[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • large-file/package.json
  • large-file/package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: cacache

The new version differs by 9 commits.

• 41e12c1 chore(release): 11.0.1
• 208b7bd deps: bump ssri
• aa59d82 chore(release): 11.0.0
• 33d4eed feat(opts): use figgy-pudding for opts ([Snyk] Fix for 2 vulnerable dependencies #128)
• 529f347 meta: drop support for node@4
• 4446327 test: use nyc through tap
• 109ff93 standard: --fix for standard@11
• 3817b7a deps: bump devDeps
• a7d25b4 deps: bump deps

See the full diff

Package name: uglifyjs-webpack-plugin

The new version differs by 21 commits.

• 266bb1c chore(release): 2.0.0
• 4d3b3d2 chore(release): 1.3.0
• 6d9c36f fix(uglify/Runner): `cpus` length in a chroot environment (`os.cpus()`) ([Snyk(Unlimited)] Upgrade debug from 2.0.0 to 2.6.9 #341)
• c67566e refactor: tests ([Snyk-local(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 #336)
• 77d957a refactor: tests ([Snyk-local(Unlimited)] Upgrade from thebespokepixel/es-tinycolor to thebespokepixel/es-tinycolor #335)
• 817f67e refactor: tests ([Snyk-local(Unlimited)] Upgrade verbosity from 0.9.2 to 0.10.1 #334)
• 726874b refactor: code and tests ([Snyk-local(Unlimited)] Upgrade from thebespokepixel/meta to thebespokepixel/meta #333)
• 24fe22b fix: all nodejs globals avaliable inside `minify` function ([Snyk-local(Unlimited)] Upgrade truwrap from 0.8.1 to 0.8.4 #332)
• 0174605 feat: support `minify` function option ([Snyk(Unlimited)] Upgrade debug from 2.0.0 to 2.6.9 #325)
• 249eef3 feat: `cacheKeys` option ([Snyk(Unlimited)] Upgrade from thebespokepixel/meta to thebespokepixel/meta #320)
• 2cd4ba0 docs(readme): update snippet to webpack v4 ([Snyk(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 #323)
• f0d0a3b chore(deps): update `package-lock.json` ([Snyk(Unlimited)] Upgrade from thebespokepixel/es-tinycolor to thebespokepixel/es-tinycolor #322)
• 16d4eb3 chore(release): 1.2.7
• cabee6c fix: no warning when `warningsFilter` return false ([Snyk(Unlimited)] Upgrade term-ng from 0.8.1 to 0.8.5 #317)
• 1521c82 chore(release): 1.2.6
• 120e4b0 docs: fix broken markdown ([Snyk(Unlimited)] Upgrade node-uuid from 1.4.0 to 1.4.8 #315)
• 4f50156 fix: return missing important information ([Snyk(Unlimited)] Upgrade verbosity from 0.9.2 to 0.10.1 #306)
• 6ab0918 fix: disable inline optimization by default ([Snyk(Unlimited)] Upgrade color-convert from 1.9.2 to 1.9.3 #308)
• 3ca5eaf fix: perf regression ([Snyk(Unlimited)] Upgrade from thebespokepixel/meta to thebespokepixel/meta #305)
• 3f0767b fix: don't use a worker farm unless more than one process is required ([Snyk-local(Unlimited)] Upgrade @thebespokepixel/meta from 0.2.3 to 0.2.5 #280)
• dbebb3b fix: improve `isSouceMap` check ([Snyk-local(Unlimited)] Upgrade lodash from 4.17.10 to 4.17.11 #284)

See the full diff

Package name: webpack

The new version differs by 250 commits.

• 04f90c5 4.26.0
• e1df721 Merge pull request #8392 from vkrol/cherry-pick-terser-to-webpack-4
• a818def fix for changed API in terser plugin warningsFilter
• b39abf4 Rename test directories too
• 311a728 Switch from uglifyjs-webpack-plugin to terser-webpack-plugin
• a230148 Merge pull request #8351 from DeTeam/chunk-jsdoc-typo
• 7a0af76 Fix a typo in Chunk#split jsdoc comment
• 2361995 4.25.1
• e2a2016 Merge pull request #8338 from webpack/bugfix/issue-8293
• babe736 replace prefix/postfix even when equal for wrapped context
• dcd0d59 test for #8293
• af123a8 Merge pull request #8334 from webpack/bugfix/lint
• 36eb0bb move azure specific commands to azure-pipelines.yml
• 290094e 4.25.0
• 355590e Merge pull request #8250 from Aladdin-ADD/patch-3
• 0293c3a Merge pull request #8279 from smelukov/support-entry-progress
• 1ea411b Merge pull request #8139 from NaviMarella/FormatManifest
• 4b72635 exclude watch test cases
• e35d084 increase test timeout
• 6be1411 move schema into definitions
• 3d74504 add missing hooks to progress
• 56d8a8f prevent writing the same message multiple times to stderr
• 64e3826 use flags to show different parts of the progress message
• 8c5e74f Merge branch 'master' into support-entry-progress

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic