[Snyk] Security upgrade zotero-plugin from 0.0.60 to 1.0.42

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	XML External Entity (XXE) Injection SNYK-JS-XMLDOM-1084960	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: zotero-plugin

The new version differs by 178 commits.

• 547966b 1.0.42
• 65e9d6b pnpm
• 1f88b45 1.0.41
• 364c03f pick up versions
• 9c8dc46 ncu
• 2e0b127 1.0.40
• 4ba2509 remove tslint traces
• ea8ec2d ncu
• 67f8bb6 ncu
• 01d17fd 1.0.39
• 9b1bb5e more rules
• d2fe13c 1.0.38
• a4a5f69 make all paths
• b02a5f8 1.0.37
• 425fc26 lockfile knows dep kind
• f9ecbbb 1.0.36
• 95f0cac regular deps
• 94d81e1 1.0.35
• f69805b eslintrc
• 884522d 1.0.34
• eaafe5a .eslintignore
• 21ef505 ncu
• d801142 1.0.33
• dcbd3b0 migrate to eslint

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic