[Snyk] Fix for 17 vulnerabilities (#4749)

* fix: package.json, package-lock.json & .snyk to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-DOTPROP-543489
- https://snyk.io/vuln/SNYK-JS-EJS-1049328
- https://snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
- https://snyk.io/vuln/SNYK-JS-HIGHLIGHTJS-1045326
- https://snyk.io/vuln/SNYK-JS-HIGHLIGHTJS-1048676
- https://snyk.io/vuln/SNYK-JS-IMMER-1019369
- https://snyk.io/vuln/SNYK-JS-NODEFETCH-674311
- https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581
- https://snyk.io/vuln/SNYK-JS-PRISMJS-1314893
- https://snyk.io/vuln/SNYK-JS-PRISMJS-597628
- https://snyk.io/vuln/SNYK-JS-REACTDEVUTILS-1083268
- https://snyk.io/vuln/SNYK-JS-SERIALIZEJAVASCRIPT-570062
- https://snyk.io/vuln/SNYK-JS-SSRI-1246392
- https://snyk.io/vuln/SNYK-JS-STRIPTAGS-1312310
- https://snyk.io/vuln/SNYK-JS-TRIMNEWLINES-1298042

The following vulnerabilities are fixed with a Snyk patch:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746

* chore: Apply Snyk recommended fixes
* chore(infra): Update `gulp-sass`, `sass`, remove `precss`
* Revert back to Storybook 5.x
* Update `package-lock`

Author: dse-infra

.gitignore

@@ -22,6 +22,7 @@
 !/.circleci
 !/.npmrc
 !/.nvmrc
+!/.snyk
 
 # Add a .gitkeep file in an empty
 # directory to check it in the repository

.snyk

@@ -0,0 +1,142 @@
+# Snyk (https://snyk.io) policy file, patches or ignores known vulnerabilities.
+version: v1.19.0
+# ignores vulnerabilities until expiry date; change duration by modifying expiry date
+ignore:
+  SNYK-JS-IMMER-1019369:
+    - '@storybook/addon-docs > @storybook/core > react-dev-utils > immer':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.182Z'
+  SNYK-JS-REACTDEVUTILS-1083268:
+    - '@storybook/addon-docs > @storybook/core > react-dev-utils':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.182Z'
+  SNYK-JS-AUTOLINKER-564438:
+    - theo > handlebars-helpers > helper-markdown > remarkable > autolinker:
+        reason: Theo is ancient
+        expires: '2021-08-08T22:14:00.182Z'
+  SNYK-JS-AUTOLINKER-73494:
+    - theo > handlebars-helpers > helper-markdown > remarkable > autolinker:
+        reason: Theo is ancient
+        expires: '2021-08-08T22:14:00.182Z'
+  SNYK-JS-BROWSERSLIST-1090194:
+    - '@storybook/addon-docs > @storybook/core > react-dev-utils > browserslist':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.182Z'
+    - '@storybook/react > @storybook/core > react-dev-utils > browserslist':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.182Z'
+  SNYK-JS-FRONTMATTER-569103:
+    - mdxc > front-matter:
+        reason: None given
+        expires: '2021-08-08T22:14:00.182Z'
+  SNYK-JS-GLOBPARENT-1016905:
+    - gulp > glob-watcher > chokidar > glob-parent:
+        reason: None given
+        expires: '2021-08-08T22:14:00.182Z'
+    - gulp > vinyl-fs > glob-stream > glob-parent:
+        reason: None given
+        expires: '2021-08-08T22:14:00.182Z'
+    - webpack > watchpack > watchpack-chokidar2 > chokidar > glob-parent:
+        reason: None given
+        expires: '2021-08-08T22:14:00.182Z'
+    - '@storybook/addon-docs > @storybook/core > cpy > globby > fast-glob > glob-parent':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.183Z'
+    - '@storybook/react > @storybook/core > cpy > globby > fast-glob > glob-parent':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.183Z'
+    - '@storybook/addon-docs > @storybook/core > webpack > watchpack > watchpack-chokidar2 > chokidar > glob-parent':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.183Z'
+    - '@storybook/react > @storybook/core > webpack > watchpack > watchpack-chokidar2 > chokidar > glob-parent':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.183Z'
+    - '@storybook/addon-docs > @storybook/core > glob-base > glob-parent':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.183Z'
+    - '@storybook/react > @storybook/core > glob-base > glob-parent':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.183Z'
+    - gulp-htmlhint > htmlhint > parse-glob > glob-base > glob-parent:
+        reason: None given
+        expires: '2021-08-08T22:14:00.183Z'
+  SNYK-JS-HIGHLIGHTJS-1048676:
+    - theo > handlebars-helpers > helper-markdown > highlight.js:
+        reason: Theo is ancient
+        expires: '2021-08-08T22:14:00.183Z'
+  SNYK-JS-LODASHTEMPLATE-1088054:
+    - gulp-util > lodash.template:
+        reason: None given
+        expires: '2021-08-08T22:14:00.184Z'
+    - gulp-debug > gulp-util > lodash.template:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - gulp-filter > gulp-util > lodash.template:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - gulp-theo > gulp-util > lodash.template:
+        reason: Theo is ancient
+        expires: '2021-08-08T22:14:00.185Z'
+    - gulp-zip > gulp-util > lodash.template:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - theo > handlebars-helpers > helper-markdown > remarkable > autolinker > gulp-header > lodash.template:
+        reason: Theo is ancient
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-MARKDOWNIT-459438:
+    - mdxc > markdown-it:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-MERGE-1040469:
+    - gulp-lintspaces > lintspaces > merge:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-MERGE-1042987:
+    - gulp-lintspaces > lintspaces > merge:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-MERGE-72553:
+    - gulp-lintspaces > lintspaces > merge:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-PATHPARSE-1077067:
+    - gulp-htmlhint > htmlhint > path-parse:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-POSTCSS-1255640:
+    - postcss-nested-props > postcss:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-SETGETTER-1303099:
+    - theo > handlebars-helpers > create-frame > lazy-cache > set-getter:
+        reason: Theo is ancient
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-TRIM-1017038:
+    - '@mdx-js/mdx > remark-parse > trim':
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - '@mdx-js/mdx > remark-mdx > remark-parse > trim':
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - '@mdx-js/loader > @mdx-js/mdx > remark-parse > trim':
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - '@mdx-js/loader > @mdx-js/mdx > remark-mdx > remark-parse > trim':
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+    - '@storybook/addon-docs > @mdx-js/loader > @mdx-js/mdx > remark-mdx > remark-parse > trim':
+        reason: Breaking change / big project
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-TRIMNEWLINES-1298042:
+    - gulp-axe-webdriver > file-url > meow > trim-newlines:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  'npm:deep-extend:20180409':
+    - gulp-lintspaces > lintspaces > rc > deep-extend:
+        reason: None given
+        expires: '2021-08-08T22:14:00.185Z'
+  SNYK-JS-CSSWHAT-1298035:
+    - '@salesforce-ux/design-system-parser > cheerio > css-select > css-what':
+        reason: None given
+        expires: '2021-08-08T22:14:00.182Z'
+patch: {}

RELEASENOTES.md

@@ -15,8 +15,8 @@
   - Rich Text Editor
   - Timepicker
 - Added SLDS scope customizer tool: `npm run slds:customizer`
-- Added new standard color palette for neutral colors (black/white/grays) 
-and updated multiple neutral colors to match new Salesforce color system
+- Added new standard color palette for neutral colors (black/white/grays)
+- Updated @salesforce-ux/icons to 10.1.1
 
 ## Components
 ### [Accordion](https://www.lightningdesignsystem.com/components/accordion)