[Snyk] Security upgrade @symfony/webpack-encore from 4.6.1 to 5.0.0

[Macavity]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	601/1000 Why? Recently disclosed, Has a fix available, CVSS 6.3	Cross-site Scripting (XSS) SNYK-JS-COOKIE-8163060	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @symfony/webpack-encore

The new version differs by 125 commits.

• ce54d41 Tagging 5.0.0
• d7166c6 minor #1348 chore: Rewrite changelog for 5.0.0 (Kocal)
• dc91cf8 chore: Rewrite changelog for 5.0.0
• 15ad6a9 feature #1345 Add support for integrity hashes when asset names contain a query string (Kocal)
• 060a6e9 minor #1346 Fix method name (Kocal)
• 93dee6f Fix method name
• 23d32e5 Add support for integrity hashes when asset names contain a query string
• 0443f47 feature #1344 Add options configuration callback to Encore.enableReactPreset() (Kocal)
• 805915e Add options configuration callback to Encore.enableReactPreset()
• 524aa92 feature #1319 Drop support of css-loader ^6, add support for css-loader ^7.1 (Kocal)
• ac0fd39 [CSS Modules] Update our React/Preact tests to fit css-loader v7 default options, notify Vue users about the new behaviour and the solution
• 8286aa1 Drop support of css-loader ^6, add support for css-loader ^7.1
• 675d68d minor #1343 Add tests for CSS Modules with React and Preact (Kocal)
• c22943b Add tests for CSS Modules with React
• dbd5e5d Add tests for CSS Modules with Preact
• b212b15 feature #1342 Replace `assets-webpack-plugin` dependency by an internal plugin, to generate `entrypoints.json` file (Kocal)
• 0529865 Replace `assets-webpack-plugin` dependency by an internal plugin, to generate `entrypoints.json` file
• 10e9a96 minor #1339 Add PR template (Kocal)
• 30029dc Add PR template
• 4145464 minor #1338 Bump express from 4.19.2 to 4.20.0 (dependabot[bot])
• 1cf298b Bump express from 4.19.2 to 4.20.0
• 7436a0d feature #1336 Make webpack-dev-server optional (Kocal)
• 600c943 Make webpack-dev-server optional
• 9f31ac1 Merge pull request #1334 from stof/upgrade_stylus

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Cross-site Scripting (XSS)