This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR
- Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
- src/templates/with-sass/package.json
#### Vulnerabilities that will be fixed
##### With an upgrade:
Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity
:-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------
 | **661/1000** **Why?** Recently disclosed, Has a fix available, CVSS 7.5 | Missing Release of Resource after Effective Lifetime [SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | No Known Exploit
(*) Note that the real score may have changed since the PR was raised.
Commit messagesPackage name: express-handlebars
The new version differs by 250 commits.
48c10f3 Merge pull request #11653 from log2-hwan/fix-moduletemplate-deprecation
See the full diff
Check the changes in this PR to ensure they won't cause issues with your project.
------------
**Note:** *You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.*
For more information:
🧐 [View latest project report](https://app.snyk.io/org/stoikerty/project/b2467e02-15aa-43a3-80cf-610df3095143?utm_source=github&utm_medium=referral&page=fix-pr)
🛠 [Adjust project settings](https://app.snyk.io/org/stoikerty/project/b2467e02-15aa-43a3-80cf-610df3095143?utm_source=github&utm_medium=referral&page=fix-pr/settings)
📚 [Read more about Snyk's upgrade and patch logic](https://support.snyk.io/hc/en-us/articles/360003891078-Snyk-patches-to-fix-vulnerabilities)
[//]: # (snyk:metadata:{"prId":"340781de-d2b7-4368-a797-7f0e6a551b0a","prPublicId":"340781de-d2b7-4368-a797-7f0e6a551b0a","dependencies":[{"name":"express-handlebars","from":"3.1.0","to":"7.0.0"},{"name":"node-sass","from":"4.14.1","to":"7.0.2"},{"name":"webpack","from":"4.47.0","to":"5.1.1"}],"packageManager":"npm","projectPublicId":"b2467e02-15aa-43a3-80cf-610df3095143","projectUrl":"https://app.snyk.io/org/stoikerty/project/b2467e02-15aa-43a3-80cf-610df3095143?utm_source=github&utm_medium=referral&page=fix-pr","type":"auto","patch":[],"vulns":["SNYK-JS-INFLIGHT-6095116"],"upgrade":["SNYK-JS-INFLIGHT-6095116"],"isBreakingChange":true,"env":"prod","prType":"fix","templateVariants":["priorityScore"],"priorityScoreList":[661],"remediationStrategy":"vuln"})
---
**Learn how to fix vulnerabilities with free interactive lessons:**
🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc=fix-pr)
This PR was automatically created by Snyk using the credentials of a real user.
Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.
#### Changes included in this PR - Changes to the following files to upgrade the vulnerable dependencies to a fixed version: - src/templates/with-sass/package.json #### Vulnerabilities that will be fixed ##### With an upgrade: Severity | Priority Score (*) | Issue | Breaking Change | Exploit Maturity :-------------------------:|-------------------------|:-------------------------|:-------------------------|:-------------------------  | **661/1000****Why?** Recently disclosed, Has a fix available, CVSS 7.5 | Missing Release of Resource after Effective Lifetime
[SNYK-JS-INFLIGHT-6095116](https://snyk.io/vuln/SNYK-JS-INFLIGHT-6095116) | Yes | No Known Exploit (*) Note that the real score may have changed since the PR was raised.
Commit messages
Package name: express-handlebars
The new version differs by 250 commits.- 1e169fe chore(release): 7.0.0 [skip ci]
- 86da3b2 fix: minimum Node v16 (#516)
- 3b08bbb fix(deps): update dependency glob to v9 (#514)
- 8917c9f chore(deps): update devdependency semantic-release to ^20.1.1
- 069c579 chore(deps): update typescript-eslint monorepo to ^5.54.0
- 790869d chore(deps): update devdependency eslint to ^8.35.0
- 4766eed chore(deps): update devdependency @ types/glob to ^8.1.0
- e88c951 chore(deps): update typescript-eslint monorepo to ^5.53.0
- c9d47e9 chore(deps): update devdependency jest-cli to ^29.4.3
- 62d5841 chore(deps): update typescript-eslint monorepo to ^5.52.0
- 16980b5 chore(deps): update devdependency eslint to ^8.34.0
- 2b1be56 chore(deps): update devdependency jest-cli to ^29.4.2
- 2e8c9df chore(deps): update typescript-eslint monorepo to ^5.51.0
- 7b6f9a0 chore(deps): update typescript-eslint monorepo to ^5.50.0
- 1538fbf chore(deps): update devdependency typescript to ^4.9.5
- 0898df3 chore(deps): update devdependency jest-cli to ^29.4.1
- 70539de chore(deps): update devdependency eslint to ^8.33.0
- e83940a chore(release): 6.0.7 [skip ci]
- 1bb2a2f fix(deps): update dependency glob to ^8.1.0 (#489)
- 5dffb89 chore(deps): update devdependency @ types/jest to ^29.4.0
- a983d2d chore(deps): update devdependency semantic-release to ^20.1.0
- 0c5eb2a chore(deps): update devdependency jest-cli to ^29.4.0
- c9986c8 chore(deps): update devdependency semantic-release to ^20.0.4
- 855b6d1 chore(deps): update typescript-eslint monorepo to ^5.49.0
See the full diffPackage name: node-sass
The new version differs by 90 commits.- 3b556c1 7.0.2
- c716359 Bump sass-graph@^4.0.1 (#3292)
- 24741b3 docs(readme): fix docpad plugin link
- 1523330 feat: Drop Node 12
- 365d357 update https://registry.npm.taobao.org to https://registry.npmmirror.com
- 1456114 build(deps): bump actions/upload-artifact from 2 to 3
- b465b69 chore: bump GitHub Actions to Windows 2019 (#3254)
- e6194b1 build(deps): bump make-fetch-happen from 9.1.0 to 10.0.4
- 4edf594 build(deps): bump node-gyp from 8.4.1 to 9.0.0
- 29e2344 build(deps): bump actions/checkout from 2 to 3
- 85b0d22 build(deps): bump actions/setup-node from 2 to 3
- 3bb51da Use make-fetch-happen instead of request (#3193)
- adc2f8b build(deps): bump true-case-path from 1.0.3 to 2.2.1 (#3000)
- 77d12f0 chore: disable Apline for Node 16/17 builds
- 308d533 ci: use Python 3 for Node 12
- c818907 ci: unpin actions/setup-node to v2
- 99242d7 7.0.1
- 77049d1 build(deps): bump sass-graph from 2.2.5 to 4.0.0 (#3224)
- c929f25 build(deps): bump node-gyp from 7.1.2 to 8.4.1 (#3209)
- 918dcb3 Lint fix
- 0a21792 Set rejectUnauthorized to true by default (#3149)
- e80d4af chore: Drop EOL Node 15 (#3122)
- d753397 feat: Add Node 17 support (#3195)
- dcf2e75 build(deps-dev): bump eslint from 7.32.0 to 8.0.0
See the full diffPackage name: webpack
The new version differs by 250 commits.- f2f998b 5.1.1
- bcd6190 Merge pull request #11704 from webpack/bugfix/delete-asset
- 11935a9 Merge pull request #11703 from webpack/bugfix/11678
- 63ba54c update chunk to files mapping when deleting assets
- 4669600 Merge pull request #11690 from webpack/bugfix/11673
- 234373e Merge pull request #11702 from webpack/deps/terser
- b6bc273 fix infinite loop in inner graph optimization
- 50c3a83 fix unused modules in chunk when optimizing runtime-specific
- 5d9d9b9 fix runtime-specific handling in concatenated modules
- 250e37c add test case
- 7925652 upgrade terser-webpack-plugin
- 27796db Merge pull request #11669 from webpack/dependabot/npm_and_yarn/ts-loader-8.0.5
- bd5aab8 Merge pull request #11692 from webpack/dependabot/npm_and_yarn/babel/core-7.12.0
- 886bbd5 Merge pull request #11693 from webpack/dependabot/npm_and_yarn/react-dom-16.14.0
- 3a14b3d Merge pull request #11694 from webpack/dependabot/npm_and_yarn/react-16.14.0
- ddf9936 chore(deps-dev): bump react from 16.13.1 to 16.14.0
- dc6e69a chore(deps-dev): bump react-dom from 16.13.1 to 16.14.0
- 8f18de9 chore(deps-dev): bump @ babel/core from 7.11.6 to 7.12.0
- c0410e8 Merge pull request #11686 from webpack/bugfix/11677
- 4504046 order runtime chunks correctly when they depend on each other
- 74a44cd add comment to help tagging for the bot
- e97efb7 chore(deps-dev): bump ts-loader from 8.0.4 to 8.0.5
- 77329b4 5.1.0
- 48c10f3 Merge pull request #11653 from log2-hwan/fix-moduletemplate-deprecation
See the full diff