[Snyk] Fix for 2 vulnerabilities

[chasenlehara]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Server-side Request Forgery (SSRF) SNYK-JS-REQUEST-3361831	No	Proof of Concept
	646/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 6.5	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: d3

The new version differs by 34 commits.

• aa8605b Merge branch '3.5.4'
• 5040473 Make d3_window a bit more lenient.
• 01bdf12 Merge pull request #2148 from cvrebert/master
• d908bd1 Merge pull request #2152 from mauromelis/patch-1
• 9a46f23 Merge pull request #2193 from arjenvanoostrum/dutch-locale
• ffc1fe9 Merge remote-tracking branch 'origin/fix-no-namespace' into 3.5.4
• 773479b Merge branch 'fix-quadtree-find-accessor' of https://github.com/tpreusse/d3 into 3.5.4
• a38dfa8 Merge branch 'patch-1' of https://github.com/alexandersimoes/d3 into 3.5.4
• d971d1f Fix #2207 - unintentional masking of `m`.
• 36fd534 Merge branch 'case-insensitive-color-names' of https://github.com/wilg/d3 into 3.5.4
• 4b6bd05 Add rebeccapurple test.
• de0429f Merge branch 'master' of https://github.com/vladh/d3 into 3.5.4
• 2b9b451 Pin version of UglifyJS.
• 73c3d8c Use d3_window in selection.style.
• b1da610 Fix d3.select(window).
• 9c3df31 Demote JSDOM to development dependency; fix #2190.
• 82a0f01 run make
• f10946b named colors are case insensitive
• a873473 Updated year in license
• 64383b7 Add rebeccapurple color. Fixes #2208.
• c258e05 Update nl-NL.js
• 4c6b47f add Dutch locale
• ca0b7cb Add note about purpose of GitHub issues.
• 743276d Fix quadtree find with accessors

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)
🦉 Prototype Pollution