Fix vulnerable dependencies

[marcospassos]

The vulnerabilities check runs npm audit, which has been failing on master since #149. It reports 6 advisories (5 high, 1 moderate), all in transitive dependencies: brace-expansion, browserslist, immutable, js-yaml, shell-quote and baseline-browser-mapping.

npm audit fix resolves all of them with in-range updates, so only the lockfile changes:

Package	From	To
baseline-browser-mapping	2.10.38	2.11.22
brace-expansion	5.0.6, 1.1.15	5.0.9, 1.1.18
browserslist	4.28.4	4.28.9
caniuse-lite	1.0.30001799	1.0.30001810
electron-to-chromium	1.5.377	1.5.427
immutable	5.1.7	5.1.9
js-yaml	4.2.0	4.3.2
node-releases	2.0.48	2.0.55
shell-quote	1.8.4	1.10.0
update-browserslist-db	1.2.3	1.3.3

npm audit now reports 0 vulnerabilities, and tsc, lint and the test suite pass.

[github-actions]

👋 @marcospassos
Thanks for your contribution!
The approval and merge process is almost fully automated 🧙
Here's how it works:

1. You open a new pull request
2. Automated tests check the code
3. Maintainers review the code
4. Once approved, the PR is ready to merge.

👉 Omit the extended description
Please remove the commit body before merging the pull request.
Instead, include the pull request number in the title to provide the full context
about the change.

☝️ Lastly, the title for the commit will come from the pull request title. So please provide a descriptive title that summarizes the changes in 50 characters or less using the imperative mood.
Happy coding! 🎉

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/croct@153

commit: 7256ef5