[Snyk] Security upgrade cheerio from 1.0.0-rc.3 to 1.0.0

[Abuchtela]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Prototype Pollution SNYK-JS-LODASH-15053838	88

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[coderabbitai]

Important

Review skipped

Ignore keyword(s) in the title.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR upgrades cheerio from 1.0.0-rc.3 to 1.0.0 to address a Snyk-reported vulnerability (via updated transitive dependencies).

Changes:

• Bump cheerio dependency to 1.0.0 in package.json.
• Update package-lock.json to reflect cheerio@1.0.0 and its newer dependency tree (e.g., htmlparser2@9, undici, etc.).

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates cheerio to 1.0.0 to remediate the reported vulnerability.
package-lock.json	Regenerates the lockfile to resolve to cheerio@1.0.0 and updated transitive dependencies.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Upgrading to cheerio@1.0.0 introduces a Node engine requirement of >=18.17 (see package-lock.json entry for node_modules/cheerio). This conflicts with the repo’s declared support (package.json engines.node is >=14 and Volta is pinned to Node 16), and will cause installs/CI to fail under Node 16. Either bump the project’s Node version (engines/volta/CI) to >=18.17, or choose a cheerio version that still supports the currently supported Node range while addressing the vulnerability.