[Snyk] Upgrade @formatjs/intl-locale from 2.4.21 to 2.4.36

[snyk-bot]

Snyk has created this PR to upgrade @formatjs/intl-locale from 2.4.21 to 2.4.36.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2021-08-15.

Release notes

Package name: @formatjs/intl-locale

• 2.4.36 - 2021-08-15
• 2.4.35 - 2021-08-06
• 2.4.34 - 2021-07-24
• 2.4.33 - 2021-06-26
• 2.4.32 - 2021-06-05
• 2.4.31 - 2021-06-05
• 2.4.30 - 2021-06-04
• 2.4.29 - 2021-06-01
• 2.4.28 - 2021-05-23
• 2.4.27 - 2021-05-20
• 2.4.26 - 2021-05-17
• 2.4.25 - 2021-05-14
• 2.4.24 - 2021-05-10
• 2.4.23 - 2021-04-26
• 2.4.22 - 2021-04-12
• 2.4.21 - 2021-03-26

from @formatjs/intl-locale GitHub release notes

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[Beamanator]

I looked at a few releases here and found the notes to mostly be Note: Version bump only for package @formatjs/intl-locale

I think nothing of interest changed, so might as well bump the version

[Beamanator]

I guess this isn't fixing any vulnerability, so @marcaaron do you think I should just close this? (coming from your comment here)

[marcaaron]

Closing because I don't think Snyk should be creating PRs and might mean someone accidentally enabled this feature.

[marcaaron]

I am actually confused about why these PRs are being created. We should only update dependencies that have medium-high vulnerabilities. AFAIK this process has not changed. Which means someone accidentally turned on the auto-fix PRs or there's something wrong with Synk's service or something else...

[Beamanator]

Yeah I was reading that and got a bit confused since these PRs didn't mention anything about vulnerabilities, just version bumps