Merge pull request #3578 from weaveworks/security-fixes

Security fixes in dev dependencies (part 1)

client/package.json

@@ -18,7 +18,7 @@
     "d3-selection": "1.3.2",
     "d3-shape": "1.2.2",
     "d3-time-format": "2.1.0",
-    "dagre": "0.7.4",
+    "dagre": "0.8.4",
     "debug": "3.1.0",
     "filesize": "3.5.11",
     "filter-invalid-dom-props": "2.0.0",
@@ -34,8 +34,8 @@
     "react": "16.5.0",
     "react-dom": "16.5.0",
     "react-motion": "0.5.2",
-    "react-redux": "5.0.6",
-    "redux": "3.7.2",
+    "react-redux": "5.1.0",
+    "redux": "4.0.1",
     "redux-immutable": "4.0.0",
     "redux-logger": "3.0.6",
     "redux-thunk": "2.2.0",
@@ -59,16 +59,15 @@
     "babel-plugin-transform-object-rest-spread": "6.26.0",
     "babel-preset-env": "1.6.1",
     "babel-preset-react": "6.24.1",
-    "browser-perf": "1.4.11",
     "clean-webpack-plugin": "0.1.17",
-    "css-loader": "0.28.7",
+    "css-loader": "0.28.11",
     "eslint": "4.9.0",
     "eslint-config-airbnb": "16.1.0",
     "eslint-loader": "1.9.0",
     "eslint-plugin-import": "2.7.0",
     "eslint-plugin-jsx-a11y": "6.0.2",
     "eslint-plugin-react": "7.4.0",
-    "express": "4.15.2",
+    "express": "4.16.4",
     "extract-text-webpack-plugin": "2.1.0",
     "file-loader": "1.1.5",
     "html-webpack-plugin": "2.30.1",
@@ -85,12 +84,12 @@
     "sass-loader": "6.0.6",
     "sasslint-webpack-plugin": "^1.0.4",
     "style-loader": "0.19.0",
-    "stylelint": "9.1.3",
+    "stylelint": "9.10.1",
     "stylelint-config-recommended": "2.1.0",
     "stylelint-config-styled-components": "0.1.1",
-    "stylelint-custom-processor-loader": "0.4.0",
-    "stylelint-declaration-use-variable": "1.6.1",
-    "stylelint-processor-styled-components": "1.3.1",
+    "stylelint-custom-processor-loader": "0.6.0",
+    "stylelint-declaration-use-variable": "1.7.0",
+    "stylelint-processor-styled-components": "1.5.2",
     "url": "0.11.0",
     "url-loader": "0.6.2",
     "webpack": "2.4.1",