[Snyk] Upgrade swagger-ui-dist from 3.23.11 to 3.25.0

[snyk-bot]

Snyk has created this PR to upgrade swagger-ui-dist from 3.23.11 to 3.25.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2020-01-17.

Release notes

Package name: swagger-ui-dist

• 3.25.0 - 2020-01-17
  

  No release summary included.

  Changelog

  • feature(swagger-ui-react): defaultModelExpandDepth and plugins props (#5594)
  • improvement: clear auth information from memory when logging out (#5316)
  • improvement: use type 'password' instead of text for client secret (#5262)
  • housekeeping(docs): https path for unpkg link (#5769)
  • housekeeping: fix logo size (#5702)
  • housekeeping: fix npm run lint and npm test on Windows (#5737)
  • housekeeping: npm audit fix (#5718, #5772, #5805)
• 3.24.3 - 2019-11-18
  

  Changelog

  • housekeeping: npm audit fix (#5718)
• 3.24.2 - 2019-11-04
  

  This release reverts Swagger UI's upgrade to redux@^4 (via #5569), which was causing test failures in downstream projects.

• 3.24.1 - 2019-11-04
  

  ⚠️ This release includes security updates. You should upgrade to this version if you use Swagger UI to render untrusted documents.

  Specifically, this version updates Swagger UI's dompurify dependency to ^2.0.7, which mitigates our exposure to dompurify's mXSS vulnerability that was disclosed earlier this week.

  Changelog

  • fix: code highlight styles are now only applied pre.microlight (#5673)
  • housekeeping: npm audit resolutions (#5681)
  • housekeeping(deps): redux v4 (#5569)
  • housekeeping(deps): redux-immutable v4 (#5639)
  • housekeeping(dev-deps): babel monorepo (#5682)
  • housekeeping(dev-deps): [email protected] (#5683)
• 3.24.0 - 2019-10-12
  

  Changelog

  • feature: add PKCE support for OAuth2 Authorization Code flows (#5361)
  • fix: parameterMacro functionality for OAS3 (#5617)
  • fix(validateParam): validate JSON values + support Parameter.content (#5657)
  • fix: overweight dependencies in PKCE implementation (#5658)
• 3.23.11 - 2019-09-20
  

  ⚠️ This release contains a security fix that addresses a CSS-based input field value exfiltration vulnerability. If you use Swagger UI to display untrusted OpenAPI documents, you should upgrade to this version ASAP.

  Changelog

  • fix: mitigate "sequential @import chaining" vulnerability (via #5616)

from swagger-ui-dist GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs