[Snyk] Fix for 1 vulnerabilities

[eitanno]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: babel-loader

The new version differs by 41 commits.

• 1a76476 7.0.0
• 7307226 Point changelog to releases
• 174cb10 Merge branch '7.0'
• 2204871 Add prettier (#409)
• dbec80d Make sure .babelrc is a file, not a directory (#427)
• aa485e4 Use bash codecov (#440)
• 16522b6 yarn.lock
• 660922b Update ava to the latest version 🚀 (#434)
• 5d248b5 Update cross-env to the latest version 🚀 (#431)
• 74ff2e6 Updated documentation to match webpack v2 changes. (#438)
• ed8711d Add note about webpack versions
• a7342de 7.0.0-beta.1
• fb8c271 Merge branch 'fix-options' into 7.0
• 1ed7ff5 Merge branch 'master' into 7.0
• e20f6b6 Changelog for 6.4.1 (#424)
• 87e4e85 target node 4 in preset env (#423)
• 05a31c5 7.0.0-alpha.3
• ad77367 Ensure options are always an object (#413)
• e8aa302 Ensure options are always an object
• b9209e7 7.0.0-alpha.2
• 3f51915 Update yarn.lock
• c18b16a Fix merge conflict
• 906ab55 Merge branch 'master' into 7.0
• 70c8c4a Merge branch 'master' into 7.0

See the full diff

Package name: extract-text-webpack-plugin

The new version differs by 126 commits.

• 5268d14 chore(release): 2.0.0
• 518e54d Merge pull request #429 from helloyou2012/master
• 16e7601 fix deprecation warning (close #427)
• a078c82 Merge pull request #419 from webpack-contrib/d3viant0ne-JSFMaintainers
• facb563 docs(readme): updates for JSF maintainers
• b755a1f Merge pull request #414 from ShinyChang/patch-1
• 28dca8a Update README.md
• 261df23 Merge pull request #402 from webpack-contrib/remove-remove-and-do-dependency
• 6d42658 Merge pull request #400 from GeorgeTaveras1231/patch-1
• ad44d20 Merge pull request #411 from BorodinDemid/patch-1
• 78d0947 Merge pull request #413 from scottdj92/master
• 3d9f857 fix typo in readme
• 7097a1d make extracting Sass/LESS more clear
• 91befda Merge pull request #394 from pndewit/master
• c307def Merge pull request #395 from billgo/patch-1
• 61c5672 Update README.md
• 002c887 Merge pull request #409 from simon04/patch-1
• 52950f3 README: add install instructions for webpack 2
• a768464 inline removeAndDo dep to webpack internal lib
• 15dbccb Adhere to module schema in README
• ca96b7b Update README.md
• 9311650 docs - adds array type for options.use and options.fallback
• e831507 2.0.0-rc.3
• d279b25 Merge pull request #391 from bebraw/ignore-fix

See the full diff

Package name: file-loader

The new version differs by 28 commits.

• 5d8f73e chore(release): 0.10.1
• a8358a0 fix(getOptions): deprecation warn in loaderUtils (#129)
• b01526a Merge pull request #123 from simon04/master
• 32aada7 Remove license link
• 2d239df chore(release): 0.10.0
• ba2e876 ci(Travis): update to webpack standard build
• d82e8de docs(readme): update urls for contrib move
• eaeaa0e docs(readme): fix icon url
• 6fec719 chore(release): add standard version & documentation
• 3e5985a docs(readme): fix maintainers section look
• b5ea427 chore(readme): Update to webpack standard format
• 1462d4b chore(license): add js foundation LICENSE file
• 6833c70 feat(resources): specify custom public file name
• 0727efe chore(issues): add issue templates
• 9fdd47e Add -loader suffix to README to reflect new loader syntax webpack 2 requirement
• 162c8fa 0.9.0
• f21695e Merge pull request [Snyk] Security upgrade webpack from 5.62.1 to 5.94.0 #41 from kossnocorp/patch-1
• 6dd8c0d Merge pull request Fix for #29 deleting app via UI not working fnproject/ui#47 from tedpennings/patch-2
• 6a0317e added missing piece from [Snyk] Fix for 16 vulnerabilities #42
• 5ae3077 Merge branch 'public-path' Update Apps to use V2 API fnproject/ui#57
• dba9318 Merge pull request Bugfix/52 app details v2 support and metrics fix fnproject/ui#58 from mrpoptart/patch-1
• 0241876 Merge pull request Add unit tests to Fn UI fnproject/ui#74 from elyobo/optional-emit
• 20c8fff Make emitting a file optional.
• 011fa30 Update README.md

See the full diff

Package name: postcss-loader

The new version differs by 130 commits.

• 7b5bda5 Release 1.3.2 version
• d1f811e Update dependencies
• 519a8c0 fix deprecated warning (#178)
• aab8226 Release 1.3.1 version
• 148e1c0 Update dependencies
• d51afd9 Do not load config file from `--config` (#174)
• dbb597e Update postcss-load-config v1.1.0...1.2.0
• 5a29e1b Release 1.3 version
• 1147cb8 Update dependencies
• 8c897ca don't force internal requires of options (#171)
• db51682 Release 1.2.2 version
• 72a245c Update dependencies
• 0c8c07d Watch Config (postcss.config.js) (#161)
• 526df91 Fix docs sections
• 64b370a Add webpack 2 docs
• adedf78 Better tests for custom syntaxes
• 37e25aa Update dependencies
• b66a294 Merge pull request #154 from komlev/master
• b73cfc8 Fixing grammar issues in README.md
• bf0d7ee Adding description of using postcss-js parser with babel 6 compiler
• 19011fb Release 1.2.1 version
• 11baf61 Update dependencies
• f0fb3f1 Allow absolute path as config option (#147)
• 3b6e991 Release 1.2 version

See the full diff

Package name: vue-loader

The new version differs by 27 commits.

• 8413468 11.1.1
• 9366d81 small tweak
• 1d63e9e fix deprecation warning (close #666) (#671)
• d9e511f Fix typo in start/spec section (#658)
• 8397d72 Missing word (#650)
• cd9cce9 [docs] pt_BR Updated (#656)
• a74d715 11.1.0
• 681f4dc support hashKey option (close #645)
• 8fabadb mark deprecated feature
• 1469aff Change occurence to occurrence (#655)
• 9bf7649 Do not load config file from `--config` (#653)
• 3872eaa Updated (#652)
• 3414e3a [DONE][Just Merge Me][Community Translation] Russian Docs Translation (#587)
• f99c329 Minor fixes and updates (#643)
• 94baaad 11.0.0
• 8e38245 compatibility with HappyPack
• 0afde0e Translation into portuguese. (#629)
• 5668070 improve stringifyLoaders to handle objects
• 892aa3d Fix typo (#639)
• e3390f8 Update extract-css.md (#633)
• 375c0c7 `extract-text-webpack-plugin@>=2` api changed (#632)
• c1778ff tweak parser warning output
• 9e06970 docs for postcss config
• 9b65ed1 support loading postcss config file (close #585)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)