[Snyk] Security upgrade is-svg from 2.1.0 to 4.2.2

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-ISSVG-1085627	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: is-svg

The new version differs by 21 commits.

• 1f34e79 4.2.2
• 01f8a08 Fix ReDoS vulnerability
• 3c99615 Move to GitHub Actions
• aa51039 4.2.1
• 908a5a9 Meta tweaks
• f8e39a8 Fix false-positive when the `<!Entity>` tag contains markup (#24)
• 9810417 Tidelift tasks
• 36e5502 4.2.0
• 23d6d27 Allow self-closing SVG tag (#18)
• e7a602f Create funding.yml
• 903af1c 4.1.0
• 96ab233 Refactor TypeScript definition to CommonJS compatible export (#21)
• f6f5578 4.0.0
• 0859162 Meta tweaks
• 7f4af70 Require Node.js 6, add TypeScript definition (#20)
• f90caa1 3.0.0
• 9e570ec Allow `<! >` inside document tag to be contained in `[]` (#13)
• dca7e56 Allow falsy inputs (#14)
• a76fbcf Add test for #12
• 282ca7f Require Node.js 4
• 9a76bd8 Add test for non-english characters

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic