[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-TRIM-1017038	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @mdx-js/mdx

The new version differs by 30 commits.

• 995b9c9 v1.5.6
• 20409c2 fix(deps): update dependency @reach/skip-nav to v0.8.4 (#943)
• 70989d4 fix(deps): update dependency unist-builder to v2.0.3 (#950)
• 77789c4 chore(deps): update dependency eslint-plugin-import to v2.20.1 (#934)
• 0a8a3d0 chore(deps): update dependency lint-staged to v10.0.7 (#936)
• be48053 chore(deps): update dependency rimraf to v3.0.2 (#940)
• 99e153a fix(deps): update babel monorepo to v7.8.4 (#941)
• 57bd8bd fix(deps): update dependency @reach/router to v1.3.1 (#942)
• 6573f7e chore(deps): update dependency eslint-config-xo to v0.29.1 (#947)
• 631a3e4 chore(deps): update dependency husky to v4.2.3 (#948)
• cb2c373 chore(deps): update dependency webpack to v4.41.6 (#949)
• 7621fcc fix(deps): update gatsby monorepo (#952)
• c94a3b2 fix(deps): update dependency unist-util-visit to v2.0.2 (#951)
• c8a83a5 chore(deps): update dependency @pkgr/rollup to v0.10.2 (#939)
• b75d9c4 feat: added tw icon to menu and sidebar; optimised search\'s css (#946)
• beee1a1 fix(deps): update gatsby monorepo (#944)
• f21e557 Add `sup` to `ComponentType` to support footnotes (#937)
• 1c4d460 ci: try `--dist-tag ci` instead of `--pre-dist-tag ci --preid ci`
• f4b1b88 chore(deps): update dependency eslint-plugin-react to v7.18.3 (#935)
• 7581904 chore(deps): update dependency @pkgr/rollup to v0.9.5 (#932)
• 468970d ci: try --no-push --no-git-tag-version instead of --canary temporarily
• 26a3a3c chore: enable prettier for .md/.mdx files - close #844 (#927)
• 8ebde24 chore: include all workspaces, add lerna publish ignore files
• ef743a4 chore: bump all (dev)Dependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic