dash4 [Snyk] Fix for 1 vulnerabilities

[Snyk] Fix for 1 vulnerabilities

Open smollweide opened this issue 2 years ago • 0 comments

This PR was automatically created by Snyk using the credentials of a real user.

Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- packages/config/package.json

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: html-webpack-plugin

The new version differs by 72 commits.

74fae99 chore(release): 5.0.0
94a20df chore: update to webpack 5.20.0
c5c8212 feat: add meta attribute for html tags
d0ab774 feat: provide public path to the alterAssetTagGroups hook
5200ae6 feat: provide public path to the alterAssetTags hook
ccbe93a chore: update examples to latest webpack version
33cbd59 fix: generate html files even if no webpack entry exists
826739f feat: allow to use the latest loader-utils and tapable version
81d7b2c feat: add typings for options and version
8d34b81 fix: use correct casing for webpack type import
36f9aca chore: upgrade dev dependencies
1755962 chore: fix css-loader for unit testing
a79ab17 chore: drop support for appcache-webpack-plugin as it is not compatible to webpack 5
7c3146d feat: allow to set publicPath to empty string ’’
b109213 docs: update installation instructions for webpack 4
833b46b fix: inject javascripts in the <head> tag for inject:true and scriptLoading:'defer'
13af0fb feat: add full support for public paths inside templates
fd5fe58 refactor: move the publicPath generation into a seperate function
60a6ef8 test: add test for experiments: { outputModule: true }
a43ab72 feat: overrule module output
10a0c5e fix: adjust tests as webpack 5 will no longer emit files for builds with errors
2975a6a feat: process html during the processAssets stage PROCESS_ASSETS_STAGE_OPTIMIZE_INLINE
0f9c239 fix: add support for publicPath: 'auto' in combination with type: 'asset/resource'
ab8b195 fix: support loaders like raw-loader

Package name: scss-config-webpack-plugin

The new version differs by 29 commits.

18fed84 v2.0.2
69d135e chore: add package-lock
692741d Merge pull request #84 from namics/fix/maintenance
5ef2bb5 fix(scss-config-webpack-plugin): update dependencies
fa640e4 chore: bump deps
c6afb4a chore: remove outdated contributors infos in favor of contributors overview in GitHub
af02ef3 chore: bump deps
f4a4e11 fix(scss-config-webpack-plugin): update postcss dependencies
22ee31a fix(scss-config-webpack-plugin): update dependencies
b7a5519 ci: split up test and performance actions
a6a6382 ci: Use GitHub Actions
ed28c42 chore: use current node lts version
0103242 style: prettify
632a08d fix: update dependencies
95e6847 chore: bump dev deps
eeb274a chore: bump dev deps
fae0cdb fix(ts-config-webpack-plugin): update dependencies
3aa2c89 chore: bump lerna
10a3dc3 fix(image-config-webpack-plugin): update dependencies
4b3584b fix(font-config-webpack-plugin): update dependencies
52d7168 chore: bump dev deps
9cf2dfa chore: improve update-script
203965f ci: remove unneeded bootstrap task
db8a62d ci: update travis and appveyor config

Package name: ts-config-webpack-plugin

The new version differs by 29 commits.

18fed84 v2.0.2
69d135e chore: add package-lock
692741d Merge pull request #84 from namics/fix/maintenance
5ef2bb5 fix(scss-config-webpack-plugin): update dependencies
fa640e4 chore: bump deps
c6afb4a chore: remove outdated contributors infos in favor of contributors overview in GitHub
af02ef3 chore: bump deps
f4a4e11 fix(scss-config-webpack-plugin): update postcss dependencies
22ee31a fix(scss-config-webpack-plugin): update dependencies
b7a5519 ci: split up test and performance actions
a6a6382 ci: Use GitHub Actions
ed28c42 chore: use current node lts version
0103242 style: prettify
632a08d fix: update dependencies
95e6847 chore: bump dev deps
eeb274a chore: bump dev deps
fae0cdb fix(ts-config-webpack-plugin): update dependencies
3aa2c89 chore: bump lerna
10a3dc3 fix(image-config-webpack-plugin): update dependencies
4b3584b fix(font-config-webpack-plugin): update dependencies
52d7168 chore: bump dev deps
9cf2dfa chore: improve update-script
203965f ci: remove unneeded bootstrap task
db8a62d ci: update travis and appveyor config

Package name: webpack

The new version differs by 250 commits.

610f368 5.0.0
5ce65c1 update examples
bbe1230 Merge pull request #11628 from webpack/bugfix/real-content-hash
75ecff2 5.0.0-rc.6
bfc35d6 Merge pull request #11603 from MayaWolf/master
76e8cbd Merge pull request #11622 from webpack/dependabot/npm_and_yarn/types/node-13.13.25
9fd1be2 chore(deps-dev): bump @ types/node from 13.13.23 to 13.13.25
36bcfaa Merge pull request #11621 from webpack/bugfix/11619
9130d10 fix called variables with ProvidePlugin
3e42105 Merge pull request #11620 from webpack/bugfix/11617
4709719 skip connections copied to concatenated module
57b493f 5.0.0-rc.5
1658e2f Merge pull request #11618 from webpack/bugfix/11615
a8fb45d fixes crash in SideEffectsFlagPlugin
84b196d emit error instead of crashing when unexpected problem occurs
5573fed Merge pull request #11601 from Hornwitser/improve-suggested-polyfill-config
9b5cce9 Merge pull request #11609 from snitin315/export-types
37c495c export type RuleSetUseItem
39faf34 export type RuleSetUse
e5fd246 export type RuleSetConditionAbsolute
660baad export RuleSetCondition types
13e3ca5 Merge pull request #11602 from webpack/bugfix/shared-runtime-chunk
9c0587e Merge pull request #11606 from webpack/dependabot/npm_and_yarn/simple-git-2.21.0
502d166 Merge pull request #11607 from webpack/dependabot/npm_and_yarn/acorn-8.0.4