[Snyk] Fix for 1 vulnerabilities

[baby636]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • assets/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Missing Release of Resource after Effective Lifetime SNYK-JS-INFLIGHT-6095116	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: copy-webpack-plugin

The new version differs by 83 commits.

• 46af20a chore(release): 7.0.0
• 5d5635f refactor: code (#567)
• c6f68a5 refactor: code
• 4cea28b refactor: next
• 6c11e21 chore(release): 6.4.0
• db53937 feat: added the `info` option
• 9bc5416 feat: added type `Function` for the `to` option (#563)
• 7167645 chore(release): 6.3.2
• 7b58fd9 fix: watching directories (#558)
• 5215721 chore(release): 6.3.1
• c92b5ee style: default prettier options (#556)
• b996923 fix: watching (#555)
• fa5aa1b chore(release): 6.3.0
• bc2833e refactor: fix cache (#549)
• 87a8486 chore(deps): update (#547)
• b827c6e refactor: logger (#545)
• f98be10 refactor: handle errors (#544)
• b971374 refactor: code (#543)
• db2e3bf feat: added the `sourceFilename` info (original source filename) to assets info (#542)
• c892451 feat: persistent cache between compilations (webpack@5 only) (#541)
• 93936a0 chore(deps): update (#540)
• 36ff46a ci: updated webpack versions #536
• bd09a24 ci: updated webpack versions
• fb60b9b chore(release): 6.2.1

See the full diff

Package name: node-sass

The new version differs by 90 commits.

• 3b556c1 7.0.2
• c716359 Bump sass-graph@^4.0.1 (#3292)
• 24741b3 docs(readme): fix docpad plugin link
• 1523330 feat: Drop Node 12
• 365d357 update https://registry.npm.taobao.org to https://registry.npmmirror.com
• 1456114 build(deps): bump actions/upload-artifact from 2 to 3
• b465b69 chore: bump GitHub Actions to Windows 2019 (#3254)
• e6194b1 build(deps): bump make-fetch-happen from 9.1.0 to 10.0.4
• 4edf594 build(deps): bump node-gyp from 8.4.1 to 9.0.0
• 29e2344 build(deps): bump actions/checkout from 2 to 3
• 85b0d22 build(deps): bump actions/setup-node from 2 to 3
• 3bb51da Use make-fetch-happen instead of request (#3193)
• adc2f8b build(deps): bump true-case-path from 1.0.3 to 2.2.1 (#3000)
• 77d12f0 chore: disable Apline for Node 16/17 builds
• 308d533 ci: use Python 3 for Node 12
• c818907 ci: unpin actions/setup-node to v2
• 99242d7 7.0.1
• 77049d1 build(deps): bump sass-graph from 2.2.5 to 4.0.0 (#3224)
• c929f25 build(deps): bump node-gyp from 7.1.2 to 8.4.1 (#3209)
• 918dcb3 Lint fix
• 0a21792 Set rejectUnauthorized to true by default (#3149)
• e80d4af chore: Drop EOL Node 15 (#3122)
• d753397 feat: Add Node 17 support (#3195)
• dcf2e75 build(deps-dev): bump eslint from 7.32.0 to 8.0.0

See the full diff

Package name: terser-webpack-plugin

The new version differs by 69 commits.

• e679881 chore(release): 5.0.0
• 937a314 docs: update
• 393f249 refactor: next
• a80213f ci: updated webpack versions (Getting a format error, but only in Chrome. asciinema/asciinema-server#332)
• 8ae4b80 chore(release): 4.2.3
• 041b392 fix: better minimizing `mjs` assets (The images used by share does not respect configured cover frame asciinema/asciinema-server#329)
• b9c694d fix: minify `cjs` assets (asciinema oembed doesn't provide the player asciinema/asciinema-server#328)
• f49e786 chore(release): 4.2.2
• a75dc8b fix: related asset info
• 4103571 chore(deps): update
• 0b537c6 test: fix (Thumbnail images return HTTP 503 asciinema/asciinema-server#318)
• 978793e chore(release): 4.2.1
• f5bd8f8 fix: compatibility with webpack@5
• 0e21d92 test: cache (Fixes typo in embedding.html.md. asciinema/asciinema-server#316)
• 5de108d refactor: remove unused code ("Service 'phoenix' failed to build" while generating key asciinema/asciinema-server#315)
• 5340814 fix: cache for extracted comments (Suggestion after url changes asciinema/asciinema-server#314)
• bbfa283 chore(deps): update (Config Parameter admin_ids asciinema/asciinema-server#313)
• 17303be chore(release): 4.2.0
• 4bd622c feat: pass the `terserOptions` to the `minify` option (Selfhosted Server asciinema/asciinema-server#311)
• defde64 feat: improve caching
• 92f53b6 chore(deps): update
• c760c13 test: `realContentHash` (SVG previews asciinema/asciinema-server#304)
• 479d28b refactor: code (The database for Asciinema.Repo could not be created asciinema/asciinema-server#303)
• 9d861d8 fix: use webpack.sources when it's available for webpack@5 (ssh based web login asciinema/asciinema-server#301)

See the full diff

Package name: webpack

The new version differs by 250 commits.

• f2f998b 5.1.1
• bcd6190 Merge pull request #11704 from webpack/bugfix/delete-asset
• 11935a9 Merge pull request #11703 from webpack/bugfix/11678
• 63ba54c update chunk to files mapping when deleting assets
• 4669600 Merge pull request #11690 from webpack/bugfix/11673
• 234373e Merge pull request #11702 from webpack/deps/terser
• b6bc273 fix infinite loop in inner graph optimization
• 50c3a83 fix unused modules in chunk when optimizing runtime-specific
• 5d9d9b9 fix runtime-specific handling in concatenated modules
• 250e37c add test case
• 7925652 upgrade terser-webpack-plugin
• 27796db Merge pull request #11669 from webpack/dependabot/npm_and_yarn/ts-loader-8.0.5
• bd5aab8 Merge pull request #11692 from webpack/dependabot/npm_and_yarn/babel/core-7.12.0
• 886bbd5 Merge pull request #11693 from webpack/dependabot/npm_and_yarn/react-dom-16.14.0
• 3a14b3d Merge pull request #11694 from webpack/dependabot/npm_and_yarn/react-16.14.0
• ddf9936 chore(deps-dev): bump react from 16.13.1 to 16.14.0
• dc6e69a chore(deps-dev): bump react-dom from 16.13.1 to 16.14.0
• 8f18de9 chore(deps-dev): bump @ babel/core from 7.11.6 to 7.12.0
• c0410e8 Merge pull request #11686 from webpack/bugfix/11677
• 4504046 order runtime chunks correctly when they depend on each other
• 74a44cd add comment to help tagging for the bot
• e97efb7 chore(deps-dev): bump ts-loader from 8.0.4 to 8.0.5
• 77329b4 5.1.0
• 48c10f3 Merge pull request #11653 from log2-hwan/fix-moduletemplate-deprecation

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.