[Snyk] Fix for 5 vulnerabilities

[Thayaruban]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • portals/publisher/package.json
  • portals/publisher/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	786/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 9.3	Incomplete List of Disallowed Inputs SNYK-JS-BABELTRAVERSE-5962462	No	Proof of Concept
	601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	No	No Known Exploit
	703/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.2	Cross-site Scripting (XSS) SNYK-JS-DOMPURIFY-8184974	Yes	Proof of Concept
	641/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	No	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: swagger-client

The new version differs by 250 commits.

• 3b76951 chore(release): cut the 3.29.4 release [skip ci]
• 1e18423 fix(security): fix unsafe cookie serialization (#3680)
• a4769b3 chore(deps): bump cookie from 0.7.1 to 0.7.2 (#3678)
• b6accf8 chore(deps-dev): bump eslint-plugin-import from 2.30.0 to 2.31.0 (#3674)
• 41dadbe chore(deps): bump cookie from 0.7.0 to 0.7.1 (#3675)
• 57c7842 chore(deps): bump cookie from 0.6.0 to 0.7.0 (#3668)
• d487a1e chore(deps-dev): bump @ babel/plugin-transform-runtime (#3671)
• 395bd8c chore(deps-dev): bump @ babel/core from 7.25.2 to 7.25.7 (#3666)
• 8a7a738 chore(deps-dev): bump @ babel/cli from 7.25.6 to 7.25.7 (#3669)
• 75239b9 chore(deps-dev): bump @ babel/register from 7.24.6 to 7.25.7 (#3673)
• ef38b48 chore(deps-dev): bump @ babel/preset-env from 7.25.4 to 7.25.7 (#3670)
• 87af067 chore(deps): bump @ babel/runtime-corejs3 from 7.25.6 to 7.25.7 (#3672)
• a7430ec chore(deps-dev): bump @ babel/eslint-parser from 7.25.1 to 7.25.7 (#3667)
• 8f5671e chore(deps): bump cycjimmy/semantic-release-action from 4.1.0 to 4.1.1 (#3665)
• c9e5e44 chore(deps-dev): bump webpack from 5.94.0 to 5.95.0 (#3664)
• 5699d5c chore(deps-dev): bump babel-loader from 9.1.3 to 9.2.1 (#3661)
• aa3c85b chore(release): cut the 3.29.3 release [skip ci]
• d03f5cf Merge pull request #3660 from swagger-api/char0n/3656
• 6a151d9 fix(execute): do not encode server variables by default
• df83852 chore(deps-dev): bump @ commitlint/cli from 19.4.1 to 19.5.0 (#3658)
• d673b57 chore(deps-dev): bump @ commitlint/config-conventional (#3659)
• f539715 chore(deps-dev): bump husky from 9.1.5 to 9.1.6 (#3657)
• b52871e chore(deps-dev): bump eslint-plugin-import from 2.29.1 to 2.30.0 (#3654)
• be5cfbf chore(deps-dev): bump lint-staged from 15.2.9 to 15.2.10 (#3653)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)
🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)