[Snyk] Upgrade nunjucks from 3.2.1 to 3.2.4

[WontonSam]

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade nunjucks from 3.2.1 to 3.2.4.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 3 versions ahead of your current version.

• The recommended version was released on a year ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	169	Proof of Concept
	Prototype Pollution SNYK-JS-NUNJUCKS-1079083	169	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-GLOBPARENT-1016905	169	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-NUNJUCKS-5431309	169	Proof of Concept

Release notes

Package name: nunjucks

• 3.2.4 - 2023-04-13
  

  What's Changed

  • fix: html encode backslashes if used with escape filter or autoescape by @ fdintino in #1437. Fixes CVE-2023-2142
    (bugzilla #1825980)

  Full Changelog: v3.2.3...v3.2.4

• 3.2.3 - 2021-02-15
  
  • Add support for nested attributes on sort filter; respect throwOnUndefined if sort attribute is undefined.
  • Add base arg to int filter.
  • Move chokidar to peerDependencies and mark it optional in peerDependenciesMeta.
  • Fix prototype pollution issue for template variables. Merge of #1330; fixes #1331. Thanks ChenKS12138!
• 3.2.2 - 2020-07-20
  
  • Add select and reject filters. Merge of #1278 and #1279; fixes #282. Thanks ogonkov!
  • Fix precompile binary script TypeError: name.replace is not a function. Fixes #1295.
  • Add support for nested attributes on groupby filter; respect throwOnUndefined option, if the groupby attribute is undefined. Merge of #1276; fixes #1198. Thanks ogonkov!
  • Fix bug that prevented errors in included templates from being raised when rendering templates synchronously. Fixes #1272.
  • The indent filter no longer appends an additional newline. Fixes #1231.
• 3.2.1 - 2020-03-17
  
  • Replace yargs with commander to reduce number of dependencies. Merge of #1253. Thanks AlynxZhou.
  • Update optional dependency chokidar from ^2.0.0 to ^3.3.0. Merge of #1254. Thanks eklingen.
  • Prevent optional dependency Chokidar from loading when not watching. Merge of #1250. Thanks eklingen.

from nunjucks GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[google-cla]

Thanks for your pull request! It looks like this may be your first contribution to a Google open source project. Before we can look at your pull request, you'll need to sign a Contributor License Agreement (CLA).

View this failed invocation of the CLA check for more information.

For the most up to date status, view the checks section at the bottom of the pull request.