[Snyk] Security upgrade immer from 8.0.1 to 9.0.6

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • superset-frontend/package.json
  • superset-frontend/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	673/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-IMMER-1540542	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: immer

The new version differs by 68 commits.

• fa671e5 fix(security): Follow up on CVE-2020-28477 where `path: [["__proto__"], "x"]` could still pollute the prototype
• 2e0aa95 Create SECURITY.md
• 050522d chore: fix CI. maybe.
• 1195510 docs: Update example-setstate.mdx (build(deps-dev): bump prettier from 3.0.3 to 3.2.2 in /superset-websocket #833)
• 648d39b docs: fixing link to RFC-6902 & fixing typo (build(deps): bump react-intersection-observer from 9.4.1 to 9.5.3 in /superset-frontend #830)
• bc890f7 docs: Update example-setstate.mdx (build(deps): bump remark-gfm from 3.0.1 to 4.0.0 in /superset-frontend #829)
• 16a3d0f chore(deps): bump prismjs from 1.23.0 to 1.24.0 in /website (build(deps): bump gh-pages from 3.2.3 to 6.1.1 in /superset-frontend #822)
• 847492c docs: Extended / updated documenation (build(deps-dev): bump @cypress/react from 5.10.1 to 8.0.0 in /superset-frontend #824)
• 7f41483 chore: [workflows] don't release from forks
• 3f9a94e chore: let's test before publish
• bfb8dec fix: release missing dist/ folder
• b314b19 chore: fix cpx usage
• a607d6c chore: Remove old shizzle
• 6fd5329 chore: fixes for deploy preview
• 144f886 chore: fix docs deployment attempt 3
• 38964fa chore: semantic-release + GH actions
• 06c6741 chore: fix docs deploy
• ad23da9 chore: fix test job
• b6d92f4 chore: publish docs automatically
• c59576a chore: setup GH action for test
• dc3f66c fix: build(deps): bump rimraf from 3.0.2 to 5.0.5 in /superset-frontend #807 new undefined properties should end up in result object
• 5412c9f fix: build(deps): bump @docusaurus/plugin-client-redirects from 2.4.1 to 2.4.3 in /docs #791 return 'nothing' should produce undefined patch
• 58b74a6 chore(deps): bump ssri from 6.0.1 to 6.0.2 in /website (build(deps-dev): bump sinon and @types/sinon in /superset-frontend #818)
• c9deb48 chore(deps): bump color-string from 1.5.4 to 1.5.5 in /website (build(deps-dev): bump @babel/compat-data from 7.22.6 to 7.23.5 in /superset-frontend #817)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[codecov-commenter]

Codecov Report

Merging #118 (e741962) into master (e947f8a) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master     #118   +/-   ##
=======================================
  Coverage   76.71%   76.71%           
=======================================
  Files        1002     1002           
  Lines       53801    53801           
  Branches     6858     6858           
=======================================
  Hits        41276    41276           
  Misses      12288    12288           
  Partials      237      237           

Flag	Coverage Δ
hive	81.12% <ø> (ø)
javascript	71.00% <ø> (ø)
mysql	81.54% <ø> (+0.03%)	⬆️
postgres	81.57% <ø> (ø)
presto	81.41% <ø> (ø)
python	82.08% <ø> (ø)
sqlite	81.21% <ø> (+0.03%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update e947f8a...e741962. Read the comment docs.