[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • {{cookiecutter.project_slug}}/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: webpack

The new version differs by 250 commits.

• 213226e 4.0.0
• fde0183 Merge pull request #6081 from webpack/formating/prettier
• b6396e7 update stats
• f32bd41 fix linting
• 5238159 run prettier on existing code
• 518d1e0 replace js-beautify with prettier
• 4c25bfb 4.0.0-beta.3
• dd93716 Merge pull request #6296 from shellscape/fix/hmr-before-node-stuff
• 7a07901 Merge pull request #6563 from webpack/performance/assign-depth
• c7eb895 Merge pull request #6452 from webpack/update_acorn
• 9179980 Merge pull request #6551 from nveenjain/fix/templatemd
• e52f323 optimize performance of assignDepth
• 6bf5df5 Fixed template.md
• 90ab23a Merge branch 'master' into fix/hmr-before-node-stuff
• b0949cb add integration test for spread operator
• 39438c7 unittest now also walks the ast
• 15ab027 Merge pull request #6536 from jevan0307/sideEffects-selectors
• 1611ce1 Merge pull request #6561 from joshunger/patch-1
• 6e175bc Merge pull request #6549 from webpack/md4_hash
• 0637531 Add a hyperlink to create a new issue
• 0e1f9c6 Merge pull request #6554 from webpack/deps/end-of-beta
• 72477f4 upgrade versions to stable versions
• ed30285 Merge pull request #6546 from webpack/bot/review-permission
• 40ee8c7 Use MD4 for hashing

See the full diff

Package name: webpack-bundle-tracker

The new version differs by 60 commits.

• 6184f67 Merge pull request [Snyk] Security upgrade python from 3.5 to 3.9.5 #92 from django-webpack/update-package
• b0d68c0 Fix packages vulnerabilities
• 5b82c7a Fix breaking tests
• 794b6fd Update dependencies
• 78a1bb4 Update tests
• 07ee268 Merge pull request [Snyk] Security upgrade python from 3.5 to 3.10.0b4 #91 from django-webpack/output-tracker-file
• 28491b7 Merge pull request [Snyk] Security upgrade python from 3.5 to 3.7.10 #71 from gilmrjc/typo-on-compile-status
• 5f57ac0 Merge pull request [Snyk] Security upgrade python from 3.5 to 3.7.10 #55 from sman591/adjust-types
• 6615314 Merge pull request [Snyk] Security upgrade webpack-dev-server from 2.11.5 to 4.7.3 #76 from andersk/typings
• d60561d Merge pull request [Snyk] Security upgrade python from 3.5 to 3.10.0b2 #77 from andersk/tests
• 51dfab5 Change outputTrackerFile path
• 734a666 Merge pull request [Snyk] Security upgrade python from 3.5 to 3.9 #90 from django-webpack/1.0.0-release
• d1ec87a Remove looking for maintainers notice
• e294181 Update to 1.0.0
• e442e13 Looking for maintainers
• 02ab953 typings: Remove child
• 2725551 tests: Fix CompressionPlugin configuration
• 08348ae chore(docs): Fix typo on compile status
• 7c9bdca Release 1.0.0-alpha1
• f98ade0 Merge pull request [Snyk] Fix for 1 vulnerabilities #59 from melck/52-assets-loading-and-integrity
• f815d55 feat(core): Features for v1.0.0
• cf66c77 fix: Make each plugin option optional in type definition
• 906ac3b Bumped version to 1.0.0-alpha.0
• 53635d4 Merge pull request [Snyk] Security upgrade django from 1.11.29 to 2.2.18 #53 from melck/52-webpack4-only

See the full diff

Package name: webpack-dev-server

The new version differs by 250 commits.

• c9271b9 chore(release): 4.0.0
• 18bf369 test: fix stability (#3676)
• cdcabb2 fix: respect protocol from browser for manual setup (#3675)
• 1768d6b fix: initial reloading for lazy compilation (#3662)
• 4f5bab1 docs: improve examples (#3672)
• f2d87fb fix: improve https CLI output (#3673)
• 0277c5e chore: remove redundant console statements (#3671)
• 16fcdbc docs: add `ipc` example (#3667)
• 8915fb8 test: add e2e tests for built in routes (#3669)
• 4d1cbe1 docs: ask `version` information in issue template (#3668)
• b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (#3666)
• ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (#3665)
• f1fdaa7 chore(release): 4.0.0-rc.1
• c4678bc fix: legacy API (#3660)
• d8bdd03 test: fix stability (#3661)
• 22b1414 refactor: remove `killable` (#3657)
• 75bafbf test: add e2e tests for module federation (#3658)
• 493ccbd chore(deps): update `ws` (#3652)
• ae8c523 test: add e2e test for universal compiler (#3656)
• f94b84f chore(deps): update (#3655)
• 1923132 test: fix cli
• 2adfd01 test: fix todo (#3653)
• 6e2cbde fix: proxy logging and allow to pass options without the `target` option (#3651)
• c9ccc96 fix: respect infastructureLogging.level for client.logging (#3613)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic