WhiteSource security checks fails on version of y18n used via webpack-dev-server

[aziemchawdhary-gs]

Current builds fail on WhiteSource security checks due to CVE-2020-7774 affecting y18n. (Example build)

This dependency is brought in via webpack-dev-server, but seems that the change needs to be backported to y18n v4 and to allow webpack-dev-server to be updated.

Rather than waiting we could force the dependency update on y18n to version 5.0.5, since webpack-dev-server cannot update to that version due to their dependency on node >= 6.11.5 and we use a later version.

What do you think @akphi?

[akphi]

webpack-dev-server is about to do a v4 release, let's wait for it.