one-app-bundler has dependency on old version of glob-parent

[smackfu]

🐞 Bug Report

Describe the bug

@americanexpress/one-app-bundler is dependent on [email protected] which is six years old and has security vulnerabilities.

To Reproduce

Run npm ls glob-parent from a repo using one-app-bundler.

│ └─┬ [email protected]
│   └─┬ [email protected]
│     └─┬ [email protected]
│       └─┬ [email protected]
│         └── [email protected]

Expected behavior

The package should be dependent on more recent versions of dependencies, especially for non-dev deps.

[smackfu]

This is probably not fixable without upgrading to webpack 5.

webpack@4 depends on watchpack@1. Current version of watchpack is v2, which doesn't even have a chokidar dependency anymore.

[github-actions[bot]]

This issue is stale because it has been open 30 days with no activity.

[JAdshead]

should be fixed by https://github.com/americanexpress/one-app-cli/pull/568

[github-actions[bot]]

This issue is stale because it has been open 30 days with no activity.