upgrade css-minimizer-webpack-plugin to fix vulnerability YAML

[sloury]

Bump Vulnerability from dependencies YAML, after 'yarn audit'

┌───────────────┬──────────────────────────────────────────────────────────────┐
│ moderate │ Uncaught Exception in yaml │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Package │ yaml │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Patched in │ >=2.2.2 │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Dependency of │ @symfony/webpack-encore │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ Path │ @symfony/webpack-encore > css-minimizer-webpack-plugin > │
│ │ cssnano > yaml │
├───────────────┼──────────────────────────────────────────────────────────────┤
│ More info │ https://www.npmjs.com/advisories/1091814 │
└───────────────┴──────────────────────────────────────────────────────────────┘

Upgrade the package version of css-minimizer-webpack-plugin:^5.0.0 seem to fix this warning

[Kocal]

This would be a must have, actually this plugin depends of a version of CSSNano that depends of deprecated [email protected].

[weaverryan]

Thanks @sloury! And sorry for the delay. Note to anyone else checking this: while we do need to upgrade this to allow for a clean security advisory check, the underlying code with the security flaw does not appear to be anything that is used by Encore - it was related to YAML incorrectly throwing an exception when fed too much data - not relevant.