bumps vulnerable loader-utils and shell-quote deps to versions where fix was employed. Fix for loader-utils is version 2.0.3 and up while for shell-quote it's version 1.7.3 and up.
had to use overrideloader-utils for root package.json because the repo relies on storybook 6 which brings in webpack 4 and that uses version1.x of loader-utils. Upgrading from storybook 6 is a big undertaking so skipped that step in this case.
bumps made in docs/package.json were simply done with npm update loader-utils and npm update shell-quote respectively
bumps vulnerable
loader-utils
andshell-quote
deps to versions where fix was employed. Fix forloader-utils
is version2.0.3
and up while forshell-quote
it's version1.7.3
and up.override
loader-utils
for rootpackage.json
because the repo relies on storybook 6 which brings in webpack 4 and that uses version1.x
ofloader-utils
. Upgrading from storybook 6 is a big undertaking so skipped that step in this case.docs/
package.json
were simply done withnpm update loader-utils
andnpm update shell-quote
respectively