From 25857c186baa8e2311f8a9ae96b3ba33522ad22c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 15 Nov 2022 18:08:08 +0000 Subject: [PATCH] fix: packages/react-scripts/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3105943 --- packages/react-scripts/package.json | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/packages/react-scripts/package.json b/packages/react-scripts/package.json index ac6dc41f3a3..7cb48690719 100644 --- a/packages/react-scripts/package.json +++ b/packages/react-scripts/package.json @@ -27,41 +27,41 @@ "babel-core": "6.17.0", "babel-eslint": "7.1.1", "babel-jest": "17.0.2", - "babel-loader": "6.2.7", + "babel-loader": "7.0.0", "babel-preset-react-app": "^2.0.1", "case-sensitive-paths-webpack-plugin": "1.1.4", "chalk": "1.1.3", "connect-history-api-fallback": "1.3.0", "cross-spawn": "4.0.2", - "css-loader": "0.26.0", + "css-loader": "0.26.2", "detect-port": "1.0.1", "dotenv": "2.0.0", "eslint": "3.8.1", "eslint-config-react-app": "^0.5.0", - "eslint-loader": "1.6.0", + "eslint-loader": "1.6.2", "eslint-plugin-flowtype": "2.21.0", "eslint-plugin-import": "2.0.1", "eslint-plugin-jsx-a11y": "2.2.3", "eslint-plugin-react": "6.4.1", - "extract-text-webpack-plugin": "1.0.1", - "file-loader": "0.9.0", + "extract-text-webpack-plugin": "2.0.0", + "file-loader": "0.10.1", "filesize": "3.3.0", "fs-extra": "0.30.0", "gzip-size": "3.0.0", - "html-webpack-plugin": "2.24.0", + "html-webpack-plugin": "4.0.0", "http-proxy-middleware": "0.17.2", "jest": "17.0.2", "json-loader": "0.5.4", "object-assign": "4.1.0", "path-exists": "2.1.0", - "postcss-loader": "1.0.0", + "postcss-loader": "1.3.2", "promise": "7.1.1", "react-dev-utils": "^0.4.2", "recursive-readdir": "2.1.0", "strip-ansi": "3.0.1", - "style-loader": "0.13.1", - "url-loader": "0.5.7", - "webpack": "1.14.0", + "style-loader": "0.13.2", + "url-loader": "0.5.8", + "webpack": "3.0.0", "webpack-dev-server": "1.16.2", "webpack-manifest-plugin": "1.1.0", "whatwg-fetch": "1.0.0"