build: update crypto-js from 4.0.0 -> 4.2.0 [CVE-2023-46233] (#2450)

build: update crypto-js from 4.0.0 -> 4.2.0 (CVE-2023-46233)

Co-authored-by: Matthew Strasiotto <[email protected]>

.changeset/seven-dodos-live.md

@@ -0,0 +1,5 @@
+---
+'@react-pdf/pdfkit': patch
+---
+
+build: update crypto-js from 4.0.0 -> 4.2.0 (CVE-2023-46233)

packages/pdfkit/package.json

@@ -32,7 +32,7 @@
     "@babel/runtime": "^7.20.13",
     "@react-pdf/png-js": "^2.2.0",
     "browserify-zlib": "^0.2.0",
-    "crypto-js": "^4.0.0",
+    "crypto-js": "^4.2.0",
     "fontkit": "^2.0.2",
     "vite-compatible-readable-stream": "^3.6.1"
   },

yarn.lock

@@ -4372,10 +4372,10 @@ cross-spawn@^7.0.0, cross-spawn@^7.0.3:
     shebang-command "^2.0.0"
     which "^2.0.1"
 
-crypto-js@^4.0.0:
-  version "4.0.0"
-  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.0.0.tgz#2904ab2677a9d042856a2ea2ef80de92e4a36dcc"
-  integrity sha512-bzHZN8Pn+gS7DQA6n+iUmBfl0hO5DJq++QP3U6uTucDtk/0iGpXd/Gg7CGR0p8tJhofJyaKoWBuJI4eAO00BBg==
+crypto-js@^4.2.0:
+  version "4.2.0"
+  resolved "https://registry.yarnpkg.com/crypto-js/-/crypto-js-4.2.0.tgz#4d931639ecdfd12ff80e8186dba6af2c2e856631"
+  integrity sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==
 
 cssom@^0.5.0:
   version "0.5.0"