g.js issues

Don't use vulnerable xmldom version

Also ran `npm audit fix`

Fix JSHint error. Fix PathKit support for web workers

1

When in a web worker, g.js fails to detect PathKit because it only checks in the `window` object, which is not available in web workers. This PR makes it also...

rafern

Bump shell-quote from 1.7.2 to 1.7.3

Bumps [shell-quote](https://github.com/substack/node-shell-quote) from 1.7.2 to 1.7.3. Changelog Sourced from shell-quote's changelog. 1.7.3 Fix a security issue where the regex for windows drive letters allowed some shell meta-characters to escape the...

dependabot[bot]

dependencies

Bump async from 3.2.0 to 3.2.2

Bumps [async](https://github.com/caolan/async) from 3.2.0 to 3.2.2. Changelog Sourced from async's changelog. v3.2.2 Fix potential prototype pollution exploit v3.2.1 Use queueMicrotask if available to the environment (#1761) Minor perf improvement in...

dependabot[bot]

dependencies

Bump minimist from 1.2.5 to 1.2.6

Bumps [minimist](https://github.com/substack/minimist) from 1.2.5 to 1.2.6. Commits 7efb22a 1.2.6 ef88b93 security notice for additional prototype pollution issue c2b9819 isConstructorOrProto adapted from PR bc8ecee test from prototype pollution PR See full...

dependabot[bot]

dependencies

Bump cached-path-relative from 1.0.2 to 1.1.0

Bumps [cached-path-relative](https://github.com/ashaffer/cached-path-relative) from 1.0.2 to 1.1.0. Commits See full diff in compare view [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cached-path-relative&package-manager=npm_and_yarn&previous-version=1.0.2&new-version=1.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

dependencies

Bump elliptic from 6.5.3 to 6.5.4

Bumps [elliptic](https://github.com/indutny/elliptic) from 6.5.3 to 6.5.4. Commits 43ac7f2 6.5.4 f4bc72b package: bump deps 441b742 ec: validate that a point before deriving keys e71b2d9 lib: relint using eslint 8421a01 build(deps): bump...

dependabot[bot]

dependencies

Consider introducing transform objects on Path / Group / ...

1

Currently all transformation nodes in NBL (align, translate) call transformShape, which modifies all points. It is _much_ more efficient to store a transformation matrix and to modify the matrix than...

fdb