Update KaTeX to fix several CVEs
What does this MR do and why?
This updates KaTeX to fix a number of CVEs. Our configuration is secure enough so that we weren't vulnerable (see issue in the references below) to the XSS one and the others aren't really issues for us therefore we can update like this without backporting.
References
Please include cross links to any resources that are relevant to this MR. This will give reviewers and future readers helpful context to give an efficient review of the changes introduced.
- Issue and some discussion: https://gitlab.com/gitlab-org/gitlab/-/issues/510622
Vulnerability reports
- https://gitlab.com/gitlab-org/gitlab/-/security/vulnerabilities/112222247
- https://gitlab.com/gitlab-org/gitlab/-/security/vulnerabilities/112222246
- https://gitlab.com/gitlab-org/gitlab/-/security/vulnerabilities/112222249
Breaking changes will be listed here, seems minimal for us
- https://github.com/KaTeX/KaTeX/releases/tag/v0.14.0
- https://github.com/KaTeX/KaTeX/releases/tag/v0.15.0
- https://github.com/KaTeX/KaTeX/releases/tag/v0.16.0
MR acceptance checklist
Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.
Screenshots or screen recordings
N/A
How to set up and validate locally
N/A