[Snyk] Security upgrade puppeteer from 21.1.0 to 21.5.0

[marksowell]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	823/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 8.6	Server-side Request Forgery (SSRF) SNYK-JS-IP-6240864	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: puppeteer

The new version differs by 250 commits.

• b33ff31 chore: release main (#11275)
• 325fa8b feat: roll to Chrome 119.0.6045.105 (r1204232) (#11287)
• f91a752 feat: update Node.js in Docker to 20 (#11296)
• 887a862 docs: fix typo in troubleshooting guide (#11285)
• d4a378a chore(deps): Bump the dependencies group with 1 update (#11295)
• 6f60c2e chore(deps-dev): Bump the dev-dependencies group with 4 updates (#11294)
• 019bc82 chore: update expected bidi errors (#11022)
• b4b6fe2 chore: update chromium-bidi to 0.4.33 (#11284)
• ce4e485 fix: ignore unordered frames (#11283)
• be0dad4 chore(deps-dev): Bump the dev-dependencies group with 3 updates (#11281)
• 0b756aa chore(deps): Bump the dependencies group with 2 updates (#11280)
• ecb64e2 chore(deps): Bump the dependencies group with 2 updates (#11265)
• 0d4aab8 chore: fix BiDi deserializer (#11264)
• 22aeff1 fix: Type for ElementHandle.screenshot (#11274)
• bec58dd chore(deps): Bump the all group with 1 update (#11272)
• 4f999b3 fix(typs): lints in `puppeteer/docs` (#11251)
• 8379f46 chore(deps): Bump acorn from 8.10.0 to 8.11.1 (#11262)
• e0a5f68 test: unskip passing tests in Firefox (#11263)
• 809aba2 chore(deps-dev): Bump the dev-dependencies group with 2 updates (#11252)
• 9db4a94 refactor: remove extra variable on onTargetInfoChanged (#11249)
• ab15aa5 ci: use the installed version rather than downloading (#11248)
• f2ce480 ci: remove pgk mgr install to save time (#11243)
• 530e068 chore: update firefox Expectations (#11242)
• 133bbe7 chore(deps): Bump the dependencies group with 1 update (#11222)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Server-side Request Forgery (SSRF)