[Snyk] Security upgrade parcel-bundler from 1.11.0 to 1.12.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1255640	No	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: parcel-bundler

The new version differs by 55 commits.

• 95dfb33 Publish
• 6ecb65c Make treeshaking handle "multiassignments" (#2729)
• ee78fa7 Enable HMR for CSS by default
• 1a439c0 Update changelog
• 26ff2b1 Update lockfile
• fe0066b Fix tests
• 30624f7 Fix HMR failure with js error on load, take 2 (#2531)
• 011bfa9 feat(autoinstall): Add disabling of autoinstall globally via environm… (#2152)
• bec96be Add helpful plugin errors (#2691)
• 210f173 Fix test
• 2a55296 Throw meaningful error on undefined exports (#2693)
• 03fdcfd Add Markdown support as an entry point (issue #2274) (#2538)
• f562ce6 Implement depth option for detaild report (#2466)
• 8deb85d CSS/SASS/LESS sourcemaps (#2489)
• f68f0df Unhandled HMR updates should cause a page reload (#2676)
• c3921cb eslint: enable no-return-await (#2707)
• 37e22d3 Fix scopehositing with nested dynamic imports (#2712)
• c670dec Remove unnecessary return await
• 27f769a fix: set default pragmaFrag option 🐛 (#2486)
• f269e3e Fix postcss modules composes imports (#2642)
• 8afacc3 Prevent circular deps from causing a stack overflow in HMR runtime (#2660)
• 0b98eed Send CORS headers when a file does not exist (#2669)
• a69de78 For scope hoisting, Asset IDs cannot contain + or / (base64) (#2681)
• a1567e1 Fix dependency list parsing in RustAsset for paths on Windows (#2651)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic