[Snyk] Security upgrade react-syntax-highlighter from 5.8.0 to 15.4.2

[wkylin]

Snyk has created this PR to fix 2 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• package.json
• package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue
	Prototype Pollution SNYK-JS-HIGHLIGHTJS-1045326
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HIGHLIGHTJS-1048676

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
pro-react-admin	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	May 24, 2025 7:00am

[what-the-diff]

PR总结

• 更改1：更新了react-syntax-highlighter的版本
  我们在package.json和package-lock.json两个文件中，把react-syntax-highlighter的版本从^5.8.0更新到了^15.4.2。

• 更改2：添加了新的模块hast-util-parse-selector
  我们在package-lock.json中添加了版本为2.2.5的hast-util-parse-selector模块以及其相关元数据。

• 更改3： 添加了新的模块hastscript
  在package-lock.json中添加了版本为6.0.0的新模块hastscript,以及它的依赖关系。

• 更改4：更新了lowlight版本
  package-lock.json中，lowlight的依赖版本从1.9.2升级到了1.20.0，也对它的依赖进行了更新。

• 更改5：更新了highlight.js版本
  在lowlight模块中，highlight.js的依赖版本由9.12.0更新到了10.7.3。

• 更改6：添加了新的模块refractor
  我们在package-lock.json中添加了版本3.6.0的refractor模块及其依赖关系。

• 更改7：为refractor模块添加了各种新依赖
  在package-lock.json中，我们为refractor模块添加了各种特定版本的新依赖。

• 更改8：标记了开发依赖项
  在package-lock.json中，包括babel-runtime在内的多个项目被标记为dev: true，表示这些都是开发依赖项。

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud