[Snyk] Upgrade govuk-frontend from 4.3.1 to 4.9.0

[beclamide]

Snyk has created this PR to upgrade govuk-frontend from 4.3.1 to 4.9.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 7 versions ahead of your current version.

• The recommended version was released on 24 days ago.

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8187303	614	Proof of Concept

Release notes

Package name: govuk-frontend

• 4.9.0 - 2024-10-10
  

  To install this version with npm, run npm install [email protected]. You can also find more information about how to stay up to date in our documentation.

  New features

  The Royal Arms has been updated

  The Royal Arms in the GOV.UK footer has been updated to reflect the version introduced by King Charles III.

  You should ensure that the new image is being copied to your service's image assets folder if it's not being used directly from the Frontend package. By default this folder is located at /assets/images.

  If you’re using Nunjucks, the asset path may have been changed by the assetPath global variable or assetsPath parameter on the header component.

  Copy the following files from /dist/assets/images into your assets folder. You can safely overwrite the old images.

  • govuk-crest.png
  • [email protected]

  We introduced this change in pull request #5383: Update the Royal Arms graphic in footer (v4.x).

  Fixes

  We’ve made fixes to GOV.UK Frontend in the following pull requests:

  • #5127: Remove direct links to Polyfill[dot]io
• 4.8.0 - 2024-02-05
• 4.7.0 - 2023-07-06
• 4.6.0 - 2023-04-20
• 4.5.0 - 2023-01-31
• 4.4.1 - 2022-12-16
• 4.4.0 - 2022-11-14
• 4.3.1 - 2022-08-18

from govuk-frontend GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs