Bump tough-cookie and tangy-form in /content-sets/custom-app

[dependabot]

Removes tough-cookie. It's no longer used after updating ancestor dependency tangy-form. These dependencies need to be updated together.

Removes tough-cookie

Updates tangy-form from 4.25.0 to 4.41.1

Release notes

Sourced from tangy-form's releases.

v4.41.1

• Removed (unsupported) wct-browser-legacy, which has dependencies that are critical security risks. Tested using https://github.com/Polymer/tools/tree/master/packages/web-component-tester for tests, which has less risk, but still some issues. Tests currently throw errors. The web-component-tester lib is now in package.json devDependencies.
• Added config file for npm-package-json-lint, which lints package.json.
• Removed iron-icon from package.json - is a dep of iron-icons.

v4.41.0

• Removed (unsupported) wct-browser-legacy, which has dependencies that are critical security risks. Tested using https://github.com/Polymer/tools/tree/master/packages/web-component-tester for tests, which has less risk, but still some issues. Tests currently throw errors. The web-component-tester lib is now in package.json devDependencies.
• Added config file for npm-package-json-lint, which lints package.json.

v4.40.0

• Add 'archived' flag to tangy inputs to allow archiving and unarchiving of form responses

v4.39.3

Fix "Cannot read properties of null (reading 'getTracks')" error. Commit 8e4c7c4446161dbafc8c115f788916cba1f1e0e4

v4.39.2

• fixed poor logic for noVideoConstraints property (tangy-video-capture).

v4.39.1

• fixed bug (extra bracket) with tangy-video-capture, commit #f53a353697e8dc02e83802b01bb05aa05f9648f9

v4.39.0

• fix(tangy-untimed-grid): Add tangy element styles to allow skipping of untimed grid. #384
• Fix bad API use in tangy-video-capture - fixed constraints for video and audio when using noVideoConstraints and frontCamera properties. #380
• Bump json5 from 1.0.1 to 1.0.2 #385
• Bump lit from 2.4.0 to 2.6.1 #388
• Bump devtools-detect from 4.0.0 to 4.0.1 #382
• Bump decode-uri-component from 0.2.0 to 0.2.2 #381
• Many updates to core packages.
• If running on a Mac with the M1 processor, you must run node node_modules/polymer-cli/node_modules/wd/scripts/build-browser-scripts.js in order to avoid the error cli runtime exception: Error: Cannot find module '../build/safe-execute' when testing with npm test.

v4.38.3

• fix(record-audio): Request permissions for recording audio #375

v4.38.2

• fix(custom-scoring): Add custom scoring logic property #372
• Upgrade lit to v2.4.0 and signature_pad to v4.1.0.
• Updated tangy-gate custom element to use new lit version.

v4.38.1

• Set init property values for frontCamera and noVideoConstraints to false for tangy-video-capture.

v4.38.0

Bump the following dependencies: polymer, prismjs, translation-web-component, webcomponentsjs, redux, signature_pad

v4.37.1

Add protection to scoring if no inputs are defined

v4.37.0

... (truncated)

Changelog

Sourced from tangy-form's changelog.

v4.41.1

• Removed (unsupported) wct-browser-legacy, which has dependencies that are critical security risks. Tested using https://github.com/Polymer/tools/tree/master/packages/web-component-tester for tests, which has less risk, but still some issues. Tests currently throw errors. The web-component-tester lib is now in package.json devDependencies.
• Added config file for npm-package-json-lint, which lints package.json.
• Removed iron-icon from package.json - is a dep of iron-icons.

v4.40.0

• Add 'archived' flag to tangy inputs to allow archiving and unarchiving of form responses

v4.39.3

• Fix "Cannot read properties of null (reading 'getTracks')" error. Commit 8e4c7c4446161dbafc8c115f788916cba1f1e0e4

v4.39.2

• fixed poor logic for noVideoConstraints property (tangy-video-capture).

v4.39.1

• fixed bug (extra bracket) with tangy-video-capture, commit #f53a353697e8dc02e83802b01bb05aa05f9648f9

v4.39.0

• fix(tangy-untimed-grid): Add tangy element styles to allow skipping of untimed grid. #384
• Fix bad API use in tangy-video-capture - fixed constraints for video and audio when using noVideoConstraints and frontCamera properties. #380
• Bump json5 from 1.0.1 to 1.0.2 #385
• Bump lit from 2.4.0 to 2.6.1 #388
• Bump devtools-detect from 4.0.0 to 4.0.1 #382
• Bump decode-uri-component from 0.2.0 to 0.2.2 #381
• Many updates to core packages.
• If running on a Mac with the M1 processor, you must run node node_modules/polymer-cli/node_modules/wd/scripts/build-browser-scripts.js in order to avoid the error cli runtime exception: Error: Cannot find module '../build/safe-execute' when testing with npm test.

v4.38.3

• fix(record-audio): Request permissions for recording audio #375

v4.38.2

• fix(custom-scoring): Add custom scoring logic property #372
• Upgrade lit to v2.4.0 and signature_pad to v4.1.0.
• Updated tangy-gate custom element to use new lit version.

v4.38.1

• Set init property values for frontCamera and noVideoConstraints to false for tangy-video-capture.

v4.38.0

• Bump the following dependencies: polymer, prismjs, translation-web-component, webcomponentsjs, redux, signature_pad

v4.37.1

• Add protection to scoring if no inputs are defined

v4.37.0

• Add automatic scoring functionality for sections that have the scoring-section property set. PR: 364
• Allow users to record audio when capturing video. The new 'recordAudio' attribute to tangy-video-capture input adds audio to the video capture. PR: #363
• Updates to the following libs: terser, moment, xzing.

... (truncated)

Commits

• 5391cc6 4.41.1
• d1c4a98 Changelog for v4.41.1
• 8626339 Removed iron-icon from package.json - is a dep of iron-icons.
• b786e16 Updated GH Action workflow to node 16
• 0cc2881 4.41.0
• 937e116 4.40.0
• fa14b38 Replaced (unsupported) wct-browser-legacy with web-component-tester.
• bb51a30 Merge pull request #408 from Tangerine-Community/add-archived-to-tangy-form-r...
• 0174492 Update CHANGELOG
• 65fcc45 Add 'archived' to TangyFormResponseModel
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.