🎩 What? Why?

Creating the test application, the NPM installer in the decidim:upgrade or decidim:webpacker:install tasks is revealing that there are a number of npm packages that have security issues:

15 vulnerabilities (11 moderate, 4 high)

This PR aims to reduce the number libraries vulnerable.

5 vulnerabilities (1 moderate, 4 high)

Additionally the following PRs will reduce further the number of reported vulnerabilities :

• Replace graphql-docs npm package with gem  #8631
• Upgrade Bootstrap Tags Input #8672
• Remove "leaflet-svgicon" npm dependency  #8673

📌 Related Issues

Link your PR to an issue

• Related to Replace graphql-docs npm package with gem  #8631
• Related to Upgrade Bootstrap Tags Input #8672
• Related to Remove "leaflet-svgicon" npm dependency  #8673

Testing

Describe the best way to test or validate your PR.

📋 Checklist

🚨 Please review the guidelines for contributing to this repository.

• ❓ CONSIDER adding a unit test if your PR resolves an issue.
• ✔️ DO check open PR's to avoid duplicates.
• ✔️ DO keep pull requests small so they can be easily reviewed.
• ✔️ DO build locally before pushing.
• ✔️ DO make sure tests pass.
• ✔️ DO make sure any new changes are documented in docs/.
• ✔️ DO add and modify seeds if necessary.
• ✔️ DO add CHANGELOG upgrade notes if required.
• ✔️ DO add to GraphQL API if there are new public fields.
• ✔️ DO add link to MetaDecidim if it's a new feature.
• ❌AVOID breaking the continuous integration build.
• ❌AVOID making significant changes to the overall architecture.

📷 Screenshots

Please add screenshots of the changes you're proposing

♥️ Thank you!