[Snyk] Upgrade webpack-cli from 4.0.0 to 4.2.0

[snyk-bot]

Snyk has created this PR to upgrade webpack-cli from 4.0.0 to 4.2.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 7 days ago, on 2020-11-04.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-Y18N-1021887	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack-cli

• 4.2.0 - 2020-11-04
  

  4.2.0 (2020-11-04)

  Bug Fixes

  • --config-name behaviour for functional configs (#2006) (29ecf8d)
  • assign cache value for default configs (#2013) (d2e3c74)
  • callback deprecation (#1977) (2cb0c0e)
  • handle core flags for webpack 4 (#2023) (ea66a7e)
  • help and version functionality (#1972) (e8010b3)

  Features

  • export utils from core for other packages (#2011) (3004549)
  • progress supports string argument (#2000) (f13346e)
  • suggest the closest match based on the Levenshtein distance algorithm (#2010) (491a582)
• 4.1.0 - 2020-10-19
• 4.0.0 - 2020-10-10

from webpack-cli GitHub release notes

Commit messages

Package name: webpack-cli

• 0caa918 chore(release): publish new version
• d2e3c74 fix: assign cache value for default configs ([Snyk] Upgrade mathjs from 6.0.1 to 6.6.1 #2013)
• 19fa662 chore(deps-dev): bump webpack from 5.3.2 to 5.4.0 ([Snyk] Upgrade mime from 2.4.0 to 2.4.4 #2031)
• ea369a9 feat: add WEBPACK_SERVE environment variable ([Snyk] Upgrade lint-staged from 10.0.3 to 10.0.9 #2027)
• 7c5a2ba fix: resolve dev server hot options correctly ([Snyk] Upgrade ccxt from 1.24.75 to 1.24.86 #2022)
• ba6f304 docs: update readme.md ([Snyk] Upgrade bootstrap from 4.3.1 to 4.4.1 #2037)
• 172da46 tests: add a case for invalid context value ([Snyk] Upgrade ccxt from 1.24.92 to 1.24.97 #2030)
• ec6d8b3 chore(deps-dev): bump lint-staged from 10.5.0 to 10.5.1 ([Snyk] Upgrade json2csv from 4.3.5 to 4.5.4 #2005)
• 49c84de chore(deps-dev): bump jest from 26.6.1 to 26.6.3 ([Snyk] Upgrade glob from 7.1.3 to 7.1.6 #2034)
• 2814365 chore: configure codecov reporting ([Snyk] Upgrade resolve-url-loader from 3.0.0 to 3.1.1 #2032)
• f4a72c5 tests: check for proper exit code ([Snyk] Upgrade ws from 7.1.0 to 7.2.3 #2025)
• 0038ff2 chore: coverage (Update husky to the latest version 🚀 #1899)
• 29ecf8d fix: --config-name behaviour for fuctional configs ([Snyk] Upgrade shelljs from 0.7.8 to 0.8.3 #2006)
• c261e65 chore: display running webpack version during tests ([Snyk] Upgrade style-loader from 1.0.0 to 1.1.3 #2026)
• 56d3228 chore(deps): remove unused ansi-escapes ([Snyk] Upgrade mongodb from 3.3.4 to 3.5.5 #2016)
• ea66a7e fix: handle core flags for webpack 4 ([Snyk] Upgrade css-loader from 3.0.0 to 3.4.2 #2023)
• 3004549 feat: export utils from core for other packages ([Snyk] Upgrade echarts from 4.1.0 to 4.7.0 #2011)
• bd24aa1 chore: add more tmp test files to .prettierignore ([Snyk] Upgrade jasmine from 3.3.1 to 3.5.0 #2017)
• 718e485 chore: improve error message for invalid progress value ([Snyk] Upgrade superagent from 5.0.2 to 5.2.2 #2014)
• a994d4b fix(info): throw error and exit for invalid --output value ([Snyk] Upgrade yargs from 13.1.0 to 13.3.2 #2020)
• bd90732 tests: update anayze-flag test ([Snyk] Upgrade webpack-cli from 3.2.1 to 3.3.11 #2015)
• 491a582 feat: suggest the closest match based on the Levenshtein distance algorithm ([Snyk] Upgrade shelljs from 0.7.8 to 0.8.3 #2010)
• 07d18b0 chore: cleanup cli ([Snyk] Upgrade @babel/core from 7.2.2 to 7.9.0 #2009)
• f86ef2d fix(generators): correct optimization.splitChunks option in config ([Snyk] Upgrade ccxt from 1.18.1191 to 1.24.75 #2008)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs