[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	471/1000 Why? Recently disclosed, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @mapbox/mapbox-gl-draw

The new version differs by 56 commits.

• b739dd9 1.3.0
• c12fb64 Remove GeoJSON validation (#1052)
• d14a705 fix(docs): add missing midpoints styles docs (#1048)
• ce122fb Fix 'simple_select' mode lacking 'touchend' event (#684) (#1008)
• 315249d Fix the development server (#1040)
• 3de63e2 add 4 custom modes (#1023)
• 57c5ee2 Add typescript install instructions (#1036)
• 1e51491 Update MODES.md (#1005)
• 2cdb090 Optimize size of mapbox-gl-draw.css from 33 KB to 5 KB (#1038)
• 2b9ce3e Fix midpoint calculation when terrain is enabled (#1039)
• f1fde19 Include steps for publishing to AWS/CDN (#1002)
• 04940d5 Add changelog for 1.2.1 (#1033)
• ff4f8d1 Fix build, bundling and distribution issues (#1032)
• 2412b28 Merge pull request #1010 from mapbox/fundlers-fix
• 70b9aaf Update package.json
• db88e7b Ensure package bundlers always pull the built file
• 897a8a8 Remove unused start-server script (#958)
• a32b418 Add link to geodesic modes (#1000)
• 89208af Update README.md with changes from v1.2.0 release
• b63c0a4 Cherry picking changes from release-v1.2.0 onto main (#995)
• fb37f93 Update MODES.md (#979)
• db9063f Update MODES.md (#991)
• 3e2f29f master -> main
• 405e3bf Fix: Broken link to mapbox docs (#968)

See the full diff

Package name: mapbox-gl

The new version differs by 131 commits.

• 9df0494 v1.10.0 (#9634)
• 4632600 Reverse tap-drag-zoom direction (#9618) (#9633)
• ffd5b5d Documentation improvements sprint (#9607) (#9629)
• a60e952 Add changelog for 1.10.0 (#9542)
• 65b914d update changlogs to add 1.9.1 and [email protected] (#9541)
• 5be4ca3 fix mapTouchEvent.point for touchend events (#9536)
• 516f44f export isExpressionFilter from spec (#9530) (#9534)
• 388424a [master] Fix style-spec isolation for within expression (#9522)
• f4c148f fix #9519 click map event on touch devices (#9526)
• 3f08a28 Fix for issue 9518 (#9520)
• acb48ab remove handler event listeners when map is removed (#9508) (#9517)
• 97037a4 fix DragRotateHandler#isActive (#9511) (#9515)
• 164b0be refactor and expand gesture handling (#9365)
• 6088941 Remove docs pages from .gitignore file (#9504)
• c10c618 Add methods to mapboxgl namespace to allow preloading of workers. (#9391)
• e7deb5c Fix several listener leaks in popups (#9498)
• d912efb Allow client to retry RTLTextPlugin load after NetworkError (#9489)
• 274d215 Add `slice` and `index-of` expressions (#9450)
• 469b9ff Ensure each tile symbol tile uses its own unique Program based on its state (#9493)
• cfc57d7 fix documented type of the locale option to Map (#9486)
• 0a7ecc5 Update per mdn webgl recommendations (#9474)
• 928f3dd optimize tail calls in feature state sorting (#9463)
• 2faf0ab Fix pattern attributes vertex layout (#9482)
• 8131815 Ensure padding is not propagated from fitBounds to transform padding (#9481)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution