[Snyk] Security upgrade swagger-ui from 3.48.0 to 4.7.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	663/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.4	Cross-site Scripting (XSS) SNYK-JS-BRAINTREESANITIZEURL-2339882	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: swagger-ui

The new version differs by 250 commits.

• 2879773 improvement(docker): migrate run.sh to docker-entrypoint.d-script (#7915) (#7916)
• 77d0bb9 feat: add modelcollapse to primitive models (#7557)
• c81d7f0 feat(docker): add OAUTH_USE_BASIC_AUTH env (#7474)
• bd19c9c chore(deps): bump @ braintree/sanitize-url from 5.0.2 to 6.0.0 (#7914)
• d064198 fix(auth): add name tag to bearer input field (#7743)
• 076b46c chore(deps-dev): bump @ commitlint/cli from 15.0.0 to 16.2.1 (#7901)
• 8f63462 feat(oauth2): authActions.authPopup plugin accessible wrapper (#7699)
• a5aca55 fix(css): update flex and overflow properties on tags (#7566)
• c60a32a chore(deps-dev): bump cypress from 9.0.0 to 9.5.1 (#7889)
• d191c1c chore(release): cut the v4.6.2 release
• 5874d2b fix(swagger-ui-react): amend prop validation for plugins (#7900)
• 08829b1 chore(deps-dev): bump @ babel/register from 7.16.0 to 7.17.0 (#7887)
• 59acd1b chore(deps-dev): bump jest from 27.4.7 to 27.5.1 (#7886)
• a746013 chore(deps-dev): bump @ babel/eslint-parser from 7.16.3 to 7.17.0 (#7884)
• 3d79c24 fix(examples): allow string created by regex pattern (#7829)
• 7d4086b chore(deps-dev): bump prettier from 2.3.2 to 2.5.1 (#7882)
• 74c527e chore(deps-dev): bump mini-css-extract-plugin from 2.4.6 to 2.5.3 (#7883)
• a165775 chore(deps): bump prop-types from 15.7.2 to 15.8.1 (#7881)
• 1dd3ef6 chore(release): cut the v4.6.1 release
• 4109efd fix(docker-nginx): Output yml/yaml as text/plain (#7749)
• 09a403f docs: move summary to README (#7816)
• 434e9cf chore(deps-dev): bump eslint-plugin-jest from 25.2.4 to 26.1.1 (#7870)
• 3eb0528 fix(oauth2): addEventListener only if document state is not 'loading' (#7879)
• 824917c fix(oauth2): addEventListener only if document state is not 'loading' (#7828)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)