[Snyk] Security upgrade css-loader from 3.6.0 to 4.0.0

[paulineribeyre]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • src/Covid19Dashboard/standalone/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

Commit messages

Package name: css-loader

The new version differs by 34 commits.

• 7857d8f chore(release): 4.0.0
• 5604205 feat: support `file:` protocol
• 5303db2 chore(deps): update (Feat/vadc sprint21 #1131)
• 9aa0549 chore(deps): update
• a54c955 test: imports
• 5b45d87 test: support in `@ import` at-rule
• 83515fa refactor: code
• 1c20b1e fix: parsing
• 7f49a0a feat: `@ value` supports importing `url()` (Chore/adding_infobutton #1126)
• 791fff3 refactor: named export (Feat/combine gwas workflow progress bar #1125)
• 01e8c76 refactor: change function arguments of the `import` option (combined gwas step2 #1124)
• c153fe6 refactor: improve schema options (Chore/update discoverydropdowntag #1123)
• 58b4b98 test: unresolved (Chore(deps): Bump @xmldom/xmldom from 0.7.5 to 0.7.6 #1122)
• d2f6bd2 refactor: getLocalIdent function (Remove Veracode scanning pipeline extra files #1121)
• 069dbb0 refactor: the `modules.localsConvention` option was renamed to the `modules.exportLocalsConvention` option (Feat/vadc sprint20 #1120)
• fc04401 refactor: the `modules.context` option was renamed to the `modules.localIdentContext` option (Update node js and fix failing unit tests #1119)
• 3a96a3d refactor: the `hashPrefix` option was renamed to the `localIdentHashPrefix` option (fix: skip empty tags in discovery page #1118)
• 0080f88 refactor: default values `modules` and `module.auto` are true (Feat/combine gwas workflow view1 #1117)
• e1c55e4 refactor: rename the `onlyLocals` option (Remove Veracode scanning pipeline #1116)
• ac5f413 refactor: code
• a5c1b5f test: code coverange (feat(VADC-261): add combined gwas steps template #1114)
• 908ecee refactor: `esModule` option is `true` by default (Style/gwas pipeline padding #1111)
• 7cca035 test: coverange (fix: apply the discovery detail active-tab fix to back button #1112)
• bc19ddd feat: improve `url()` resolving algorithm

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)