[Snyk] Fix for 5 vulnerabilities

[sbarbeau-od]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • docusaurus/website/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	676/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.1	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	Yes	Proof of Concept
	586/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	Yes	Proof of Concept
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-AXIOS-6144788	Yes	No Known Exploit
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @docusaurus/core

The new version differs by 250 commits.

• ca8b463 v3.0.0
• 2121b71 fix bad path
• 0b3be15 version 3.0.0 docs
• 9658a5b 3.0.0 changelog
• 1089741 docs: archive v2 docs versions + create 2.x docs ( The react to add alias facebook/create-react-app#9472)
• 495c793 chore: v3.0.0-rc.1 release (create app issue facebook/create-react-app#9453)
• 4a0bd92 docs: v3 upgrade guide should mention MDX v1 compat options (Separated npm install and yarn add facebook/create-react-app#9452)
• 7e456ec feat(mdx-loader): upgrade to MDX v3 + (Module not found facebook/create-react-app#9451)
• 8d19054 fix(theme): fix useWindowSize React hydration issue (4.0.0-next.77 sample app yields "Module not found: Your application tried to access react-refresh" when started with Yarn 2 facebook/create-react-app#9446)
• d07567e chore: revert Lighthouse numberOfRuns due to bad/verbose reporting (localhost:3000 refused to connect facebook/create-react-app#9448)
• dd03a25 chore: Make Lighthouse CI run on local build (Security Vulnerabilities in the underlying packages to be updated facebook/create-react-app#9447)
• c6762a2 feat(mdx-loader): Remark plugin to report unused MDX / Markdown directives (create-react-app is finding an error in a JSON so not creating project facebook/create-react-app#9394)
• 56cc8e8 chore(ci): fix missing screenshots on Argos (i have used all the way but not working my expo strat commant please help me  facebook/create-react-app#9445)
• f80e1bd refactor(blog-plugin): blog archive reverse ordering of posts (I am getting this error each time I run npx create-react-app my-app facebook/create-react-app#9438)
• 911dfb4 chore(deps): bump actions/setup-node from 3 to 4 (issue create-react-app here in Australia facebook/create-react-app#9440)
• e525794 chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (npm package [@testing-library/package] are not found  facebook/create-react-app#9441)
• aa958f0 fix(plugin-blog): blog archive should hide unlisted blog posts (Sri Lanka is good now too. Are there anybody who is still experiencing the 404? facebook/create-react-app#9437)
• 2bb4fd0 chore(ci): use new Argos playwright integration (Mi-app facebook/create-react-app#9419)
• f674e02 docs: update Kinsta deployment documentation (Adding a script tag as firstChild of document head via App.jsx - will it always run first? facebook/create-react-app#9430)
• 7ee2f75 chore: v3.0.0-rc.0 release (Dependencies pulled down don't match repo facebook/create-react-app#9418)
• 4e150d2 docs: add Docusaurus v3.0 upgrade guide (Error facebook/create-react-app#9417)
• 45f1a66 feat(core): support TypeScript + ESM configuration (Upgrade dependencies facebook/create-react-app#9317)
• 336a44f chore: remove docusaurus-migrate (Any project generated with CRA is missing modules and/or required files from a variety of dependencies facebook/create-react-app#9400)
• ae31916 docs: fix typos in website/docs/i18n/i18n-git.mdx (CLI not responding after the create-react-app command facebook/create-react-app#9396)

See the full diff

Package name: @docusaurus/preset-classic

The new version differs by 250 commits.

• ca8b463 v3.0.0
• 2121b71 fix bad path
• 0b3be15 version 3.0.0 docs
• 9658a5b 3.0.0 changelog
• 1089741 docs: archive v2 docs versions + create 2.x docs ( The react to add alias facebook/create-react-app#9472)
• 495c793 chore: v3.0.0-rc.1 release (create app issue facebook/create-react-app#9453)
• 4a0bd92 docs: v3 upgrade guide should mention MDX v1 compat options (Separated npm install and yarn add facebook/create-react-app#9452)
• 7e456ec feat(mdx-loader): upgrade to MDX v3 + (Module not found facebook/create-react-app#9451)
• 8d19054 fix(theme): fix useWindowSize React hydration issue (4.0.0-next.77 sample app yields "Module not found: Your application tried to access react-refresh" when started with Yarn 2 facebook/create-react-app#9446)
• d07567e chore: revert Lighthouse numberOfRuns due to bad/verbose reporting (localhost:3000 refused to connect facebook/create-react-app#9448)
• dd03a25 chore: Make Lighthouse CI run on local build (Security Vulnerabilities in the underlying packages to be updated facebook/create-react-app#9447)
• c6762a2 feat(mdx-loader): Remark plugin to report unused MDX / Markdown directives (create-react-app is finding an error in a JSON so not creating project facebook/create-react-app#9394)
• 56cc8e8 chore(ci): fix missing screenshots on Argos (i have used all the way but not working my expo strat commant please help me  facebook/create-react-app#9445)
• f80e1bd refactor(blog-plugin): blog archive reverse ordering of posts (I am getting this error each time I run npx create-react-app my-app facebook/create-react-app#9438)
• 911dfb4 chore(deps): bump actions/setup-node from 3 to 4 (issue create-react-app here in Australia facebook/create-react-app#9440)
• e525794 chore(deps): bump actions/checkout from 4.1.0 to 4.1.1 (npm package [@testing-library/package] are not found  facebook/create-react-app#9441)
• aa958f0 fix(plugin-blog): blog archive should hide unlisted blog posts (Sri Lanka is good now too. Are there anybody who is still experiencing the 404? facebook/create-react-app#9437)
• 2bb4fd0 chore(ci): use new Argos playwright integration (Mi-app facebook/create-react-app#9419)
• f674e02 docs: update Kinsta deployment documentation (Adding a script tag as firstChild of document head via App.jsx - will it always run first? facebook/create-react-app#9430)
• 7ee2f75 chore: v3.0.0-rc.0 release (Dependencies pulled down don't match repo facebook/create-react-app#9418)
• 4e150d2 docs: add Docusaurus v3.0 upgrade guide (Error facebook/create-react-app#9417)
• 45f1a66 feat(core): support TypeScript + ESM configuration (Upgrade dependencies facebook/create-react-app#9317)
• 336a44f chore: remove docusaurus-migrate (Any project generated with CRA is missing modules and/or required files from a variety of dependencies facebook/create-react-app#9400)
• ae31916 docs: fix typos in website/docs/i18n/i18n-git.mdx (CLI not responding after the create-react-app command facebook/create-react-app#9396)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Request Forgery (CSRF)
🦉 Regular Expression Denial of Service (ReDoS)
🦉 Prototype Pollution
🦉 More lessons are available in Snyk Learn