Merge branch 'main' into g-consulting-update

SECURITY.md

@@ -0,0 +1,45 @@
+# Security Policy
+
+As a U.S. Government agency, the General Services Administration (GSA) takes
+seriously our responsibility to protect the public's information, including
+financial and personal information, from unwarranted disclosure.
+
+## Reporting a Vulnerability
+
+Services operated by the U.S. General Services Administration (GSA)
+are covered by the **GSA Vulnerability Disclosure Program (VDP)**.
+
+See the [GSA Vulnerability Disclosure Policy](https://gsa.gov/vulnerability-disclosure-policy)
+at <https://www.gsa.gov/vulnerability-disclosure-policy> for details including:
+
+* How to submit a report if you believe you have discovered a vulnerability.
+* GSA's coordinated disclosure policy.
+* Information on how you may conduct security research on GSA developed
+  software and systems.
+* Important legal and policy guidance.
+
+### [Bug Bounties](https://hackerone.com/gsa_bbp)
+
+Certain GSA/TTS programs have bug bounties that are not discussed at the above link. If you find security issues for any of the following domains:
+
+* cloud.gov
+* search.gov
+* usa.gov
+* 18f.gov
+* fedramp.gov
+* login.gov
+* vote.gov
+
+you should also review the [GSA Bug Bounty program](https://hackerone.com/gsa_bbp) at <https://hackerone.com/gsa_bbp/> for a potential bounty.
+
+## Supported Versions
+
+Please note that only certain branches are supported with security updates.
+
+| Version (Branch) | Supported          |
+| ---------------- | ------------------ |
+| main             | :white_check_mark: |
+| other            | :x:                |
+
+When using this code or reporting vulnerabilities please only use supported
+versions.

package.json

@@ -22,7 +22,7 @@
     "@11ty/eleventy": "^2.0.1",
     "@11ty/eleventy-img": "^3.1.8",
     "@uswds/uswds": "^3.8.0",
-    "autoprefixer": "^10.4.18",
+    "autoprefixer": "^10.4.19",
     "eleventy-plugin-svg-sprite": "^2.4.2",
     "esbuild": "^0.19.12",
     "esbuild-sass-plugin": "^2.16.1",
@@ -32,7 +32,7 @@
     "markdown-it": "^13.0.2",
     "markdown-it-anchor": "^8.6.7",
     "markdown-it-attrs": "^4.1.6",
-    "postcss": "^8.4.36",
+    "postcss": "^8.4.38",
     "postcss-cli": "^10.0.0"
   },
   "devDependencies": {