[Snyk] Upgrade @ampproject/toolbox-page-experience from 2.8.10 to 2.9.0

[DerekNonGeneric]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade @ampproject/toolbox-page-experience from 2.8.10 to 2.9.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released a month ago, on 2022-06-23.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Input Validation SNYK-JS-URLPARSE-2407770	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Authorization Bypass Through User-Controlled Key SNYK-JS-URLPARSE-2412697	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Authorization Bypass SNYK-JS-URLPARSE-2407759	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Access Restriction Bypass SNYK-JS-URLPARSE-2401205	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Open Redirect SNYK-JS-URLPARSE-1533425	512/1000 Why? Proof of Concept exploit, CVSS 8.1	Proof of Concept
	Information Exposure SNYK-JS-NODEFETCH-2342118	512/1000 Why? Proof of Concept exploit, CVSS 8.1	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: @ampproject/toolbox-page-experience

• 2.9.0 - 2022-06-23
  

  v2.9.0

• 2.8.10 - 2022-03-16
  

  v2.8.10

from @ampproject/toolbox-page-experience GitHub release notes

Commit messages

Package name: @ampproject/toolbox-page-experience

• 0826825 v2.9.0
• e0c6e04 update changelog
• 72e1c96 Update dependencies to fix critical security issues (AMP Conf 2019 Microsite ampproject/amp.dev#1331)
• 7878b9c Update changelog for 2.9.0
• eff9d5e Add support for Opaque redirects (Consolidate usage of who.yaml for ads vendors page ampproject/amp.dev#1318)
• 90adbd7 Reset main branch to v2.8.10 (Implement sampler widget ampproject/amp.dev#1326)
• 678c0e2 Implement SSR for amp-audio extension (Master ampproject/amp.dev#1324)
• 4afdd75 Bump url-parse from 1.5.1 to 1.5.9 (Testing permissions. ampproject/amp.dev#1309)
• 1abaa6b Fix i-amphtml-sizer responsive issue (Fix up loose ends around first part of content migration ampproject/amp.dev#1319)
• e40c5c3 More robust auto extension import (Fix markdown link ampproject/amp.dev#1312)
• a1eaef5 Fix for issue Update analytics-vendors.md ampproject/amp.dev#1302: "SSR: Duplicated ids in rendered markup, if there are nodes with attributes 'media', 'heights' or 'sizes'" (Update dependency @octokit/rest to v16.1.0 ampproject/amp.dev#1303)
• 26e113b fix for transforming nodes with multiple media queries (Update dependency gulp-plumber to v1.2.1 ampproject/amp.dev#1305)
• b367a2d Merge pull request roadshow Ho Chi Minh ampproject/amp.dev#1293 from ampproject/update-deps
• 5598057 clean before build
• 49e00b4 upgrade node-fetch
• 1b7e896 remove the latestVersion fix (fixed links - resolves issue #1280 ampproject/amp.dev#1282)
• 02fe426 Fix: add latest version at runtime (add amp-analytics vendor docs for TEA Analytics ampproject/amp.dev#1279)
• dab4043 Bail early in `SeparateKeyframes` transformer (Remove Orgin Trial information from amp-story. ampproject/amp.dev#1277)
• ac92ba9 Merge pull request Broken links on overview page. ampproject/amp.dev#1278 from swissspidy/patch-2
• 3ecfa2f Fix typo in core package's readme
• 0f63a77 v3.0.0-canary.2
• ec931bf change "mode strict" to "use strict" (id- translations for amphtml_ads, basic_markup and validation_errors. ampproject/amp.dev#1275)
• 704b602 Merge pull request All Translations for deep_dive_analytics (es, id, ko, ja, pt_BR and zh_CN) ampproject/amp.dev#1274 from erwinmombay/fix-ordering
• 0751e10 insert the dvh polyfill before any of the amp-story css to avoid CLS

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs