Fix/security vulnerabilities

[d-a-v-i--]

Security Updates and Dependency Alignment

Changes

• Fixed multiple security vulnerabilities by updating dependencies and adding resolutions

Security Fixes

• Added resolutions for vulnerable dependencies:
  • cookie: 0.7.2 (CVE fix for out-of-bounds characters)
  • serialize-javascript: 6.0.2 (XSS vulnerability fix)
  • micromatch: 4.0.8 (ReDoS vulnerability fix)
  • express: 4.21.1
  • ip: 2.0.1 (SSRF fix)
  • Other security-related updates (braces, elliptic, es5-ext)

Dependency Fixes

• All Storybook packages set to version 7.6.20
• Updated core dependencies
• Replaced deprecated babel-eslint with @babel/eslint-parser

Additional Changes

• Consolidated resolutions and overrides sections
• Updated peer dependencies to reflect supported React versions

Testing Done

• ✅ Clean npm install
• ✅ No vulnerabilities found in npm audit
• ✅ All dependencies aligned and compatible

Related Issues

Fixes serialize-javascript vulnerability

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
solid-ui-react	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Nov 5, 2024 9:14pm

[NSeydoux]

Reapplied in #1025 so that the CI runs (it doesn't run on forks to avoid secrets exfiltration)

[NSeydoux]

This library is being sunset.