[Snyk] Security upgrade superstatic from 8.0.0 to 9.0.1

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	484/1000 Why? Has a fix available, CVSS 5.4	Open Redirect SNYK-JS-GOT-2932019	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: superstatic

The new version differs by 28 commits.

• 6b4a534 9.0.1
• 3161db5 Bump sinon from 14.0.0 to 15.0.1 (Document and possibly update guidelines for graphs v8/v8.dev#363)
• 37f1bb5 update deps and an audit fix (Add Open Graph / Twitter Card metadata  v8/v8.dev#371)
• d227cb7 Merge pull request Language fix v8/v8.dev#367 from firebase/next
• 920e552 manually join paths instead of using the os sep (Update debug-arm.md documentation. v8/v8.dev#365)
• 35803a3 swap update-notifier for update-notifier-cjs (Fix figure markup v8/v8.dev#364)
• 6dd1662 Bump qs and formidable (Use language-grammar where possible v8/v8.dev#358)
• e6ee138 9.0.0
• c75d6f8 update dev deps and remove fs-extra (Update merge-patch.md v8/v8.dev#337)
• 0ce4333 Bump typescript from 4.8.2 to 4.8.3 (Describe how to remote debug d8 on Android v8/v8.dev#333)
• ff4e27a Bump @ typescript-eslint/parser from 5.36.1 to 5.36.2 (Add Intl.DisplayNames feature explainer v8/v8.dev#331)
• 6274e4f Bump on-finished from 2.3.0 to 2.4.1 (Fix misplaced feature support header v8/v8.dev#330)
• 6df6397 Bump router from 1.3.5 to 1.3.7 (Update: add an explanation v8/v8.dev#329)
• 51f4791 Bump destroy from 1.0.4 to 1.2.0 (Minor fixes to the blog post Understanding ECMAScript part 1. v8/v8.dev#328)
• 65c22d4 Bump eslint from 8.22.0 to 8.23.0 (Automatically add video dimensions v8/v8.dev#326)
• 3c14865 break "relative" redirects (Fix video styling v8/v8.dev#324)
• e50a145 cleaning up files and pathutils (Update useful commands in README. v8/v8.dev#322)
• f0c5fb0 simplify the bin command, remove unused dependencies, typescript it (“release” tag not clickable due to tweets overlay v8/v8.dev#313)
• 75132bd Bump @ types/lodash from 4.14.167 to 4.14.184 (Torque enums v8/v8.dev#315)
• bbecfe5 Bump eslint-plugin-jsdoc from 39.3.4 to 39.3.6 (Fix link and usage of V8_DEPRECATED v8/v8.dev#318)
• 252c7cb Create dependabot.yml
• d437ce2 update a few tests to typescript, fix some types (Tweets SVG positioning is still off in Firefox v8/v8.dev#312)
• c5d2517 better types and export types for superstatic (Update link to "Contributing to Chromium" v8/v8.dev#311)
• 000e6cb updates licenses (Conditionally include PWACompat v8/v8.dev#310)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Open Redirect