From e7c12cd292b8c0d4775cc3f0bb5daa7ce770a1da Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 5 Nov 2022 04:24:47 +0000 Subject: [PATCH] fix: packages/@vue/cli-service/package.json to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-JS-LOADERUTILS-3043105 --- packages/@vue/cli-service/package.json | 20 ++++++++++---------- 1 file changed, 10 insertions(+), 10 deletions(-) diff --git a/packages/@vue/cli-service/package.json b/packages/@vue/cli-service/package.json index 0a47bdb26d..d8da0bf83e 100644 --- a/packages/@vue/cli-service/package.json +++ b/packages/@vue/cli-service/package.json @@ -33,38 +33,38 @@ "chalk": "^2.4.1", "clipboardy": "^1.2.3", "cliui": "^4.1.0", - "copy-webpack-plugin": "^4.5.1", - "css-loader": "^0.28.11", + "copy-webpack-plugin": "^6.0.0", + "css-loader": "^4.0.0", "debug": "^3.1.0", "escape-string-regexp": "^1.0.5", - "file-loader": "^1.1.11", + "file-loader": "^6.0.0", "friendly-errors-webpack-plugin": "^1.7.0", "fs-extra": "^6.0.1", "get-value": "^3.0.1", "globby": "^8.0.1", "hash-sum": "^1.0.2", - "html-webpack-plugin": "^3.2.0", + "html-webpack-plugin": "^5.0.0", "launch-editor-middleware": "^2.2.1", "lodash.defaultsdeep": "^4.6.0", "lodash.mapvalues": "^4.6.0", "lodash.transform": "^4.6.0", - "mini-css-extract-plugin": "^0.4.0", + "mini-css-extract-plugin": "^1.0.0", "minimist": "^1.2.0", "optimize-css-assets-webpack-plugin": "^4.0.1", "ora": "^2.1.0", "portfinder": "^1.0.13", - "postcss-loader": "^2.1.5", + "postcss-loader": "^4.0.0", "read-pkg": "^3.0.0", "semver": "^5.5.0", "slash": "^2.0.0", "source-map-url": "^0.4.0", "string.prototype.padend": "^3.0.0", - "thread-loader": "^1.1.5", + "thread-loader": "^3.0.0", "uglifyjs-webpack-plugin": "^1.2.5", - "url-loader": "^1.0.1", - "vue-loader": "^15.2.0", + "url-loader": "^4.0.0", + "vue-loader": "^16.0.0", "vue-template-compiler": "^2.5.16", - "webpack": "^4.8.2", + "webpack": "^5.0.0", "webpack-bundle-analyzer": "^2.13.1", "webpack-chain": "^4.8.0", "webpack-dev-server": "^3.1.4",