[Snyk] Security upgrade web-ext from 4.3.0 to 6.0.0

[nchathu2014]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/react-devtools-extensions/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Uncontrolled resource consumption SNYK-JS-BRACES-6838727	Yes	No Known Exploit
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Inefficient Regular Expression Complexity SNYK-JS-MICROMATCH-6838728	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: web-ext

The new version differs by 224 commits.

• 25931e3 chore: Bump package version for release 6.0.0
• 281a814 fix: Bump minimum nodejs version supported to v12 (Add some missing keys to getEventKey facebook/react#2192)
• 9ed6a31 chore(deps): update dependency flow-bin to v0.146.0 (Move onscroll detection facebook/react#2181)
• ee0810a chore(deps): update dependency mocha to v8.3.1 (Improper 'this' context during createClass(): 0.11.1 facebook/react#2183)
• ddd5240 fix(deps): update dependency addons-linter to v2.21.0 (Backbone/jQuery style alternative notation for setState/setProps facebook/react#2189)
• 8253369 chore(deps): update dependency chai to v4.3.3 (docs - MyComponent() does not create component instance facebook/react#2179)
• 7fa69fb chore: Rewrote watchChange to make use of async await (Community roundup #22 facebook/react#2186)
• 7612a93 fix: Added alias for watch-file option (video component doesnt support media events facebook/react#2182)
• 629aa14 fix: Move filename from global to build command option (Docs grammar tweak facebook/react#2178)
• 0835252 chore(deps): update dependency chai to v4.3.1 (Add createElement for 0.11 facebook/react#2177)
• 0132a13 fix(deps): update dependency addons-linter to v2.20.0 (on reactLink, checkedLink facebook/react#2176)
• c0b2be3 chore(deps): update babel monorepo (null props considered differently in getDefaultProps vs. isRequired facebook/react#2166)
• 00fb376 chore(deps): update dependency webpack to v5.24.2 (Update ref-03-component-specs.md facebook/react#2167)
• aac5bfb chore(deps): update dependency eslint to v7.21.0 (Expose an API to preprocess the VDOM tree before diffing facebook/react#2174)
• 0389d33 fix(deps): update dependency firefox-profile to v4.1.0 (Added extra explanation for require() statements facebook/react#2170)
• b8a9482 chore(deps): update dependency eslint-plugin-flowtype to v5.3.1 (Inner required fields in shaped props not reported properly facebook/react#2168)
• 994a73b fix(deps): update dependency node-notifier to v9 (No support for the svg stroke-linejoin attribute facebook/react#2103)
• d0214f2 chore(deps): update babel monorepo (setState callback in componentWillMount should get called facebook/react#2164)
• 13861a0 fix: Updated Watchpack watch method calls to use the new options format
• 2d22460 chore: Rephrased --watch-ignored test case description
• 8dd4ecf fix: Transform watch ignored paths as expected by Watchpack when running on windows
• 8cfe9c4 chore(test): Fixed test helper function in test.watcher.js based on changes to watchpack@2 internals
• e18c4d8 fix(deps): update dependency watchpack to v2
• 773cfa0 fix(deps): update dependency zip-dir to v2 ([docs] Update Flux TodoMVC Tutorial facebook/react#2080)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Uncontrolled resource consumption