[Snyk] Fix for 1 vulnerabilities

[Matthelonianxl]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	698/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.1	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: compression-webpack-plugin

The new version differs by 84 commits.

• 3b63e50 chore(release): 8.0.1
• e240b95 chore(deps): serialize-javascript and deps updated (Change path rewriting to use req.accepts in serve mode dojo/cli-build-app#253)
• 6cc2d31 chore: fix typo (Add strict css module checks dojo/cli-build-app#251)
• 58037c9 chore(deps): update (V5 - Add slash to paths that need them in serve dojo/cli-build-app#252)
• ecb6338 chore(release): 8.0.0
• 99d8b80 refactor: nodejs v10 dropped (V5 - set target for functionals to node (#248) dojo/cli-build-app#249)
• 38851ea chore(deps): update (Add slash to paths that need them in serve dojo/cli-build-app#247)
• 334cfe0 chore(release): 7.1.2
• f33424a fix: crash when `filename` and `algorithm` options are functions (Unit and Functional test builds are failing silently dojo/cli-build-app#241)
• 44c16e2 chore(release): 7.1.1
• 863c340 fix: compatibility with old plugins (Use the entry name for externals based on single bundle config dojo/cli-build-app#237)
• d0af551 chore(release): 7.1.0
• 8f3fadb perf: fix
• 5d54128 fix: compatibility with `workbox-webpack-plugin` (Move externals plugin into configs dojo/cli-build-app#234)
• 72f3093 chore(deps): update (Add fetch shim to the BootstrapPlugin options dojo/cli-build-app#233)
• 5b8b356 feat: compress assets added later by plugins
• efadca8 chore(release): 7.0.0
• a94aa35 refactor: fix lint (Additional resources in watch mode dojo/cli-build-app#226)
• 0e9ef0a refactor: code (Fix CSS source maps dojo/cli-build-app#225)
• 1c37b2f refactor: next
• 4a10f07 chore(release): 6.1.1
• fbb57b1 style: prettier default (Use Bootstrap Plugin dojo/cli-build-app#220)
• 5e3bb95 fix: compatibility with child compilations
• 7eaf1ff chore(release): 6.1.0

See the full diff

Package name: terser-webpack-plugin

The new version differs by 216 commits.

• 491b2fd chore(release): 5.1.4
• bc7580b chore(deps): serialize-javascript and deps updated (Dont resolve promises on continuous processes dojo/cli-build-app#408)
• ec65531 ci: update nodejs.yml (Command exits when using watch or serve dojo/cli-build-app#407)
• f8ce3bc chore: update deps (Add hard source webpack plugin in experimental speed mode dojo/cli-build-app#404)
• 7fb9f43 chore: fix typo (Preserves resource dir structure and does not hash in dev builds dojo/cli-build-app#401)
• b44a447 chore(release): 5.1.3
• 55adbdb chore(deps): update (POC build using snowpack dojo/cli-build-app#400)
• 772584a chore: update `jest-worker` (Fix test-app block usage and update for Dojo 7 dojo/cli-build-app#399)
• da8e166 chore: fix prepare (Move to eslint for consumers dojo/cli-build-app#396)
• 0babc1b chore(release): 5.1.2
• a177425 fix: don't crash in non-parallel mode (Compile legacy and modern builds in a single pass dojo/cli-build-app#395)
• bfbb68a chore(deps): update (Code splitting on import("...") dojo/cli-build-app#387)
• ee1d938 chore: update deps (theme variants: Remove variables import dojo/cli-build-app#381)
• 727ee60 docs: update usage for webpack v4 (CLDR breaks BTR build dojo/cli-build-app#378)
• 4320006 chore(release): 5.1.1
• 3a3fe51 fix: remove verbose console log (Added tsx to list of linted file extensions dojo/cli-build-app#374)
• 1859a92 chore(release): 5.1.0
• fea6f20 feat: optimize JS assets added later by plugins (Added watchExtraFiles to schema dojo/cli-build-app#373)
• e10b8b4 test: source maps (Content-Security-Policy: Usage of "'strict-dynamic'" dojo/cli-build-app#372)
• 0633c9d chore(deps): update (Use CLDR plugin and loader dojo/cli-build-app#371)
• 809ef42 chore(deps): update (On-demand build time render for when using watch with the development server dojo/cli-build-app#368)
• 562d121 style: default prettier
• 8ef95a6 test: updated (Source maps do not work when using a base path with the development server dojo/cli-build-app#355)
• 661d1f8 docs: no need to install it if you use webpack v5+ (Upgrade @dojo/webpack-contrib dojo/cli-build-app#353)

See the full diff

Package name: webpack

The new version differs by 7 commits.

• 04f90c5 4.26.0
• e1df721 Merge pull request #8392 from vkrol/cherry-pick-terser-to-webpack-4
• a818def fix for changed API in terser plugin warningsFilter
• b39abf4 Rename test directories too
• 311a728 Switch from uglifyjs-webpack-plugin to terser-webpack-plugin
• a230148 Merge pull request #8351 from DeTeam/chunk-jsdoc-typo
• 7a0af76 Fix a typo in Chunk#split jsdoc comment

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)