[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIREGEX-1583908	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: webpack-build-notifier

The new version differs by 37 commits.

• cfadd04 Child compiler error fix (#54)
• ba2e03a Fixed #51.
• c10e84a Revert "Fixed #51."
• c59f530 Fixed #51.
• 9ba77e0 Release/2.0.0 (#50)
• 69e43cd Temporarily disable failing tests.
• 76a2a87 Added test mock for process.arch
• 1a5987d Updated node-notifier to fix Bump shell-quote from 1.6.1 to 1.7.3 #43; added test coverage.
• e153dd8 Updated changelog and package version
• d6b7feb Merge pull request #49 from yoavain/add-duration-to-notification
• 510f9cd Build time in notification
• db6552f Updated node-notifier dependency to latest version to fix Bump json5 from 1.0.1 to 1.0.2 #45.
• b39b4a1 Merge pull request Bump css-what from 2.1.2 to 2.1.3 #44 from RoccoC/feature/callbacks
• 8f65131 Fixed lint errors
• c031929 Minor cleanup for consistency, bumped version
• 75c101c Merge pull request [Snyk] Fix for 1 vulnerabilities #42 from phyzical/feature/Adding-custom-callback-functionailty
• 4ace475 * simplified code and added params to be passed down, allowing for the type of compilation to be hadnled in the callbaack provided
• 2058569 * aded functionality to pass false to callbacks to disable if using one base
• d1a187a *Added Custom callbacks
• b861e3e Updated dependencies to fix js-yaml vuln.
• 4bdbb41 1.0.2 release
• a7e87c7 Merge pull request Bump async from 2.6.1 to 2.6.4 #41 from fsubal/feature/sound-wrongly-typed
• 478faa3 "*sounds" are wrongly typed
• 7148475 Updated README file

See the full diff

Package name: webpack-cli

The new version differs by 250 commits.

• fb50f76 chore(release): publish new version
• 2c75aeb chore: new version of the packages
• 0d05c30 chore(release): publish %s
• 3f9e151 chore: fix lerna config
• 2c1e34c tests(generator): enhance init generator tests (#1236)
• 6ee61b9 Fix loader-generator and plugin-generator tests (#1250)
• 52956a2 Fixing the typos and grammatical errors in Readme files (#1246)
• 7faaed2 chore: update Bug_report & Feature_request Templates (#1256)
• 7a5b33d feat(webpack-cli): added mode argument (#1253)
• 3715756 tests(webpack-cli): add test case for defaults flag (#1254)
• a7cba2f chore: project maintanance and typescript fix (#1247)
• 7748472 chore: ignore package-lock.json and remove its references (#1252)
• a014aa7 docs: fix supported arguments & commands link in README (#1244)
• 06129a1 feat(webpack-cli): add progress bar for progress flag (#1238)
• 6cc6a49 chore: post refactor CLI (#1237)
• 358651e chore: move cli under lerna package (#1225)
• 2dc495a fix(init): fix webpack config scaffold (#1231)
• 1ab62d2 tests(generator): add tests for plugin generator (#1235)
• d2dd0c1 tests(sourcemap): fix flaky stats statement (#1232)
• f6dc680 tests(loader-generator): add tests for loader generator (#1234)
• 35d1381 tests(generator): enable init generator test (#1233)
• 66cdcb6 chore(generator): remove transpiled tests (#1229)
• f29a170 fix(init): fix the invalid package name (#1228)
• 8c3a66d chore(cli): updated changelog of v3 (#1224)

See the full diff

Package name: webpack-hot-middleware

The new version differs by 35 commits.

• e140693 2.25.1
• 3d5018a Merge pull request #413 from nttibbetts/replace-ansi-html
• 90551e5 use public npm registry, not private one
• adeeade fix: replace ansi-html with ansi-html-community to fix vulnerability
• f0ffa4c Resolve weird desync in package lock
• 0f5e3e9 Use old-style require syntax to keep the linter happy
• aa38d42 Bump ansi/html encoding deps
• 2c31df1 Bump example dependencies
• d156bbc Simplify CI setup
• 0635d00 Replace istanbul with nyc
• 04fa8c8 Apply prettier formatting updates
• b81cfd5 Update eslint and prettier
• c98216a Upgrade test dependencies
• cb29abb 2.25.0
• bbffbe6 Merge branch 'master' of github.com:webpack-contrib/webpack-hot-middleware
• 82dd483 Merge pull request #360 from jimblue/master
• e2b49ff improved client overlay style
• c430265 2.24.4
• fe33d59 Merge pull request #355 from okcoker/ansi-color-fix
• 331ad96 Merge branch 'master' into ansi-color-fix
• f6609e4 Bump deps to sort audit out
• e605d10 Fix ansi colors
• 036bf30 Merge pull request #354 from Hacksign/master
• f2b477d Resolve Code under example folder do not work. webpack-contrib/webpack-hot-middleware#353

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic