update

node_modules/clean-css/History.md

@@ -1,3 +1,9 @@
+[4.2.4 / 2021-10-21](https://github.com/jakubpawlowicz/clean-css/compare/v4.2.3...v4.2.4)
+==================
+
+* Backports prototype pollution fix from 5.x branch.
+* Backports correct decimal point regex from 5.x branch.
+
 [4.2.3 / 2020-01-28](https://github.com/jakubpawlowicz/clean-css/compare/v4.2.2...v4.2.3)
 ==================
 

node_modules/clean-css/lib/optimizer/level-1/optimize.js

@@ -606,7 +606,7 @@ function buildPrecisionOptions(roundingPrecision) {
 
   if (optimizable.length > 0) {
     precisionOptions.enabled = true;
-    precisionOptions.decimalPointMatcher = new RegExp('(\\d)\\.($|' + optimizable.join('|') + ')($|\W)', 'g');
+    precisionOptions.decimalPointMatcher = new RegExp('(\\d)\\.($|' + optimizable.join('|') + ')($|\\W)', 'g');
     precisionOptions.zeroMatcher = new RegExp('(\\d*)(\\.\\d+)(' + optimizable.join('|') + ')', 'g');
   }
 

node_modules/clean-css/lib/options/compatibility.js

@@ -141,12 +141,14 @@ function compatibilityFrom(source) {
 
 function merge(source, target) {
   for (var key in source) {
-    var value = source[key];
+    if (Object.prototype.hasOwnProperty.call(source, key)) {
+      var value = source[key];
 
-    if (typeof value === 'object' && !Array.isArray(value)) {
-      target[key] = merge(value, target[key] || {});
-    } else {
-      target[key] = key in target ? target[key] : value;
+      if (Object.prototype.hasOwnProperty.call(target, key) && typeof value === 'object' && !Array.isArray(value)) {
+        target[key] = merge(value, target[key] || {});
+      } else {
+        target[key] = key in target ? target[key] : value;
+      }
     }
   }
 

node_modules/clean-css/package.json

@@ -1,33 +1,33 @@
 {
   "_args": [
     [
-      "clean-css@4.2.3",
-      "/mnt/Foxconn/Digitalent/Deverloper/liff-push_2series"
+      "clean-css@4.2.4",
+      "/home/node/nuxt"
     ]
   ],
-  "_from": "clean-css@4.2.3",
-  "_id": "clean-css@4.2.3",
+  "_from": "clean-css@4.2.4",
+  "_id": "clean-css@4.2.4",
   "_inBundle": false,
-  "_integrity": "sha512-VcMWDN54ZN/DS+g58HYL5/n4Zrqe8vHJpGA8KdgUXFU4fuP/aHNw8eld9SyEIyabIMJX/0RaY/fplOo5hYLSFA==",
+  "_integrity": "sha512-EJUDT7nDVFDvaQgAo2G/PJvxmp1o/c6iXLbswsBbUFXi1Nr+AjA2cKmfbKDMjMvzEe75g3P6JkaDDAKk96A85A==",
   "_location": "/clean-css",
   "_phantomChildren": {},
   "_requested": {
     "type": "version",
     "registry": true,
-    "raw": "clean-css@4.2.3",
+    "raw": "clean-css@4.2.4",
     "name": "clean-css",
     "escapedName": "clean-css",
-    "rawSpec": "4.2.3",
+    "rawSpec": "4.2.4",
     "saveSpec": null,
-    "fetchSpec": "4.2.3"
+    "fetchSpec": "4.2.4"
   },
   "_requiredBy": [
     "/html-minifier",
     "/html-minifier-terser"
   ],
-  "_resolved": "https://registry.npmjs.org/clean-css/-/clean-css-4.2.3.tgz",
-  "_spec": "4.2.3",
-  "_where": "/mnt/Foxconn/Digitalent/Deverloper/liff-push_2series",
+  "_resolved": "https://registry.npmjs.org/clean-css/-/clean-css-4.2.4.tgz",
+  "_spec": "4.2.4",
+  "_where": "/home/node/nuxt",
   "author": {
     "name": "Jakub Pawlowicz",
     "email": "contact@jakubpawlowicz.com",
@@ -77,5 +77,5 @@
     "prepublish": "npm run check",
     "test": "vows"
   },
-  "version": "4.2.3"
+  "version": "4.2.4"
 }