 commits.

• 04bbeaa fix(config): define missing default options and their types (#9949)
• 10e1a5f fix(swagger-client): fix OpenAPI 3.1.0 dereferencing (#9950)
• fddb2e1 chore(deps-dev): bump sinon from 17.0.2 to 18.0.0 (#9942)
• d5e56e5 chore(deps-dev): bump sass from 1.77.1 to 1.77.2 (#9944)
• 9477492 chore(deps): bump dompurify from 3.1.2 to 3.1.3 (#9943)
• 85c0122 chore(release): cut the v5.17.10 release
• b5c84f4 fix(oas31): fix re-rendering of the Webhooks component (#9938)
• 6d2b88e chore(deps-dev): bump sass from 1.77.0 to 1.77.1 (#9939)
• fc1834c chore(deps-dev): bump postcss-preset-env from 9.5.12 to 9.5.13 (#9940)
• 9037acf fix(components): add support for oneOf/anyOf JSON Schema keywords in parameter-row rendering (#9934)
• dcc87aa chore(deps-dev): bump postcss-preset-env from 9.5.11 to 9.5.12 (#9933)
• b667130 chore(deps-dev): bump rimraf from 5.0.5 to 5.0.7 (#9932)
• 721b5d9 chore(release): cut the v5.17.9 release
• 335372d fix(deps): allow to consolidate deps in downstream projects (#9930)
• 48abfde chore(release): cut the v5.17.8 release
• 94f2d82 fix(components): fix rendering for empty examples in responses (#9926)
• a99be53 chore(deps): bump swagger-client from 3.27.7 to 3.27.8 (#9927)
• 9115678 chore(deps-dev): bump cypress from 13.8.1 to 13.9.0 (#9925)
• 6030483 chore(release): cut the v5.17.7 release
• a3aad9b chore(deps-dev): bump sinon from 17.0.1 to 17.0.2 (#9923)
• 450bb99 fix(json-schema-5): allow collapsing for primitive models (#9639)
• 1367a8f fix(components): render parameter extensions in the description column (#9883)
• 0dd9afa fix: render null values included in enum (#9683)
• 11a6ec8 chore(deps-dev): bump sass from 1.76.0 to 1.77.0 (#9920)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)