[Snyk] Upgrade: , babel-loader, case-sensitive-paths-webpack-plugin, css-loader, dotenv, eslint-loader, eslint-plugin-flowtype, eslint-plugin-import, eslint-plugin-jsx-a11y, eslint-plugin-react, html-webpack-plugin, jest-watch-typeahead, mini-css-extract-plugin, optimize-css-assets-webpack-plugin, pnp-webpack-plugin, postcss-flexbugs-fixes, postcss-preset-env, postcss-safe-parser, resolve, resolve-url-loader, semver, ts-pnp, webpack, webpack-dev-server

[Exkaleburx]

Snyk has created this PR to upgrade multiple dependencies.

👯‍♂ The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

@babel/core
from 7.9.0 to 7.25.2 | 111 versions ahead of your current version | a month ago
on 2024-07-30
babel-loader
from 8.1.0 to 8.3.0 | 7 versions ahead of your current version | 2 years ago
on 2022-11-03
case-sensitive-paths-webpack-plugin
from 2.3.0 to 2.4.0 | 1 version ahead of your current version | 4 years ago
on 2021-02-22
css-loader
from 3.4.2 to 3.6.0 | 5 versions ahead of your current version | 4 years ago
on 2020-06-13
dotenv
from 8.2.0 to 8.6.0 | 5 versions ahead of your current version | 3 years ago
on 2021-05-05
eslint-loader
from 3.0.3 to 3.0.4 | 1 version ahead of your current version | 4 years ago
on 2020-04-02
eslint-plugin-flowtype
from 4.6.0 to 4.7.0 | 1 version ahead of your current version | 4 years ago
on 2020-03-24
eslint-plugin-import
from 2.20.1 to 2.29.1 | 30 versions ahead of your current version | 9 months ago
on 2023-12-14
eslint-plugin-jsx-a11y
from 6.2.3 to 6.9.0 | 12 versions ahead of your current version | 3 months ago
on 2024-06-20
eslint-plugin-react
from 7.19.0 to 7.35.0 | 59 versions ahead of your current version | 2 months ago
on 2024-07-20
html-webpack-plugin
from 4.0.0-beta.11 to 4.5.2 | 18 versions ahead of your current version | 4 years ago
on 2021-02-18
jest-watch-typeahead
from 0.4.2 to 0.6.5 | 7 versions ahead of your current version | 3 years ago
on 2021-09-28
mini-css-extract-plugin
from 0.9.0 to 0.12.0 | 7 versions ahead of your current version | 4 years ago
on 2020-10-07
optimize-css-assets-webpack-plugin
from 5.0.3 to 5.0.8 | 5 versions ahead of your current version | 3 years ago
on 2021-06-23
pnp-webpack-plugin
from 1.6.4 to 1.7.0 | 1 version ahead of your current version | 3 years ago
on 2021-07-21
postcss-flexbugs-fixes
from 4.1.0 to 4.2.1 | 2 versions ahead of your current version | 4 years ago
on 2020-04-27
postcss-preset-env
from 6.7.0 to 6.7.2 | 2 versions ahead of your current version | 10 months ago
on 2023-10-24
postcss-safe-parser
from 4.0.1 to 4.0.2 | 1 version ahead of your current version | 5 years ago
on 2020-02-08
resolve
from 1.15.0 to 1.22.8 | 19 versions ahead of your current version | a year ago
on 2023-10-10
resolve-url-loader
from 3.1.1 to 3.1.5 | 4 versions ahead of your current version | 2 years ago
on 2022-12-02
semver
from 6.3.0 to 6.3.1 | 1 version ahead of your current version | a year ago
on 2023-07-10
ts-pnp
from 1.1.6 to 1.2.0 | 1 version ahead of your current version | 4 years ago
on 2020-03-26
webpack
from 4.42.0 to 4.47.0 | 8 versions ahead of your current version | a year ago
on 2023-09-06
webpack-dev-server
from 3.10.3 to 3.11.3 | 4 versions ahead of your current version | 3 years ago
on 2021-11-08

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	696	Proof of Concept
	Prototype Pollution SNYK-JS-OBJECTPATH-1017036	696	Proof of Concept
	Prototype Pollution SNYK-JS-OBJECTPATH-1585658	696	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-ANSIHTML-1296849	696	Proof of Concept
	Denial of Service (DoS) SNYK-JS-SOCKJS-575261	696	Proof of Concept
	Prototype Pollution SNYK-JS-OBJECTPATH-1569453	696	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-POSTCSS-1090595	696	Proof of Concept

Release notes

Package name: @babel/core

• 7.25.2 - 2024-07-30
  

  v7.25.2 (2024-07-30)

  🐛 Bug Fix

  • babel-core, babel-traverse
    • #16695 Ensure that requeueComputedKeyAndDecorators is available (@ nicolo-ribaudo)

  Committers: 2

  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
• 7.24.9 - 2024-07-15
  

  v7.24.9 (2024-07-15)

  🐛 Bug Fix

  • babel-core, babel-standalone
    • #16639 Avoid require() call in @ babel/standalone bundle (@ nicolo-ribaudo)
  • babel-types
    • #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)

  💅 Polish

  • babel-generator, babel-plugin-transform-optional-chaining
    • #16617 Avoid extra parens in TS as/satisfies (@ nicolo-ribaudo)

  🏠 Internal

  • babel-helper-module-transforms
    • #16629 Lazy top-level initializations for module transforms (@ guybedford)

  Committers: 5

  • Babel Bot (@ babel-bot)
  • Guy Bedford (@ guybedford)
  • Huáng Jùnliàng (@ JLHwung)
  • Nicolò Ribaudo (@ nicolo-ribaudo)
  • @ liuxingbaoyu
• 7.24.8 - 2024-07-11
• 7.24.7 - 2024-06-05
• 7.24.6 - 2024-05-24
• 7.24.5 - 2024-04-29
• 7.24.4 - 2024-04-03
• 7.24.3 - 2024-03-20
• 7.24.1 - 2024-03-19
• 7.24.0 - 2024-02-28
• 7.23.9 - 2024-01-25
• 7.23.7 - 2023-12-29
• 7.23.6 - 2023-12-11
• 7.23.5 - 2023-11-29
• 7.23.3 - 2023-11-09
• 7.23.2 - 2023-10-12
• 7.23.0 - 2023-09-25
• 7.22.20 - 2023-09-16
• 7.22.19 - 2023-09-14
• 7.22.18 - 2023-09-14
• 7.22.17 - 2023-09-08
• 7.22.15 - 2023-09-04
• 7.22.11 - 2023-08-24
• 7.22.10 - 2023-08-07
• 7.22.9 - 2023-07-12
• 7.22.8 - 2023-07-06
• 7.22.7 - 2023-07-06
• 7.22.6 - 2023-07-04
• 7.22.5 - 2023-06-08
• 7.22.1 - 2023-05-26
• 7.22.0 - 2023-05-26
• 7.21.8 - 2023-05-02
• 7.21.5 - 2023-04-28
• 7.21.4 - 2023-03-31
• 7.21.4-esm.4 - 2023-04-04
• 7.21.4-esm.3 - 2023-04-04
• 7.21.4-esm.2 - 2023-04-04
• 7.21.4-esm.1 - 2023-04-04
• 7.21.4-esm - 2023-04-04
• 7.21.3 - 2023-03-14
• 7.21.0 - 2023-02-20
• 7.20.12 - 2023-01-04
• 7.20.7 - 2022-12-22
• 7.20.5 - 2022-11-28
• 7.20.2 - 2022-11-04
• 7.19.6 - 2022-10-20
• 7.19.3 - 2022-09-27
• 7.19.1 - 2022-09-14
• 7.19.0 - 2022-09-05
• 7.18.13 - 2022-08-22
• 7.18.10 - 2022-08-01
• 7.18.9 - 2022-07-18
• 7.18.6 - 2022-06-27
• 7.18.5 - 2022-06-13
• 7.18.2 - 2022-05-25
• 7.18.0 - 2022-05-19
• 7.17.12 - 2022-05-16
• 7.17.10 - 2022-04-29
• 7.17.9 - 2022-04-06
• 7.17.8 - 2022-03-18
• 7.17.7 - 2022-03-14
• 7.17.5 - 2022-02-17
• 7.17.4 - 2022-02-15
• 7.17.3 - 2022-02-15
• 7.17.2 - 2022-02-08
• 7.17.0 - 2022-02-02
• 7.16.12 - 2022-01-22
• 7.16.10 - 2022-01-19
• 7.16.7 - 2021-12-31
• 7.16.5 - 2021-12-13
• 7.16.0 - 2021-10-29
• 7.15.8 - 2021-10-06
• 7.15.5 - 2021-09-04
• 7.15.4 - 2021-09-02
• 7.15.0 - 2021-08-04
• 7.14.8 - 2021-07-20
• 7.14.6 - 2021-06-14
• 7.14.5 - 2021-06-09
• 7.14.3 - 2021-05-17
• 7.14.2 - 2021-05-12
• 7.14.0 - 2021-04-29
• 7.13.16 - 2021-04-20
• 7.13.15 - 2021-04-08
• 7.13.14 - 2021-03-29
• 7.13.13 - 2021-03-26
• 7.13.10 - 2021-03-08
• 7.13.8 - 2021-02-26
• 7.13.1 - 2021-02-23
• 7.13.0 - 2021-02-22
• 7.12.17 - 2021-02-18
• 7.12.16 - 2021-02-11
• 7.12.13 - 2021-02-03
• 7.12.10 - 2020-12-09
• 7.12.9 - 2020-11-24
• 7.12.8 - 2020-11-23
• 7.12.7 - 2020-11-20
• 7.12.3 - 2020-10-16
• 7.12.1 - 2020-10-15
• 7.12.0 - 2020-10-14
• 7.11.6 - 2020-09-03
• 7.11.5 - 2020-08-31
• 7.11.4 - 2020-08-20
• 7.11.1 - 2020-08-04
• 7.11.0 - 2020-07-30
• 7.10.5 - 2020-07-14
• 7.10.4 - 2020-06-30
• 7.10.3 - 2020-06-19
• 7.10.2 - 2020-05-30
• 7.10.1 - 2020-05-27
• 7.10.0 - 2020-05-26
• 7.9.6 - 2020-04-29
• 7.9.0 - 2020-03-20

from @babel/core GitHub release notes

Package name: babel-loader

• 8.3.0 - 2022-11-03
  

  New features

  • Pass external dependencies from Babel to Webpack by @ nicolo-ribaudo in #971

  Full Changelog: v8.2.5...v8.3.0

• 8.2.5 - 2022-04-19
  

  What's Changed

  • fix: respect inputSourceMap loader option by @ alan-agius4 in #896

  New Contributors

  • @ alan-agius4 made their first contribution in #896

  Full Changelog: v8.2.4...v8.2.5

• 8.2.4 - 2022-03-22
  

  What's Changed

  • doc(README.md): fix a broken markdown link by @ loveDstyle in #919
  • Bump loader-utils to 2.x by @ stianjensen in #931
  • Use md5 hashing for OpenSSL 3 by @ pathmapper in #924

  Thanks @ loveDstyle, @ stianjensen and @ pathmapper for your first PRs!

• 8.2.3 - 2021-10-20
  

  This release fixes compatibility with Node.js 17

  • Use md5 hash for caching on node v17 (#918)

  Thanks @ Reptarsrage!

• 8.2.2 - 2020-11-26
  

  8.2.2

• 8.2.1 - 2020-11-10
  
  • Move @ ava/babel to devDependencies #881 (@ jvasseur)
• 8.2.0 - 2020-11-10
  
  • Replace mkdirp with make-dir 47958ca (@ JLHwung)
  • Use async config loading when available d8cff97 (@ the-spyke)
• 8.1.0 - 2020-03-20

from babel-loader GitHub release notes

Package name: case-sensitive-paths-webpack-plugin

• 2.4.0 - 2021-02-22
• 2.3.0 - 2020-01-15

from case-sensitive-paths-webpack-plugin GitHub release notes

Package name: css-loader

• 3.6.0 - 2020-06-13
  

  3.6.0 (2020-06-13)

  Features

  • allow modules.auto to be a filter function (#1086) (0902353)
• 3.5.3 - 2020-04-24
  

  3.5.3 (2020-04-24)

  Bug Fixes

  • add file from an error to file dependencies (841423f)
  • avoid query string in source maps (#1082) (f64de13)
• 3.5.2 - 2020-04-10
  

  3.5.2 (2020-04-10)

  Bug Fixes

  • schema for the modules.auto option (#1075) (8c9ffe7)
• 3.5.1 - 2020-04-07
  

  3.5.1 (2020-04-07)

  Bug Fixes

  • don't generate an invalid code for locals (#1072) (866b84a)
• 3.5.0 - 2020-04-06
  

  3.5.0 (2020-04-06)

  Features

  • accept semver compatible postcss AST (#1049) (14c4faa)
  • allow to determinate css modules using the modules.auto option, please look at an example of how you can simplify the configuration. (#1067) (c673cf4)
  • the modules.exportGlobals option for export global classes and ids (#1069) (519e5f4)
  • the modules.mode option may be a function (#1065) (0d8ac3b)
• 3.4.2 - 2020-01-10
  

  3.4.2 (2020-01-10)

  Bug Fixes

  • do not duplicate css on composes (#1040) (df79602)

from css-loader GitHub release notes

Package name: dotenv

• 8.6.0 - 2021-05-05
  

  Show as 'added' in changelog

• 8.5.1 - 2021-05-05
  

  Bump version 8.5.1

• 8.5.0 - 2021-05-05
  

  Bump version 8.5.0

• 8.4.0 - 2021-05-05
  

  Point to types file for VS Code. Bump 8.4.0

• 8.3.0 - 2021-05-05
  

  Drop node 8 support

• 8.2.0 - 2019-10-16
  

  chore(release): 8.2.0

from dotenv GitHub release notes

Package name: eslint-loader

• 3.0.4 - 2020-04-02
  

  Bug Fixes

  • #316 updating loader-fs-cache min version (#317) (796e3d1)
• 3.0.3 - 2019-12-06
  

  Bug Fixes

  • check result object (#311) (6bb1fa6)
  • support webpack 5 (#312) (c0a9d0c)

from eslint-loader GitHub release notes

Package name: eslint-plugin-flowtype

• 4.7.0 - 2020-03-24
  

  4.7.0 (2020-03-24)

  Features

  • require-exact-type detects nested objects (#441) (463b74e)
• 4.6.0 - 2020-01-11
  

  4.6.0 (2020-01-11)

  Features

  • add fixer to invalid file annotation style message (#440) (97a230b)

from eslint-plugin-flowtype GitHub release notes

Package name: eslint-plugin-import

• 2.29.1 - 2023-12-14
  

  Full Changelog: v2.29.0...v2.29.1

• 2.29.0 - 2023-10-23
  

  Full Changelog: v2.28.1...v2.29.0

• 2.28.1 - 2023-08-18
  

  Full Changelog: v2.28.0...v2.28.1

• 2.28.0 - 2023-07-28
• 2.27.5 - 2023-01-16
• 2.27.4 - 2023-01-12
• 2.27.3 - 2023-01-12
• 2.27.2 - 2023-01-12
• 2.27.1 - 2023-01-12
• 2.27.0 - 2023-01-11
• 2.26.0 - 2022-04-05
• 2.25.4 - 2022-01-02
• 2.25.3 - 2021-11-10
• 2.25.2 - 2021-10-12
• 2.25.1 - 2021-10-12
• 2.25.0 - 2021-10-12
• 2.24.2 - 2021-08-24
• 2.24.1 - 2021-08-19
• 2.24.0 - 2021-08-08
• 2.23.4 - 2021-05-29
• 2.23.3 - 2021-05-21
• 2.23.2 - 2021-05-15
• 2.23.1 - 2021-05-15
• 2.23.0 - 2021-05-14
• 2.22.1 - 2020-09-27
• 2.22.0 - 2020-06-27
• 2.21.2 - 2020-06-10
• 2.21.1 - 2020-06-08
• 2.21.0 - 2020-06-08
• 2.20.2 - 2020-03-29
• 2.20.1 - 2020-02-02

from eslint-plugin-import GitHub release notes

Package name: eslint-plugin-jsx-a11y

• 6.9.0 - 2024-06-20
  

  Added

  • add support for Flat Config 6b5f096
  • no-noninteractive-element-to-interactive-role: allow menuitemradio and menuitemcheckbox on <li> c0733f9

  Fixed

  • img-redundant-alt: fixed multibyte character support #969
  • Revert "[Fix] isNonInteractiveElement: Upgrade aria-query to 5.3.0 and axobject-query to 3.2.1" 75d5dd7
  • ensure summary remains non-interactive 6a048da

  Changed

  • [meta] fix changelog links #960
  • [Robustness] use safe-regex-test 4c7e781
  • [actions] update actions/checkout 51a1ca7
  • [Deps] pin aria-query and axobject-query, add ls-engines test to CI 32fd82c
  • [Deps] remove @ babel/runtime 0a98ad8
  • [Deps] unpin axe-core b3559cf
  • [Deps] move object.entries to dev deps 1be7b70

  Full Changelog: v6.8.0...v6.9.0

• 6.8.0 - 2023-11-01
  

  Full Changelog: v6.7.1...v6.8.0

• 6.7.1 - 2023-01-12
  

  Full Changelog: v6.7.0...v6.7.1

• 6.7.0 - 2023-01-09
  

  Full Changelog: v6.6.1...v6.7.0

• 6.6.1 - 2022-07-21
  

  Full Changelog: v6.6.0...v6.6.1

• 6.6.0 - 2022-06-24
  

  Full Changelog: v6.5.1...v6.6.0

• 6.5.1 - 2021-11-10
  

  Full Changelog: v6.5.0...v6.5.1

• 6.5.0 - 2021-11-10
  

  What's Changed

  • Upgrade jsx-ast-utils dependency to v3.1.0 by @ jessebeach in #754
  • Remove no-onchange from recommended and strict by @ karlhorky in #757
  • Turn off label-has-for in strict rule set by @ janmonschke in #734
  • Ran npm update; latest packages by @ jessebeach in #763
  • [New] label-has-associated-control: Add glob support by @ hallzac2 in #749
  • [doc] Add link to MDN Aria documentation by @ arjansingh in #762
  • [Tests] migrate tests to Github Actions by @ ljharb in #764
  • docs: Add example for tabIndex on seemingly non-interactive element by @ eps1lon in #760
  • Add Next.js case to anchor-is-valid rule docs by @ zackdotcomputer in #769
  • [Docs] no-redundant-roles: Adds missing closing square bracket by @ mikeriley131 in #775
  • [Docs] anchor-is-valid: general cleanup by @ Anima-t3d in #728
  • Update flow-bin version to support aarch64 by @ odidev in #784
  • Fully deprecate accessible-emoji rule by @ backwardok in #782
  • Fix Flow warnings by @ jessebeach in #785
  • [Docs] Document the similarity between html-has-lang and lang by @ denis-sokolov in #778
  • [Docs] Clarify the title of the strictness table in the main doc by @ denis-sokolov in #786
  • Update recommended config to allow fieldset to have the radiogroup role by @ hallzac2 in #746
  • Update focus/hover style for link-button by @ mdvorscak in #662
  • Support img role for canvas. Fix for #648. by @ markwoon in #796
  • Fix no-access-key wording and grammar by @ breadadams in #800
  • [Docs] scope: replace duplicate scope word by @ rafaelss95 in #799
  • [Tests] use @ babel/eslint-parser instead of babel-eslint by @ MichaelDeBoey in #811
  • Switch to export default syntax for exporting rules by @ bmish in #819
  • Add eslint-plugin-eslint-plugin by @ bmish in #818
  • add missing close / for jsx succeed example by @ adamrhunter in #821
  • [Docs] HTTP => HTTPS by @ Schweinepriester in #823
  • [New] support ESLint 8.x by @ MichaelDeBoey in #810

  New Contributors

  • @ karlhorky made their first contribution in #757
  • @ janmonschke made their first contribution in #734
  • @ hallzac2 made their first contribution in #749
  • @ arjansingh made their first contribution in #762
  • @ zackdotcomputer made their first contribution in #769