[Backport 1.x][CVE] Bump loader-utils to 2.0.3 to fix CVE-2022-37601

[ZilongX]

Signed-off-by: Zilong Xia zilongx@amazon.com

Description

• Manually backport CVE fix PR branch ([CVE] Bump loader-utils to 2.0.3 to fix CVE-2022-37601 #2689) to 1.x

Issues Resolved

Resolves #2560
Resolves #2612

Check List

• All tests pass
  • yarn test:jest
  • yarn test:jest_integration
  • yarn test:ftr
• New functionality includes testing.
• New functionality has been documented.
• Update CHANGELOG.md
• Commits are signed per the DCO using --signoff

[opensearch-trigger-bot]

The backport to 1.3 failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add .worktrees/backport-1.3 1.3
# Navigate to the new working tree
cd .worktrees/backport-1.3
# Create a new branch
git switch --create backport/backport-2707-to-1.3
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 b8f6040e83bc5291f25c983187d04e2516986b48
# Push it to GitHub
git push --set-upstream origin backport/backport-2707-to-1.3
# Go back to the original working tree
cd ../..
# Delete the working tree
git worktree remove .worktrees/backport-1.3

Then, create a pull request where the base branch is 1.3 and the compare/head branch is backport/backport-2707-to-1.3.