Bump css-tools for CVE-2023-26364 and CVE-2023-48631

[ahadas]

No description provided.

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
7.7% Duplication on New Code

See analysis details on SonarCloud

[yaacov]

package-lock.json is auto generated, the file we need to update is package.json

looking into what need to be changed there ...

[ahadas]

@yaacov I see that it comes with @testing-library/[email protected] - does it mean that it's only used in tests?...

[yaacov]

I see that it comes with @testing-library/[email protected]

looks like it, I'll try to bump the jest-dom package ...

[ahadas]

I see that it comes with @testing-library/[email protected]

looks like it, I'll try to bump the jest-dom package ...

but the latest seems to take 4.3.1..
even though, if it's only for testing then it's not that important...

[yaacov]

even though, if it's only for testing then it's not that important...

our current package-lock.jsonis out of sync, it will need some TLC, after we remove @migtools/lib-ui

so I will merge this change for GHSA-hpx4-r86g-5jrg to be happy