[Snyk] Fix for 1 vulnerabilities

[qyl2021]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	658/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: semver

The new version differs by 82 commits.

• e7b78de chore: release 7.5.2
• 58c791f fix: diff when detecting major change from prerelease (Error when running new react-component insin/nwb#566)
• 5c8efbc fix: preserve build in raw after inc (fix react-app template logo issue insin/nwb#565)
• 717534e fix: better handling of whitespace (The less file is not compiled into css ,nwb-less is already installed insin/nwb#564)
• 2f738e9 chore: bump @ npmcli/template-oss from 4.14.1 to 4.15.1 (Feature request - React Browser Extensions boilerplate insin/nwb#558)
• aa016a6 chore: release 7.5.1
• d30d25a fix: show type on invalid semver error (Allow usage of array of configs for webpack insin/nwb#559)
• 09c69e2 chore: bump @ npmcli/template-oss from 4.13.0 to 4.14.1 ( React Components Demo app is not working on IE 11 insin/nwb#555)
• 5b02ad7 chore: release 7.5.0
• e219bb4 fix: throw on bad version with correct error message (Uncaught TypeError: Found non-callable @@iterator after upgrading from 24 -> 25 insin/nwb#552)
• 503a4e5 feat: allow identifierBase to be false (Invalid hook call when using yarn link insin/nwb#548)
• fc2f3df fix: incorrect results from diff sometimes with prerelease versions (Set default hostname to 'localhost' for webpackServer insin/nwb#546)
• 2781767 fix: avoid re-instantiating SemVer during diff compare (Dropping Node 8 insin/nwb#547)
• 82aa7f6 chore: release 7.4.0
• 731d896 chore: enable CD (React Build Watch Mode insin/nwb#545)
• 940723d fix: intersects with v0.0.0 and v0.0.0-0 (Fresh component, tests fail with error from is-equals insin/nwb#538)
• aa516b5 fix: faster parse options (Linting problem on fresh web-module insin/nwb#535)
• 61e6ea1 fix: faster cache key factory for range (Resolve nwb-sass without being included in package.json? insin/nwb#536)
• f8b8b61 fix: optimistic parse (@babel/polyfill is deprecated, migrate to core-js@3 insin/nwb#541)
• 796cbe2 fix: semver.diff prerelease to release recognition (npm run build fails at npm version 6.9.0 insin/nwb#533)
• 3f222b1 fix: reuse comparators on subset (maintenance of NWB library insin/nwb#537)
• 113f513 feat: identifierBase parameter for .inc (terser - unexpected prop in webpack config insin/nwb#532)
• ea689bc chore: basic type test for RELEASE_TYPES
• c5d29df docs: Add "Constants" section to README

See the full diff

Package name: webpack-dev-server

The new version differs by 250 commits.

• c9271b9 chore(release): 4.0.0
• 18bf369 test: fix stability (#3676)
• cdcabb2 fix: respect protocol from browser for manual setup (#3675)
• 1768d6b fix: initial reloading for lazy compilation (#3662)
• 4f5bab1 docs: improve examples (#3672)
• f2d87fb fix: improve https CLI output (#3673)
• 0277c5e chore: remove redundant console statements (#3671)
• 16fcdbc docs: add `ipc` example (#3667)
• 8915fb8 test: add e2e tests for built in routes (#3669)
• 4d1cbe1 docs: ask `version` information in issue template (#3668)
• b6c1881 chore(deps-dev): bump core-js from 3.16.1 to 3.16.2 (#3666)
• ffa8cc5 chore(deps-dev): bump supertest from 6.1.5 to 6.1.6 (#3665)
• f1fdaa7 chore(release): 4.0.0-rc.1
• c4678bc fix: legacy API (#3660)
• d8bdd03 test: fix stability (#3661)
• 22b1414 refactor: remove `killable` (#3657)
• 75bafbf test: add e2e tests for module federation (#3658)
• 493ccbd chore(deps): update `ws` (#3652)
• ae8c523 test: add e2e test for universal compiler (#3656)
• f94b84f chore(deps): update (#3655)
• 1923132 test: fix cli
• 2adfd01 test: fix todo (#3653)
• 6e2cbde fix: proxy logging and allow to pass options without the `target` option (#3651)
• c9ccc96 fix: respect infastructureLogging.level for client.logging (#3613)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)