[Snyk] Fix for 1 vulnerabilities

[enterstudio]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: loader-utils

The new version differs by 96 commits.

• 331ad50 chore(release): 1.4.2
• 17cbf8f fix: ReDoS problem ([Discussion] webpack-cli as a module webpack/webpack-cli#226)
• 8f082b3 chore(release): 1.4.1
• 4504e34 fix: security problem ([Feature] webpack-bot integration for webpack-cli webpack/webpack-cli#220)
• d95b8b5 chore(release): 1.4.0
• cd0e428 feat: the `resourceQuery` is passed to the `interpolateName` method (exclude functions in OccurrenceOrderPlugin webpack/webpack-cli#163)
• 06d36cf chore(release): 1.3.0
• 469eeba feat: support the `[query]` template for the `interpolatedName` method (webpack-cli init creates invalid path for entry unless you specify leading ./ or an abs. path webpack/webpack-cli#162)
• 909c99d chore: funding.yml config and CI fix ([Migrate] loaders transform: should options be always grouped with the loader webpack/webpack-cli#159)
• b5b74f0 Set up CI with Azure Pipelines
• 7970c48 docs: small grammar change (configuration misses the property 'entry'. webpack/webpack-cli#144)
• b91a76c chore(release): 1.2.3
• 3528fd9 fix(interpolateName): don't interpolated `hashType` without `hash` or `contenthash` (Type Error: argv._.includes('init') in Node 4.4 webpack/webpack-cli#140)
• 809b690 chore(release): 1.2.2
• d69c303 test: `interpolateName` util (fix: Install correct (es2015) babel preset to match generated config webpack/webpack-cli#138)
• f8a71f4 fix: fixed a hash type extracting in interpolateName (Feature: Webpack PWA add-on/scaffold webpack/webpack-cli#137)
• 489ef12 chore(release): 1.2.1
• 73d350a revert: PR feat: Add prettier for formatting webpack/webpack-cli#79 (webpack-cli init doesn't install webpack, uglifyjs-webpack-plugin, babel-preset-es2015 webpack/webpack-cli#135)
• aca43da fix(isUrlRequest): better handle absolute urls and non standards (Webpack CLI seems to create invalid webpack.config.js: webpack/webpack-cli#134)
• ba4f0d0 chore(release): 1.2.0 (Bug: specifying location of multi-entry app entrypoint fails webpack/webpack-cli#131)
• c5c7322 test: more (Install fails behind corporate proxy (SSH block?) webpack/webpack-cli#132)
• c17d9cd refactor: migrate on `jest` (Enhancements: Add changelog webpack/webpack-cli#130)
• 3a854ba style: integrate prettier
• 0f2b227 chore(deps): update

See the full diff

Package name: webpack

The new version differs by 176 commits.

• bf4ec9c 3.0.0
• 9feda63 Merge pull request #5028 from webpack/feature/externalize_uglify_plugin
• 49d6e38 Merge pull request #5086 from webpack/ci/node-8
• 3dcb133 OSX test on node.js 8
• f4b8785 Merge pull request #5012 from webpack/TheLarkInn-patch-1
• d26c402 chore(deps): upgrade uglifyjs-webpack-plugin deps to get latest webpack-sources so tests pass
• 3da4f3e Merge pull request #5085 from jbellenger/jbellenger/rawmodule-hash
• 8c9dc14 fix RawModule hashing
• c2c5d73 Update README.md
• 316d4b9 Merge pull request #5084 from timse/remove-duplicate-code
• ae18552 update test case with changed hash due to less clutter in dependencies
• fc20348 unite iteration through modules into one loop
• 083843e remove code that pushes arrays of dependencies into dependencies
• ab636b0 Merge pull request #5075 from andreipfeiffer/master
• 3b3449c Refactor: use const for non reassignable identifier
• 2ba0499 3.0.0-rc.2
• 1769fa2 Merge pull request #5064 from webpack/feature/scope-hoisting-multi-entry
• a73646a Merge pull request #5060 from mikesherov/reason-chunks-as-set
• 28f826a consistent order
• 8a30188 use Set for ModuleReason chunk rewriting
• 5d4ba56 Allow scope hoisting to process modules in multiple chunks
• d6a7594 harmony modules without exports have no exports instead of unknown
• 3ae782d Merge pull request #5049 from KTruong888/ES6_refactoring_multicompiler
• 18cdba8 4099_ES6 refactor lib/MultiCompiler.js

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)