[Snyk] Fix for 1 vulnerabilities

[nextwebb]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	768/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: babel-loader

The new version differs by 34 commits.

• b89dfbd 9.1.3
• 54fb781 Update caniuse
• 6f300f3 bump find-cache-dir to v4 (#995)
• 2fd1c0a Bump semver from 7.3.2 to 7.5.2 (#993)
• b3682fd Add more exhaustive example on customized-loader (#897)
• a797c3b ci: bump actions/checkout (#981)
• 170350e Bump http-cache-semantics from 4.1.0 to 4.1.1 (#982)
• 78bd0a1 Update README.md (#987)
• c049187 Bump webpack from 5.74.0 to 5.76.0 (#986)
• 0406d16 9.1.2
• ca0cc0e Bump json5 from 2.2.1 to 2.2.3 (#980)
• c8b1feb build: harden ci.yml permissions (#976)
• 4e70cca Bump qs from 6.5.2 to 6.5.3 (#977)
• 15fbacf 9.1.0
• 6348e1c Pass external dependencies from Babel to Webpack (#971)
• 457b9ad Update webpack
• f42ac9b 9.0.1
• 4f9c0bf remove "node:" builtin prefix (#970)
• 9ff288f 9.0.0
• 006a3dc Update README.md
• daed88a Update README.md
• 0ed5fd6 Bump ini from 1.3.5 to 1.3.8 (#968)
• b1749e3 Bump y18n from 4.0.0 to 4.0.3 (#967)
• 3a55a4a Bump lodash from 4.17.20 to 4.17.21 (#966)

See the full diff

Package name: nodemon

The new version differs by 30 commits.

• f219dcc test: Update release.yml to use ubuntu-latest (#2123)
• af3b9e2 fix: node@10 support back in
• a3f0e12 test: package wasn't installing
• 8ded28c docs: update test runners and add TODO
• 83ef51d chore: website supporters
• 86d5f40 fix: also watch cjs
• 7881f05 chore: remove legacy .nodemon support
• 04302b8 Merge branch 'Vindeep07-develop'
• 64c426a Merge branch 'develop' of https://github.com/Vindeep07/nodemon into Vindeep07-develop
• c13dbbb Merge branch 'Triple-Whale-main'
• 023e2d1 Merge branch 'main' of https://github.com/Triple-Whale/nodemon into Triple-Whale-main
• 725569b Merge branch 'ibmi-always-enable-polling' of https://github.com/abmusse/nodemon into abmusse-ibmi-always-enable-polling
• 6bb8766 fix: semver vuln dep
• 3b58104 feat: always use polling on IBM i
• 3681000 update simple-update-notifier
• 083b4a6 bump simple-update-notifier & semver
• 6787871 chore: web site render
• ddbc630 chore: web site render
• d585386 allow user set PATH
• 43bdacc Merge branch 'main' of github.com:remy/nodemon
• 65ad501 chore: web site render
• 75c275a chore: web site render
• 272d519 chore: web site render
• 40a8d45 chore: fix web site render

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)