judo-heroes icon indicating copy to clipboard operation
judo-heroes copied to clipboard

[Snyk] Security upgrade babel-loader from 6.4.1 to 7.1.0

Open snyk-bot opened this issue 4 years ago • 0 comments

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

  • Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
    • package.json

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764
Yes Proof of Concept
Commit messages
Package name: babel-loader The new version differs by 54 commits.
  • d249119 7.1.0
  • ea9b4d4 Update yarn.lock
  • 7986787 chore(package): update eslint-config-babel to version 7.0.0 (#469)
  • ee40748 chore(package): update lint-staged to version 4.0.0 (#470)
  • 66784e4 Update to webpack 3 (#471)
  • 8544ffa Only base cache identifier on babel options from pkg.json (#468)
  • ea2eafa Add prettier eslint plugin (#466)
  • 4548169 Add node 8 to test matrix (#467)
  • d8b73c0 fix(resolve-rc): look for babel in package.json and .babelrc.js (#465)
  • 8d96c1f Remove outdated examples.
  • 91f2658 Fixed: watch configuration files. (#460)
  • de2d3f3 Upgrade dependencies
  • 37e63e3 Upgrade find-cache-dir to 1.0 and cross-env to 5.0 (#457)
  • 1a76476 7.0.0
  • 7307226 Point changelog to releases
  • 174cb10 Merge branch '7.0'
  • 2204871 Add prettier (#409)
  • dbec80d Make sure .babelrc is a file, not a directory (#427)
  • aa485e4 Use bash codecov (#440)
  • 16522b6 yarn.lock
  • 660922b Update ava to the latest version 🚀 (#434)
  • 5d248b5 Update cross-env to the latest version 🚀 (#431)
  • 74ff2e6 Updated documentation to match webpack v2 changes. (#438)
  • ed8711d Add note about webpack versions

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

snyk-bot avatar Mar 12 '20 01:03 snyk-bot