Bump react-player from 2.11.0 to 2.12.0 in /website

[dependabot]

Bumps react-player from 2.11.0 to 2.12.0.

Changelog

Sourced from react-player's changelog.

v2.12.0

• Added Vimeo Muteability [#1588](https://github.com/CookPete/react-player/issues/1588)
• Add forceSafariHLS option for FilePlayer [#1560](https://github.com/CookPete/react-player/issues/1560)
• fix: standalone has side effects [#1586](https://github.com/CookPete/react-player/issues/1586)
• Update DASH example [#1589](https://github.com/CookPete/react-player/issues/1589)
• Support live youtube URLs [#1580](https://github.com/CookPete/react-player/issues/1580)

v2.11.2

10 February 2023

• Remove module property from package.json [#1574](https://github.com/CookPete/react-player/issues/1574)

v2.11.1

8 February 2023

• Update light prop usage re: new feature in PR#1405 [#1510](https://github.com/CookPete/react-player/issues/1510)
• Extending valid DailyMotion URL regex Fix #1430 [#1516](https://github.com/CookPete/react-player/issues/1516)
• Add "sideEffects": false to package.json [#1524](https://github.com/CookPete/react-player/issues/1524)
• responsive CSS fix [#1533](https://github.com/CookPete/react-player/issues/1533)
• add unbundled es6 build with jsx file extensions [#1537](https://github.com/CookPete/react-player/issues/1537)
• Replace Vimeo default preview thumbnail [#1553](https://github.com/CookPete/react-player/issues/1553)
• fix typo [#1558](https://github.com/CookPete/react-player/issues/1558)
• fix: empty src attr in StrictMode [#1538](https://github.com/CookPete/react-player/issues/1538)
• Extending valid DailyMotion URL regex Fix #1430 (#1516) [#1430](https://github.com/CookPete/react-player/issues/1430)

Commits

• 662082a 2.12.0
• 105290e Update DASH example
• 1bbf535 Support live youtube URLs
• 35e3ce9 Added Vimeo Muteability (#1588)
• 80fbb16 Add forceSafariHLS option for FilePlayer (#1560)
• f9f326e fix: standalone has side effects (#1586)
• 101c63b 2.11.2
• cdbfacd Remove module property from package.json
• 22c0c95 2.11.1
• a3ae210 Update light prop usage re: new feature in PR#1405 (#1510)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Dependabot tried to add @weaveworks/timber-wolf, @weaveworks/pesto, @weaveworks/wild-watermelon and @weaveworks/tangerine as reviewers to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/weaveworks/weave-gitops/pulls/3863/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the teams you specified is not a collaborator of the weaveworks/weave-gitops repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request

[enekofb]

At this stage we only want Dependabot to manage security vulnerabilities. This PR was a side effect of tuning its configuration. Closing this PR as it does not have a security alert associated with it.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.