search

GTBitsOfGood / membership

Manage Bits of Good Members
MIT License
1 stars 0 forks source link

[Snyk] Security upgrade babel-loader from 6.4.1 to 7.1.0 #69

Open snyk-bot opened 4 years ago

snyk-bot commented 4 years ago

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

Changes included in this PR

Vulnerabilities that will be fixed

With an upgrade:
Severity Issue Breaking Change Exploit Maturity
medium severity Prototype Pollution
SNYK-JS-MINIMIST-559764		 Yes Proof of Concept
Commit messages
Package name: babel-loader The new version differs by 54 commits.
  • d249119 7.1.0
  • ea9b4d4 Update yarn.lock
  • 7986787 chore(package): update eslint-config-babel to version 7.0.0 (#469)
  • ee40748 chore(package): update lint-staged to version 4.0.0 (#470)
  • 66784e4 Update to webpack 3 (#471)
  • 8544ffa Only base cache identifier on babel options from pkg.json (#468)
  • ea2eafa Add prettier eslint plugin (#466)
  • 4548169 Add node 8 to test matrix (#467)
  • d8b73c0 fix(resolve-rc): look for babel in package.json and .babelrc.js (#465)
  • 8d96c1f Remove outdated examples.
  • 91f2658 Fixed: watch configuration files. (#460)
  • de2d3f3 Upgrade dependencies
  • 37e63e3 Upgrade find-cache-dir to 1.0 and cross-env to 5.0 (#457)
  • 1a76476 7.0.0
  • 7307226 Point changelog to releases
  • 174cb10 Merge branch '7.0'
  • 2204871 Add prettier (#409)
  • dbec80d Make sure .babelrc is a file, not a directory (#427)
  • aa485e4 Use bash codecov (#440)
  • 16522b6 yarn.lock
  • 660922b Update ava to the latest version 🚀 (#434)
  • 5d248b5 Update cross-env to the latest version 🚀 (#431)
  • 74ff2e6 Updated documentation to match webpack v2 changes. (#438)
  • ed8711d Add note about webpack versions
See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic