deps: pin @tootallnate/once >=3.0.1 for security fix

Refs KEH-281

Author: jorilindell

package.json

@@ -19,6 +19,12 @@
         "That's why @testing-library/dom has been added to resolutions.",
         "NOTE: This can be removed after dependencies don't bring conflicting/old versions"
       ],
+      "@tootallnate/once": [
+        "@tootallnate/once vulnerable to Incorrect Control Flow Scoping in versions <3.0.1",
+        "Pinning to >=3.0.1 via react-helsinki-headless-cms > jest-environment-jsdom > jsdom > http-proxy-agent > @tootallnate/once",
+        "See https://www.npmjs.com/advisories/1113977",
+        "NOTE: This can be removed when react-helsinki-headless-cms no longer resolves vulnerable @tootallnate/once versions"
+      ],
       "@types/cookie": [
         "To use the last known @types/cookie version, only for <v1 cookie",
         "",
@@ -95,6 +101,7 @@
   },
   "resolutions": {
     "@testing-library/dom": "^10.4.0",
+    "@tootallnate/once": ">=3.0.1",
     "@types/cookie": "^0.6.0",
     "draft-js/immutable": "3.8.3",
     "**/@ardatan/relay-compiler/immutable": "3.8.3",

yarn.lock

@@ -2191,10 +2191,10 @@
     traverse "^0.6.7"
     unified "^9.2.2"
 
-"@tootallnate/once@2":
-  version "2.0.0"
-  resolved "https://registry.yarnpkg.com/@tootallnate/once/-/once-2.0.0.tgz#f544a148d3ab35801c1f633a7441fd87c2e484bf"
-  integrity sha512-XCuKFP5PS55gnMVu3dty8KPatLqUoy/ZYzDzAGCQ8JNFCkLXzmI7vNHCR+XpbZaMWQK/vQubr7PkYq8g470J/A==
+"@tootallnate/once@2", "@tootallnate/once@>=3.0.1":
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/@tootallnate/once/-/once-3.0.1.tgz#d580decb59cb41a15856387a86800838102daf44"
+  integrity sha512-VyMVKRrpHTT8PnotUeV8L/mDaMwD5DaAKCFLP73zAqAtvF0FCqky+Ki7BYbFCYQmqFyTe9316Ed5zS70QUR9eg==
 
 "@tybys/wasm-util@^0.10.0", "@tybys/wasm-util@^0.10.1":
   version "0.10.1"