[Snyk] Fix for 3 vulnerabilities

[richarajpal]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	No Known Exploit
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	Yes	No Known Exploit
	589/1000 Why? Has a fix available, CVSS 7.5	Prototype Pollution SNYK-JS-UNSETVALUE-2400660	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @testing-library/jest-dom

The new version differs by 101 commits.

• 4b764b9 feat: local types, supporting jest, @ jest/globals, vitest (Value labels are lost when options are loading asynchronously JedWatson/react-select#511)
• d717c66 feat: New `toHaveAccessibleErrorMessage` better implementing the spec, deprecate `toHaveErrorMessage` (Close select on touchend if touched outside menu/control. JedWatson/react-select#503)
• 948d90f fix: migrate ccs v3 to @ adobe/css-tools v4 (Clicking an option after searching doesn't always close dropdown JedWatson/react-select#470)
• af18453 fix: Support unenclosed inner text for details elements in to be visible (The road to 1.0? [discussion] JedWatson/react-select#396)
• 6988a67 fix: clarify toHaveFocus message when using `.not` (prevent default behavior of key down JedWatson/react-select#447)
• 4d0ceeb docs: add ashleyryan as a contributor for code, ideas (TypeError: undefined is not an object (evaluating '_this3.getInputNode().focus') JedWatson/react-select#434)
• 1f389f8 docs: add astorije as a contributor for code, ideas (Styles not copying over on bundle with browserify. JedWatson/react-select#433)
• 8162115 fix: add custom element support to `toBeDisabled` (Add coveralls badge JedWatson/react-select#368)
• 3094eb1 docs: add cbroeren as a contributor for doc (Option selection on mouse down not mouse up JedWatson/react-select#432)
• 43a420a docs: Fix wrong toHaveValue example (Display spinner while auto-loading initial data. JedWatson/react-select#431)
• a9beb47 fix: Improve `toHaveClass` error message format (How to control isLoading and the spinner? JedWatson/react-select#405)
• 6f69437 docs: add IanVS as a contributor for code (adding css for searching box JedWatson/react-select#423)
• de26c7a feat: Update aria-query to 5.0.0 (Add or clear current input value on blur and allow auto select on tab (for new values)  JedWatson/react-select#414)
• dfcefa2 fix: wrong deprecate error message (Spinner remains visible JedWatson/react-select#422)
• 4cb606c feat: import parse directly from css (Add or clear current input value on blur and allow auto select on tab (for new values) JedWatson/react-select#415)
• 35ab97d docs: add yannbf as a contributor for code (Add or clear current input value on blur and allow auto select on tab (for new values) JedWatson/react-select#416)
• 8876038 docs: add MatanBobi as a contributor for platform (FilterOptions break with some internal undefined JedWatson/react-select#410)
• d085039 chore: set protocol for npm to `https` (Inconsistent API: Setting the Select value programatically is possible only with strings (not with objects like options or asyncOptions) JedWatson/react-select#409)
• d24b6be docs: add tu4mo as a contributor for doc (Latest version lib does not match source  JedWatson/react-select#386)
• 51ea536 chore: upgrade to Jest 27 (Wait before sending AJAX call JedWatson/react-select#384)
• 60832f6 Fix typo (loadAsyncOptions fails when value of Select is null JedWatson/react-select#385)
• 0e34a35 docs: add icecream17 as a contributor for doc (Clicking a disabled item closes the menu JedWatson/react-select#381)
• eccbfcf fix grammar (Styled options JedWatson/react-select#380)
• fc9ce6d fix: Updates deprecated matchers info (Disabled options are keyboard selectable JedWatson/react-select#378)

See the full diff

Package name: jest

The new version differs by 250 commits.

• 8f9b812 v28.0.0
• f424551 feat: Jest 28 blog post (#12732)
• c79f8d6 feat: roll v28 docs (#12733)
• e9f6610 Remove `core.autocrlf` config on CI (#12731)
• 9342a23 docs: add mention of expect breaking change to upgrade guide (#12730)
• e1f2515 chore: add missing `throw`
• 039f43e chore: combine all v27 docs into a single one (#12729)
• 256c1af chore(website): add some admonitions to 25.x (#12565)
• fc85b8f fix: replace hash routine md5 with sha256 (#12722)
• c1a57cb chore(deps): bump isbinaryfile dependency to ^5.0.0 (#12726)
• 9ebfe0a chorer: add note about babel config to upgrade guide (#12724)
• 4ec4b98 chore: cache yarn deps on netlify (#12725)
• 62afb83 chore: revert #12718 and simply do not bundle type declarations of `@ jest/globals` (#12721)
• 4f1d199 Add Yarn dedupe CI check (#12717)
• 7a8c9cf Lock source-map-support verion to 0.5.13 (#12720)
• 811228d Support error logging before jest retry (#12201)
• a28db24 chore: do not bundle type definitions for packages which have only one `.d.ts` file (#12718)
• 49ee158 update dependency @ microsoft/api-extractor to 7.23.0 (#12716)
• e72c52f feat(jest-runner): export `TestRunner` interface types and reexport types from other packages (#12715)
• 3c6f14b feat(jest-resolve): expose `PackageFilter`, `PathFilter` and `PackageJSON` types (#12712)
• a293b75 refactor(jest-transform): rename TransformerConfig (#12708)
• 625e0bc show that setupFilesAfterEnv scripts can define beforeAll (#12702)
• 0208815 feat(jest-resolve): expose `JestResolver`, `AsyncResolver` and `SyncResolver` types (#12707)
• 75c7c40 docs: use admonitions in ExpectAPI.md (#12679)

See the full diff

Package name: webpack

The new version differs by 250 commits.

• 610f368 5.0.0
• 5ce65c1 update examples
• bbe1230 Merge pull request #11628 from webpack/bugfix/real-content-hash
• 75ecff2 5.0.0-rc.6
• bfc35d6 Merge pull request #11603 from MayaWolf/master
• 76e8cbd Merge pull request #11622 from webpack/dependabot/npm_and_yarn/types/node-13.13.25
• 9fd1be2 chore(deps-dev): bump @ types/node from 13.13.23 to 13.13.25
• 36bcfaa Merge pull request #11621 from webpack/bugfix/11619
• 9130d10 fix called variables with ProvidePlugin
• 3e42105 Merge pull request #11620 from webpack/bugfix/11617
• 4709719 skip connections copied to concatenated module
• 57b493f 5.0.0-rc.5
• 1658e2f Merge pull request #11618 from webpack/bugfix/11615
• a8fb45d fixes crash in SideEffectsFlagPlugin
• 84b196d emit error instead of crashing when unexpected problem occurs
• 5573fed Merge pull request #11601 from Hornwitser/improve-suggested-polyfill-config
• 9b5cce9 Merge pull request #11609 from snitin315/export-types
• 37c495c export type RuleSetUseItem
• 39faf34 export type RuleSetUse
• e5fd246 export type RuleSetConditionAbsolute
• 660baad export RuleSetCondition types
• 13e3ca5 Merge pull request #11602 from webpack/bugfix/shared-runtime-chunk
• 9c0587e Merge pull request #11606 from webpack/dependabot/npm_and_yarn/simple-git-2.21.0
• 502d166 Merge pull request #11607 from webpack/dependabot/npm_and_yarn/acorn-8.0.4

See the full diff

Package name: webpack-cli

The new version differs by 250 commits.

• fb50f76 chore(release): publish new version
• 2c75aeb chore: new version of the packages
• 0d05c30 chore(release): publish %s
• 3f9e151 chore: fix lerna config
• 2c1e34c tests(generator): enhance init generator tests (Async shared cache (probably not wanted) JedWatson/react-select#1236)
• 6ee61b9 Fix loader-generator and plugin-generator tests (If options are being returned by a call or async but all options are returned when the call returns. JedWatson/react-select#1250)
• 52956a2 Fixing the typos and grammatical errors in Readme files (Select multi, close dropdown when clicking selecting option - v1.0.0-rc.2  JedWatson/react-select#1246)
• 7faaed2 chore: update Bug_report & Feature_request Templates (Remove Creatable's new option on close JedWatson/react-select#1256)
• 7a5b33d feat(webpack-cli): added mode argument (Remove hidden input when multi select is empty JedWatson/react-select#1253)
• 3715756 tests(webpack-cli): add test case for defaults flag (explicitly call .blur() on select? JedWatson/react-select#1254)
• a7cba2f chore: project maintanance and typescript fix (Creatable component doesn't allow input key down handling. JedWatson/react-select#1247)
• 7748472 chore: ignore package-lock.json and remove its references (Clearing value in multi select causes option list to expand JedWatson/react-select#1252)
• a014aa7 docs: fix supported arguments & commands link in README (AsyncCreatable lower cases entries - v1.0.0-rc.2 JedWatson/react-select#1244)
• 06129a1 feat(webpack-cli): add progress bar for progress flag (onChange event fires in different order than "native" form/select JedWatson/react-select#1238)
• 6cc6a49 chore: post refactor CLI (feat(pagination): add async pagination JedWatson/react-select#1237)
• 358651e chore: move cli under lerna package (standalone.html fails JedWatson/react-select#1225)
• 2dc495a fix(init): fix webpack config scaffold (Call user-defined onInputChange props on Async and Creatable components JedWatson/react-select#1231)
• 1ab62d2 tests(generator): add tests for plugin generator (is there any way to expand the options list by default, without clicking the selection menu ?  JedWatson/react-select#1235)
• d2dd0c1 tests(sourcemap): fix flaky stats statement (Fixed #284. Added support for direction control. JedWatson/react-select#1232)
• f6dc680 tests(loader-generator): add tests for loader generator (Gravatars not working in documentation-page when using HTTPS JedWatson/react-select#1234)
• 35d1381 tests(generator): enable init generator test (Cursor blinks slightly below its normal position. JedWatson/react-select#1233)
• 66cdcb6 chore(generator): remove transpiled tests (How to set the default selected value while very first time loading JedWatson/react-select#1229)
• f29a170 fix(init): fix the invalid package name (isLoading is broken in rc2 JedWatson/react-select#1228)
• 8c3a66d chore(cli): updated changelog of v3 (Fixed #546. Added support for boolean values. JedWatson/react-select#1224)

See the full diff

Package name: webpack-dev-server

The new version differs by 250 commits.

• c9271b9 chore(release): 4.0.0
• 18bf369 test: fix stability (noOptionsMessage JedWatson/react-select#3676)
• cdcabb2 fix: respect protocol from browser for manual setup (NVDA has issues reading options JedWatson/react-select#3675)
• 1768d6b fix: initial reloading for lazy compilation (Update react-transition-group dependency to ^4.2.0 JedWatson/react-select#3662)
• 4f5bab1 docs: improve examples (Width is calculated wrong JedWatson/react-select#3672)
• f2d87fb fix: improve https CLI output (Get more options from API without the select loses focus and close menu JedWatson/react-select#3673)
• 0277c5e chore: remove redundant console statements (Is there a list of classNames available? JedWatson/react-select#3671)
• 16fcdbc docs: add `ipc` example (Need to add a class to options JedWatson/react-select#3667)
• 8915fb8 test: add e2e tests for built in routes (Expand and scroll container when opening menu JedWatson/react-select#3669)
• 4d1cbe1 docs: ask `version` information in issue template (Select all options JedWatson/react-select#3668)
• b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (add autoComplete as prop to the Select component JedWatson/react-select#3666)
• ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (Typescript build error  JedWatson/react-select#3665)
• f1fdaa7 chore(release): 4.0.0-rc.1
• c4678bc fix: legacy API (Cannot import react-select/creatable JedWatson/react-select#3660)
• d8bdd03 test: fix stability (Scroll on touchscreen not working when used in atlaskit/modal JedWatson/react-select#3661)
• 22b1414 refactor: remove `killable` (When click outside of the select, the select don't close JedWatson/react-select#3657)
• 75bafbf test: add e2e tests for module federation (first add value in creatable multi select text input and then remove. Again add, there is a error in conole JedWatson/react-select#3658)
• 493ccbd chore(deps): update `ws` (psuedo class first-child error JedWatson/react-select#3652)
• ae8c523 test: add e2e test for universal compiler (focused option starting at the selected option JedWatson/react-select#3656)
• f94b84f chore(deps): update (autoFocus prop and react-testing-library JedWatson/react-select#3655)
• 1923132 test: fix cli
• 2adfd01 test: fix todo (TypeError: __webpack_require__.i(…) is not a function in React-Select JedWatson/react-select#3653)
• 6e2cbde fix: proxy logging and allow to pass options without the `target` option (added noOptionsMessage to common props JedWatson/react-select#3651)
• c9ccc96 fix: respect infastructureLogging.level for client.logging (How I can use react-select with react-virtualized? JedWatson/react-select#3613)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption
🦉 Prototype Pollution