[Snyk] Upgrade react-map-gl from 7.0.23 to 7.1.7

[samcuxx]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade react-map-gl from 7.0.23 to 7.1.7.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 13 versions ahead of your current version.

• The recommended version was released on 7 months ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ADOBECSSTOOLS-6096077	417	No Known Exploit
	Cross-site Request Forgery (CSRF) SNYK-JS-AXIOS-6032459	417	Proof of Concept
	Denial of Service (DoS) SNYK-JS-WS-7266574	417	Proof of Concept
	Denial of Service (DoS) SNYK-JS-WS-7266574	417	Proof of Concept
	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	417	No Known Exploit
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	417	Proof of Concept
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	417	Proof of Concept
	Sandbox Bypass SNYK-JS-WEBPACK-3358798	417	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	417	Proof of Concept
	Path Traversal SNYK-JS-WEBPACKDEVMIDDLEWARE-6476555	417	Proof of Concept
	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	417	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	417	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	417	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ADOBECSSTOOLS-5871286	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-AXIOS-6124857	417	Proof of Concept
	Improper Control of Dynamically-Managed Code Resources SNYK-JS-EJS-6689533	417	No Known Exploit
	Open Redirect SNYK-JS-EXPRESS-6474509	417	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	417	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	417	Proof of Concept
	Prototype Pollution SNYK-JS-TOUGHCOOKIE-5672873	417	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-6444610	417	Proof of Concept
	Improper Input Validation SNYK-JS-POSTCSS-5926692	417	No Known Exploit
	Improper Input Validation SNYK-JS-POSTCSS-5926692	417	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WORDWRAP-3149973	417	Proof of Concept

Release notes

Package name: react-map-gl

• 7.1.7 - 2023-12-18
  
  • Allow disabling RTLTextPlugin and load lazy (#2312)
• 7.1.6 - 2023-09-12
  
  • Use shadow transform for queryRenderedFeatures call (#2280)
  • Fix resetting cursor style (#2279)
• 7.1.5 - 2023-08-24
  
  • Re-export native types where possible (#2263)
  • Fix useMap return type (#2262)
  • Fix LngLatBounds type (#2260)
  • fix missing types (#2259)
• 7.1.4 - 2023-08-18
  
  • Import style and event types from specific base libraries (#2252)
  • Fix typechecking (#1798) (#2250)
• 7.1.3 - 2023-07-20
  
  • Fix globe/mercator projection transition (#2229)
• 7.1.2 - 2023-07-06
  
  • Fix crash updating settings (#2222)
• 7.1.1 - 2023-07-05
  
  • Remove redeclaration of react type (#2219)
• 7.1.0 - 2023-06-30
  
  • To better accommodate the API divergence between Mapbox and Maplibre, this version adds a new endpoint react-map-gl/maplibre. The new endpoint exports identical components as react-map-gl, but typed for maplibre-gl instead. After switching to this new endpoint, maplibre-gl users no longer need to install mapbox-gl or a placeholder package as dependency. See upgrade guide for an example.
  • Marker, Popup and GeolocateControl components now expose the native instance via React ref.
• 7.1.0-beta.3 - 2023-06-22
  
  • Remap event types (#2207)
  • Restore fog, light and terrain types on MapProps (#2206)
• 7.1.0-beta.2 - 2023-06-14
• 7.1.0-beta.1 - 2023-06-05
• 7.0.25 - 2023-05-25
• 7.0.24 - 2023-05-24
• 7.0.23 - 2023-04-12

from react-map-gl GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs