fix: update dependencies with vulnerabilities

CHANGELOG.md

@@ -1,10 +1,16 @@
 # CHANGELOG
 
-# 6.0.1
+## UNRELEASED
+
+- Update (sub-)dependencies
+  - cross-spawn to 7.0.6
+  - micromatch to 4.0.8
+
+## 6.0.1
 
 - Updates braces to 3.0.3
 
-# 6.0.0
+## 6.0.0
 
 - Update to node v18
 
@@ -14,7 +20,7 @@
   - Update eslint-plugin-prettier to next major version
   - Other minor dependency updates
 
-# 5.0.0
+## 5.0.0
 
 - Patch exploit where additional CSS rules could be inserted by
   appending them to a rule's value with `&`, `<` or `>`
@@ -24,14 +30,14 @@ _Breaking Changes_
 - No longer allow `\` in values for CSS rules
 - No longer allow `<` or `>` in values for CSS rules
 
-# 4.0.0
+## 4.0.0
 
 _Breaking Changes_
 
 - Ignore `DOMException` errors when calling `insertRule` while
   inserting stylesheet
 
-# 3.0.0
+## 3.0.0
 
 - Add typescript types
 
@@ -41,13 +47,13 @@ _Breaking Changes_
 - Throw any errors that are not `SyntaxError` when calling
   `insertRule` while inserting stylesheet
 
-# 2.0.0
+## 2.0.0
 
 _Breaking Changes_
 
 - change `injectWithBlacklist` to `injectWithBlocklist`
 - change `injectWithWhitelist` to `injectWithAllowlist`
 
-# 1.0.0
+## 1.0.0
 
 - Initial release