[Snyk] Upgrade webpack-cli from 3.3.10 to 4.6.0

[snyk-bot]

Snyk has created this PR to upgrade webpack-cli from 3.3.10 to 4.6.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 26 versions ahead of your current version.
• The recommended version was released a month ago, on 2021-03-27.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1085630	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary Code Injection SNYK-JS-SERIALIZEJAVASCRIPT-570062	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-536840	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-590103	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-INI-1048974	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ACORN-559469	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-BROWSERSLIST-1090194	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Validation Bypass SNYK-JS-KINDOF-537849	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack-cli

• 4.6.0 - 2021-03-27
  

  4.6.0 (2021-03-27)

  Bug Fixes

  • negative options (#2555) (f26ebc1)
  • improve error message for help (#2482) (99ae2a3)
  • show --node-env in minimum help output (#2411) (f5fc302)

  Features

  • added WEBPACK_PACKAGE env var to use custom webpack package (#2556) (3d1e485)
  • added WEBPACK_CLI_SKIP_IMPORT_LOCAL env var to skip local import (#2546) (e130822)
  • allow string value for the --hot option (#2444) (8656e78)
  • display used config path when logging level=log (#2431) (f8406e1)
• 4.5.0 - 2021-02-02
• 4.4.0 - 2021-01-19
• 4.3.1 - 2020-12-31
• 4.3.0 - 2020-12-25
• 4.2.0 - 2020-11-04
• 4.1.0 - 2020-10-19
• 4.0.0 - 2020-10-10
• 4.0.0-rc.1 - 2020-10-06
• 4.0.0-rc.0 - 2020-09-22
• 4.0.0-beta.9 - 2020-09-19
• 4.0.0-beta.8 - 2020-03-02
• 4.0.0-beta.7 - 2020-02-29
• 4.0.0-beta.6 - 2020-02-23
• 4.0.0-beta.3 - 2020-02-11
• 4.0.0-beta.2 - 2020-02-11
• 4.0.0-beta.1 - 2019-11-15
• 4.0.0-beta.0 - 2019-11-15
• 4.0.0-alpha-5 - 2019-07-08
• 4.0.0-alpha-4 - 2018-12-25
• 4.0.0-alpha-3 - 2018-12-25
• 4.0.0-alpha-2 - 2018-12-25
• 4.0.0-alpha-1 - 2018-12-25
• 4.0.0-alpha - 2018-12-25
• 3.3.12 - 2020-06-18
• 3.3.11 - 2020-02-11
• 3.3.10 - 2019-10-31

from webpack-cli GitHub release notes

Commit messages

Package name: webpack-cli

• fb50f76 chore(release): publish new version
• 2c75aeb chore: new version of the packages
• 0d05c30 chore(release): publish %s
• 3f9e151 chore: fix lerna config
• 2c1e34c tests(generator): enhance init generator tests ([BUG] KeyError output_spec = kwargs.pop("outputs_list") plotly/dash#1236)
• 6ee61b9 Fix loader-generator and plugin-generator tests ([Feature Request] slider logarithmic values plotly/dash#1250)
• 52956a2 Fixing the typos and grammatical errors in Readme files (Embed Dash in a React App, proof-of-concept plotly/dash#1246)
• 7faaed2 chore: update Bug_report & Feature_request Templates (separate node and python build steps in dash-generate-components plotly/dash#1256)
• 7a5b33d feat(webpack-cli): added mode argument (Generate Julia package metadata for Dash components plotly/dash#1253)
• 3715756 tests(webpack-cli): add test case for defaults flag (Callback chain refactoring and performance improvements plotly/dash#1254)
• a7cba2f chore: project maintanance and typescript fix (Wildcard callbacks during app initialization behave improperly plotly/dash#1247)
• 7748472 chore: ignore package-lock.json and remove its references ([BUG] Dropdown: programatically set value isn't persisted plotly/dash#1252)
• a014aa7 docs: fix supported arguments & commands link in README (dash_bootstrap_components.v0_9_2m1588841409.min.js[BUG] plotly/dash#1244)
• 06129a1 feat(webpack-cli): add progress bar for progress flag (Add R build test to CircleCI plotly/dash#1238)
• 6cc6a49 chore: post refactor CLI (API connection status notifications plotly/dash#1237)
• 358651e chore: move cli under lerna package (Ability to prevent initial callback from firing plotly/dash#1225)
• 2dc495a fix(init): fix webpack config scaffold (#1231)
• 1ab62d2 tests(generator): add tests for plugin generator (While uploading file through dash upload component, the page stays on with "Updating..." state and does not view the result plotly/dash#1235)
• d2dd0c1 tests(sourcemap): fix flaky stats statement ([BUG] Dropdown Search must prioritize front matches before body matches plotly/dash#1232)
• f6dc680 tests(loader-generator): add tests for loader generator (Insert WC 'dots' into generated .Rd files plotly/dash#1234)
• 35d1381 tests(generator): enable init generator test ([BUG] Dropdown Search does not recognize spaces or metacharacters plotly/dash#1233)
• 66cdcb6 chore(generator): remove transpiled tests (#1229)
• f29a170 fix(init): fix the invalid package name (Prevent initial call plotly/dash#1228)
• 8c3a66d chore(cli): updated changelog of v3 (fix #1223 - initialcall on new layout chunk edge case plotly/dash#1224)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs