[Snyk] Upgrade vega-embed from 6.18.2 to 6.22.1

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade vega-embed from 6.18.2 to 6.22.1.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

- The recommended version is **66 versions** ahead of your current version. - The recommended version was released **2 months ago**, on 2023-04-21. The recommended version fixes: Severity | Issue | PriorityScore (*) | Exploit Maturity | :-------------------------:|:-------------------------|-------------------------|:-------------------------

| Prototype Pollution
[SNYK-JS-FASTJSONPATCH-3182961](https://snyk.io/vuln/SNYK-JS-FASTJSONPATCH-3182961) | **472/1000**
**Why?** Proof of Concept exploit, CVSS 7.3 | Proof of Concept (*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: vega-embed

6.22.1 - 2023-04-21
6.22.1 (2023-04-21)

Bug Fixes
- fix issue with broken semver version (ac5b84c)
6.22.0 - 2023-04-20
6.22.0 (2023-04-20)

Features
- remove beemo and old IE compatibility (#1116) (c344c90)
- smaller bundle and remove es5 builds since they are not really es5 builds anyway (#1114) (d4133c6)
- update tooltip and themes dependencies (e1a2ae1)

6.22.0-next.0 - 2023-01-26

🎉 This release contains work from a new contributor! 🎉

Thank you, João Palmeiro (@ joaopalmeiro), for all your work!

🚀 Enhancement

feat: update the scaleFactor property to allow setting different values #1051 (@ joaopalmeiro)

🔩 Dependency Updates

chore(deps-dev): bump @ rollup/plugin-commonjs from 24.0.0 to 24.0.1 #1052 (@ dependabot[bot])
chore(deps-dev): bump rollup from 3.10.0 to 3.10.1 #1053 (@ dependabot[bot])

Authors: 2

@ dependabot[bot]
João Palmeiro (@ joaopalmeiro)

  </li>
  <li>
    <b>6.21.3</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.3">2023-02-16</a></br><h2><a href="https://snyk.io/redirect/github/vega/vega-embed/compare/v6.21.2...v6.21.3">6.21.3</a> (2023-02-16)</h2>
  </li>
  <li>
    <b>6.21.2</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.2">2023-02-13</a></br><h2>6.21.2 (2023-02-13)</h2>

fix: upgrade deps including themes and tooltips, fixes version issues (ba8ba18)

  </li>
  <li>
    <b>6.21.1</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.1">2023-02-13</a></br><h2>6.21.1 (2023-02-13)</h2>

chore: switch to release-it (062b8df)
chore: update release command (4317570)
chore: update release script (d95c801)
chore(deps-dev): bump @ auto-it/conventional-commits from 10.37.6 to 10.38.5 (#1062) (e6ba266), closes #1062
chore(deps-dev): bump @ auto-it/first-time-contributor from 10.37.6 to 10.38.5 (#1060) (64580fb), closes #1060
chore(deps-dev): bump auto from 10.37.6 to 10.38.5 (#1059) (d66c0e0), closes #1059
chore(deps-dev): bump jest-environment-jsdom from 29.3.1 to 29.4.1 (#1057) (f3773f9), closes #1057
chore(deps-dev): bump rollup from 3.10.1 to 3.12.0 (#1054) (0694d2d), closes #1054
chore(deps-dev): bump rollup-plugin-ts from 3.1.1 to 3.2.0 (#1056) (5fa509d), closes #1056
chore(deps-dev): bump sass from 1.57.1 to 1.58.0 (#1058) (c4d7afc), closes #1058
chore(deps-dev): bump typescript from 4.9.4 to 4.9.5 (#1061) (a3df837), closes #1061
chore(deps): bump tslib from 2.4.1 to 2.5.0 (#1055) (e0b050a), closes #1055

6.21.0 (2022-06-13)

Bump version to: 6.21.0 [skip ci] (7e7a0df)
Update CHANGELOG.md [skip ci] (a897233)

6.20.8 (2022-02-14)

"Bump version to: 6.20.8 [skip ci]" (71dccd9)
Update CHANGELOG.md [skip ci] (83cacf6)

6.20.7 (2022-02-10)

"Bump version to: 6.20.7 [skip ci]" (05b5337)
Update CHANGELOG.md [skip ci] (2f9bf76)

6.20.6 (2022-02-09)

"Bump version to: 6.20.6 [skip ci]" (cd5bb74)
Update CHANGELOG.md [skip ci] (9737085)

6.20.5 (2021-11-30)

"Bump version to: 6.20.5 [skip ci]" (1f5d676)
Update CHANGELOG.md [skip ci] (45df6b1)

6.20.4 (2021-11-26)

"Bump version to: 6.20.4 [skip ci]" (c43f95f)
Update CHANGELOG.md [skip ci] (c0bacb9)

6.20.3 (2021-11-26)

"Bump version to: 6.20.3 [skip ci]" (f01f30c)
Update CHANGELOG.md [skip ci] (90e748a)

6.20.2 (2021-11-16)

"Bump version to: 6.20.2 [skip ci]" (607c2de)
Update CHANGELOG.md [skip ci] (9946498)

6.20.1 (2021-11-15)

"Bump version to: 6.20.1 [skip ci]" (c914d08)
Update CHANGELOG.md [skip ci] (a8e1bb5)

6.20.0 (2021-10-27)

"Bump version to: 6.20.0 [skip ci]" (52c4895)
Update CHANGELOG.md [skip ci] (6541e8f)

6.19.1 (2021-09-21)

"Bump version to: 6.19.1 [skip ci]" (b8135e2)
Update CHANGELOG.md [skip ci] (622fc8b)

6.19.0 (2021-09-17)

"Bump version to: 6.19.0 [skip ci]" (b074b2e)
Update CHANGELOG.md [skip ci] (4d6475c)

  </li>
  <li>
    <b>6.21.1-next.0</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.1-next.0">2023-01-21</a></br><a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.1-next.0"> Read more </a>
  </li>
  <li>
    <b>6.21.1--canary.1039.c10684c.0</b> - 2022-12-22
  </li>
  <li>
    <b>6.21.1--canary.1005.6d15888.0</b> - 2022-10-17
  </li>
  <li>
    <b>6.21.1--canary.973.8d9e7d2.0</b> - 2022-08-12
  </li>
  <li>
    <b>6.21.1--canary.973.7c9d66a.0</b> - 2022-08-12
  </li>
  <li>
    <b>6.21.1--canary.973.0ec7980.1</b> - 2022-08-12
  </li>
  <li>
    <b>6.21.1--canary.973.0ec7980.0</b> - 2022-08-12
  </li>
  <li>
    <b>6.21.0</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.0">2022-06-13</a></br><a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.0"> Read more </a>
  </li>
  <li>
    <b>6.21.0-next.0</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.0-next.0">2022-06-10</a></br><a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.21.0-next.0"> Read more </a>
  </li>
  <li>
    <b>6.20.9--canary.929.5e8c236.0</b> - 2022-05-31
  </li>
  <li>
    <b>6.20.9--canary.871.0984bc2.0</b> - 2022-03-04
  </li>
  <li>
    <b>6.20.8</b> - <a href="https://snyk.io/redirect/github/vega/vega-embed/releases/tag/v6.20.8">2022-02-14</a></br><h4><g-emoji class="g-emoji" alias="bug" fallback-src="https://github.githubassets.com/images/icons/emoji/unicode/1f41b.png">🐛</g-emoji> Bug Fix</h4>

fix: don't allow defaultStyle in usermeta #861 (@ domoritz)

🔩 Dependency Updates

chore(deps-dev): bump rollup from 2.67.1 to 2.67.2 #862 (@ dependabot[bot])

Authors: 2

@ dependabot[bot]
Dominik Moritz (@ domoritz)

  </li>
  <li>
    <b>6.20.8-next.0</b> - 2022-02-13
  </li>
  <li>
    <b>6.20.8--canary.861.9e9a7b1.0</b> - 2022-02-12
  </li>
  <li>
    <b>6.20.8--canary.861.862b8cc.0</b> - 2022-02-12
  </li>
  <li>
    <b>6.20.7</b> - 2022-02-10
  </li>
  <li>
    <b>6.20.7-next.0</b> - 2022-02-10
  </li>
  <li>
    <b>6.20.7--canary.858.b5b98aa.0</b> - 2022-02-10
  </li>
  <li>
    <b>6.20.6</b> - 2022-02-09
  </li>
  <li>
    <b>6.20.6-next.0</b> - 2022-02-09
  </li>
  <li>
    <b>6.20.6--canary.841.78ab2d1.0</b> - 2022-01-19
  </li>
  <li>
    <b>6.20.5</b> - 2021-11-30
  </li>
  <li>
    <b>6.20.5-next.0</b> - 2021-11-30
  </li>
  <li>
    <b>6.20.5--canary.807.4b66f40.0</b> - 2021-11-30
  </li>
  <li>
    <b>6.20.4</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.4-next.0</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.4--canary.802.cf4c7fa.0</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.4--canary.802.57a51e7.0</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.3</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.3-next.0</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.3--canary.800.06c796e.0</b> - 2021-11-26
  </li>
  <li>
    <b>6.20.3--canary.798.553909d.0</b> - 2021-11-22
  </li>
  <li>
    <b>6.20.3--canary.795.9a81b8f.0</b> - 2021-11-21
  </li>
  <li>
    <b>6.20.2</b> - 2021-11-16
  </li>
  <li>
    <b>6.20.2-next.0</b> - 2021-11-16
  </li>
  <li>
    <b>6.20.2--canary.793.ab3fcd5.0</b> - 2021-11-16
  </li>
  <li>
    <b>6.20.1</b> - 2021-11-15
  </li>
  <li>
    <b>6.20.1-next.0</b> - 2021-11-15
  </li>
  <li>
    <b>6.20.1--canary.790.70fb595.0</b> - 2021-11-15
  </li>
  <li>
    <b>6.20.1--canary.789.594be07.0</b> - 2021-11-15
  </li>
  <li>
    <b>6.20.1--canary.788.688cbec.0</b> - 2021-11-15
  </li>
  <li>
    <b>6.20.1--canary.785.79639c9.0</b> - 2021-11-04
  </li>
  <li>
    <b>6.20.1--canary.784.ef30049.0</b> - 2021-11-04
  </li>
  <li>
    <b>6.20.1--canary.783.7990225.0</b> - 2021-11-02
  </li>
  <li>
    <b>6.20.1--canary.781.61aa67c.0</b> - 2021-11-01
  </li>
  <li>
    <b>6.20.0</b> - 2021-10-27
  </li>
  <li>
    <b>6.20.0-next.0</b> - 2021-10-27
  </li>
  <li>
    <b>6.20.0--canary.772.9695cf3.0</b> - 2021-10-27
  </li>
  <li>
    <b>6.19.1</b> - 2021-09-21
  </li>
  <li>
    <b>6.19.1-next.0</b> - 2021-09-21
  </li>
  <li>
    <b>6.19.1--canary.751.aedd825.0</b> - 2021-09-21
  </li>
  <li>
    <b>6.19.0</b> - 2021-09-17
  </li>
  <li>
    <b>6.19.0-next.0</b> - 2021-09-17
  </li>
  <li>
    <b>6.18.3--canary.749.f91a79d.0</b> - 2021-09-16
  </li>
  <li>
    <b>6.18.3--canary.749.cfd60c5.0</b> - 2021-09-16
  </li>
  <li>
    <b>6.18.3--canary.749.aed25ce.0</b> - 2021-09-16
  </li>
  <li>
    <b>6.18.3--canary.749.a632c0f.0</b> - 2021-09-16
  </li>
  <li>
    <b>6.18.3--canary.749.7906d39.0</b> - 2021-09-16
  </li>
  <li>
    <b>6.18.3--canary.749.1432733.0</b> - 2021-09-16
  </li>
  <li>
    <b>6.18.3--canary.747.450ca4f.0</b> - 2021-09-17
  </li>
  <li>
    <b>6.18.2</b> - 2021-05-12
  </li>
</ul>
from <a href="https://snyk.io/redirect/github/vega/vega-embed/releases">vega-embed GitHub release notes</a>

Commit messages

Package name: vega-embed

ac5b84c fix: fix issue with broken semver version
21f7747 chore: release v6.22.0
ffefe17 chore: update jest config
e1a2ae1 feat: update tooltip and themes dependencies
c344c90 feat: remove beemo and old IE compatibility (#1116)
565efe6 chore(deps): bump vm2 from 3.9.16 to 3.9.17 (#1115)
d4133c6 feat: smaller bundle and remove es5 builds since they are not really es5 builds anyway (#1114)
d7b0aec chore(deps-dev): bump vega-lite from 5.6.1 to 5.7.0 (#1112)
a2b84ac chore(deps): bump semver from 7.3.8 to 7.4.0 (#1113)
86f481a chore(deps): bump codecov/codecov-action from 3.1.1 to 3.1.2 (#1108)
ca93722 chore(deps-dev): bump @ rollup/plugin-commonjs from 24.0.1 to 24.1.0 (#1109)
3eb6493 chore(deps-dev): bump sass from 1.61.0 to 1.62.0 (#1110)
d6df732 chore(deps-dev): bump rollup from 3.20.2 to 3.20.4 (#1111)
036db41 chore(deps): bump vm2 from 3.9.15 to 3.9.16 (#1107)
cfcc4c1 chore(deps-dev): bump sass from 1.60.0 to 1.61.0 (#1102)
bbfb89b chore(deps-dev): bump release-it from 15.10.0 to 15.10.1 (#1103)
cdd9039 chore(deps-dev): bump @ rollup/plugin-node-resolve from 15.0.1 to 15.0.2 (#1104)
6bcdf60 chore(deps-dev): bump typescript from 5.0.3 to 5.0.4 (#1105)
9d05b70 chore(deps-dev): bump @ rollup/plugin-terser from 0.4.0 to 0.4.1 (#1106)
ba0df88 chore(deps): bump vm2 from 3.9.14 to 3.9.15 (#1101)
03a28e7 chore(deps-dev): bump concurrently from 7.6.0 to 8.0.1 (#1099)
8400d9a chore(deps-dev): bump typescript from 5.0.2 to 5.0.3 (#1100)
4c122c9 chore(deps-dev): bump @ babel/plugin-transform-runtime from 7.21.0 to 7.21.4 (#1097)
557c3a8 chore(deps-dev): bump release-it from 15.9.3 to 15.10.0 (#1098)

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

h2oai / wave