[cc-prodsec]

Snyk has created this PR to fix 7 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• packages/template-retail-react-app/package.json
• packages/template-retail-react-app/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-JS-BRACEEXPANSION-18313044	756
	Allocation of Resources Without Limits or Throttling SNYK-JS-BRACEEXPANSION-18512280	756
	Uncontrolled Recursion SNYK-JS-BRACEEXPANSION-20244952	756
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-15309438	756
	Inefficient Algorithmic Complexity SNYK-JS-MINIMATCH-15353389	756
	Directory Traversal SNYK-JS-TMP-16881240	756
	Directory Traversal SNYK-JS-TMP-17315641	756

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling
🦉 Uncontrolled Recursion
🦉 Regular Expression Denial of Service (ReDoS)
🦉 More lessons are available in Snyk Learn

[cc-prodsec]

This upgrade spans multiple versions and introduces significant breaking changes, primarily related to the required Node.js runtime environment and the underlying Lighthouse engine version.

Key Breaking Changes:

• Node.js Version Requirement: The minimum required Node.js version has been increased multiple times. Version 0.16.0 requires Node.js 22 or later. Earlier versions in this range required Node 14 and 18.
• Lighthouse Engine Upgrades: The Lighthouse engine, which performs the audits, has been upgraded from v9 to v13.6.0 across these versions. This will lead to changes in:
  • Scoring: Performance scores and audit results will differ from previous versions.
  • Audits: New audits may be added, and old ones removed or changed. For example, the PWA category was removed in Lighthouse v12.
  • Assertions: Existing performance budgets and assertions in your .lighthouserc.js file will likely need to be re-evaluated and updated to reflect the new scoring.

Recommendation:
Before merging, you must:

1. Ensure your CI environment is running Node.js 22 or a compatible version.
2. Review and adjust your Lighthouse CI assertions and performance budgets to align with the new scoring from Lighthouse v13.

Source: Lighthouse CI GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[git2gus]

Git2Gus App is installed but the .git2gus/config.json doesn't have right values. You should add the required configuration.

[cc-prodsec]

⛔ Snyk checks have failed. 26 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (26)
⛔	Open Source Security	0	11	11	4	26 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.