[Snyk] Security upgrade ts-loader from 6.2.1 to 8.0.14

[ekmixon]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/grafana-e2e-selectors/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: ts-loader

The new version differs by 56 commits.

• 268bc69 chore(deps): upgrade most production deps (Added dashboard and panel descriptions grafana/grafana#1237)
• e160564 Add a cache to file path mapping (Tooltip units incorrect when using stacked, percentage graphs grafana/grafana#1228)
• 14fa3f8 Add documentation about performance profiling (grafana returns stars when empty metric directory grafana/grafana#1230)
• 3cc78b8 Fix typo in README.md (Dynamic dashboards grafana/grafana#1229)
• 8f2a509 Add documentation for the useCaseSensitiveFileNames option (What does InfluxDB datasource.listSeries() return? grafana/grafana#1227)
• 566e6ce Instead of checking date, check time thats more accurate to see if something has changed (Assistance in writing an custom module grafana/grafana#1217)
• 172ebeb Feature/typescript 4 1 (Can't select text in legend grafana/grafana#1213)
• 0816fe9 Add peer dependencies for Yarn PnP (add option to open drill down link in new tab grafana/grafana#1209)
• 4909d99 Fixed missing errors in watch mode in webpack5 (allow manual refresh even with auto-refresh enabled grafana/grafana#1208)
• 3f73e98 Fix failed builds when using thread-loader (movingAverage / movingMedian parameter type grafana/grafana#1207)
• e90f8ad Fix memory leak when using multiple webpack instances (fix #1204: add separate datasource parameter withCredentials grafana/grafana#1205)
• 95050eb Speeds up project reference build and doesnt store the result in memory (Ability to specify date in Elasticsearch index name grafana/grafana#1202)
• f99c7c4 doc: escape pipe in table (reusing search widget? grafana/grafana#1201)
• 0b4a86d Replace afterCompile to stop webpack 5 warning (Should be able to set time correction default (and override) in config grafana/grafana#1200)
• 6d8d601 Fixed deprecation warnings on webpack@5. (Panel with just table, no graph grafana/grafana#1195)
• cafc933 Fix installation link on README.md (singlestats background color is not changing grafana/grafana#1192)
• f5e901e Bump http-proxy in /examples/react-babel-karma-gulp (how to you put avg, max, min etc next to legends grafana/grafana#1182)
• 0767bce add github action status badge (Table series sortable by name grafana/grafana#1190)
• db5ea55 Feature/upgrade testpack to ts4 (Sorted all series value tooltip grafana/grafana#1189)
• 95b6fe8 Uses existing instance if config file is same as already built solution (Enhancement: Limit Tags by Metric grafana/grafana#1177)
• b38678a Update minimum compiler version to 3.6.3 (Wrong all series tooltip values grafana/grafana#1188)
• f8eba53 Add documentation and example code for projectReferences (Feature request: Some button to export graphs to image formats, PDF grafana/grafana#1184)
• 46d9761 Update docs to show transpileOnly does not affect project references ("All Series" Tooltip with "Percent" for Multi Series grafana/grafana#1175)
• 0e64ceb Fix getOptionsHash when two options has different props but same values. (Adding queries for custom datasources not possible grafana/grafana#1170)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[secure-code-warrior-for-github]

Micro-Learning Topic: Prototype pollution (Detected by phrase)

Matched on "Prototype Pollution"

What is this? (2min video)

By adding or modifying attributes of an object prototype, it is possible to create attributes that exist on every object, or replace critical attributes with malicious ones. This can be problematic if the software depends on existence or non-existence of certain attributes, or uses pre-defined attributes of object prototype (such as hasOwnProperty, toString or valueOf).

Try a challenge in Secure Code Warrior