USWDS-Site: Fix snyk errors

[amyleadem]

Summary

Updated snyk ignore files

Problem statement

npx snyk test is throwing the following error:

Issues with no direct upgrade or patch:
  ✗ Uncontrolled resource consumption [High Severity][https://security.snyk.io/vuln/SNYK-JS-BRACES-6838727] in [email protected]
    introduced by @uswds/[email protected] > [email protected] > [email protected] > [email protected] > [email protected] > [email protected] and 7 other path(s)
  No upgrade or patch available
  ✗ Inefficient Regular Expression Complexity [High Severity][https://security.snyk.io/vuln/SNYK-JS-MICROMATCH-6838728] in [email protected]
    introduced by @uswds/[email protected] > [email protected] > [email protected] > [email protected] > [email protected] and 6 other path(s)
  No upgrade or patch available

Solution

Updated snyk ignore. Ran the following in the command line:

npx snyk ignore --id="SNYK-JS-BRACES-6838727" --reason="No available upgrade or patch"
npx snyk ignore --id="SNYK-JS-MICROMATCH-6838728" --reason="No available upgrade or patch"

To keep all snyk ignores on the same schedule, I also ran the following:

npx snyk ignore --id="SNYK-JS-UNSETVALUE-2400660" --reason="No available upgrade or patch"
npx snyk ignore --id="SNYK-JS-ANSIREGEX-1583908" --reason="No available upgrade or patch"
npx snyk ignore --id="SNYK-JS-INFLIGHT-6095116" --reason="No available upgrade or patch" 

Testing and review

To test, run npx snyk test and check for errors.

Reference

Ignoring Snyk alerts (Google docs 🔒)

[mahoneycm]

Lgtm! Should we add an issue to uswds-compile to look into updating these dependencies to resolve these issues?

Looking into it, it looks like it might be resolved by updating Gulp to 5.0.0. We can use uswds/uswds-compile#99 to track