[Snyk] Fix for 1 vulnerabilities

[B020239]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

⚠️ Warning

Failed to update the package-lock.json, please update manually before merging.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: babel-loader

The new version differs by 16 commits.

• b89dfbd 9.1.3
• 54fb781 Update caniuse
• 6f300f3 bump find-cache-dir to v4 (Update about-protected-branches.md github/docs#995)
• 2fd1c0a Bump semver from 7.3.2 to 7.5.2 (Update index.md github/docs#993)
• b3682fd Add more exhaustive example on customized-loader (Describe how to re-request a review github/docs#897)
• a797c3b ci: bump actions/checkout (Fix broken link: content style guide github/docs#981)
• 170350e Bump http-cache-semantics from 4.1.0 to 4.1.1 (Docs seem to include old information on how to delete docker images from package registry. github/docs#982)
• 78bd0a1 Update README.md (Hahah github/docs#987)
• c049187 Bump webpack from 5.74.0 to 5.76.0 (Hi github/docs#986)
• 0406d16 9.1.2
• ca0cc0e Bump json5 from 2.2.1 to 2.2.3 (Put the preview notice at the top of the subsection instead of at the bottom github/docs#980)
• c8b1feb build: harden ci.yml permissions (branches.md github/docs#976)
• 4e70cca Bump qs from 6.5.2 to 6.5.3 (github-glossary.md github/docs#977)
• 15fbacf 9.1.0
• 6348e1c Pass external dependencies from Babel to Webpack (YouTube_academyfornonprofits.dev github/docs#971)
• 457b9ad Update webpack

See the full diff

Package name: nodemon

The new version differs by 30 commits.

• f219dcc test: Update release.yml to use ubuntu-latest (repo sync github/docs#2123)
• af3b9e2 fix: node@10 support back in
• a3f0e12 test: package wasn't installing
• 8ded28c docs: update test runners and add TODO
• 83ef51d chore: website supporters
• 86d5f40 fix: also watch cjs
• 7881f05 chore: remove legacy .nodemon support
• 04302b8 Merge branch 'Vindeep07-develop'
• 64c426a Merge branch 'develop' of https://github.com/Vindeep07/nodemon into Vindeep07-develop
• c13dbbb Merge branch 'Triple-Whale-main'
• 023e2d1 Merge branch 'main' of https://github.com/Triple-Whale/nodemon into Triple-Whale-main
• 725569b Merge branch 'ibmi-always-enable-polling' of https://github.com/abmusse/nodemon into abmusse-ibmi-always-enable-polling
• 6bb8766 fix: semver vuln dep
• 3b58104 feat: always use polling on IBM i
• 3681000 update simple-update-notifier
• 083b4a6 bump simple-update-notifier & semver
• 6787871 chore: web site render
• ddbc630 chore: web site render
• d585386 allow user set PATH
• 43bdacc Merge branch 'main' of github.com:remy/nodemon
• 65ad501 chore: web site render
• 75c275a chore: web site render
• 272d519 chore: web site render
• 40a8d45 chore: fix web site render

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)