[Snyk] Security upgrade zrender from 4.3.2 to 5.2.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	541/1000 Why? Recently disclosed, Has a fix available, CVSS 5.1	Prototype Pollution SNYK-JS-ZRENDER-1586253	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: zrender

The new version differs by 250 commits.

• 0fbf9b3 Merge pull request #828 from ecomfe/release-dev
• 8bf1a9c update package-lock.json
• 5e55e00 Release 5.2.1
• 6040619 Merge pull request #827 from ecomfe/master
• 4485727 Merge pull request #826 from ecomfe/fix-prototype-pollution
• 4281e33 fix prototype pollution in merge, clone, extend utilities
• bb2ffb1 Merge pull request #824 from baojd42/fix-export-displayable
• 350287a fix: export Displayable for type annotation compatibility
• f1f0381 Merge pull request #812 from ecomfe/fix-svg-firefox-event
• f45c4e4 Merge pull request #820 from ecomfe/improve-types
• 462838d Merge pull request #819 from ChenXiaofan/chenxiaofan/spell-error
• 3ae9932 fix: spelling error
• 905b533 fix(type): improve gradient types
• 945f97d Merge pull request #813 from ecomfe/next-publish-nightly
• 014ace5 add nightly publish for next branch
• a110f28 fix(svg): use `offsetX/offsetY` instead of `layerX/layerY` when Firefox >= 39.
• cf01054 fix(svg): svg mouse event doesn't work normally when using shadow, resolves Pie chart tooltip is only showing when hover on legend, not showing when hover on arc in firefox apache/echarts#15646.
• cbe9ea7 Merge pull request #811 from ecomfe/fix-svg
• afe768c fix(svg): 1) fix illegal value for `stroke-dasharray` attribute.
• e4b8ccc Merge pull request #810 from ecomfe/release
• 68878cf Merge pull request #807 from ecomfe/release-dev
• dfe6d2c release 5.2.0
• 5ec9175 Merge pull request #806 from ecomfe/release-dev
• ce36c6d fix: fix lint.

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic