Skip to content

Commit 5f6aac6

Browse files
authored
chore: update webpack and copy-webpack-plugin to fix serialize-javascript vulnerability (#4959)
This PR updates `copy-webpack-plugin` to `^14.0.0` and `webpack` to `^5.105.4` in `gcp/website/frontend3`. These updates resolve a high-severity security vulnerability in the transitive dependency `serialize-javascript` (reported in GHSA-5c6j-r48x-rmvq). By updating these direct dependencies, `serialize-javascript` is upgraded from `6.0.2` to `7.0.4`, which contains the necessary security fixes.
1 parent 11da21c commit 5f6aac6

2 files changed

Lines changed: 82 additions & 84 deletions

File tree

gcp/website/frontend3/package.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,15 +18,15 @@
1818
"lit": "3.3.2"
1919
},
2020
"devDependencies": {
21-
"copy-webpack-plugin": "^13.0.0",
21+
"copy-webpack-plugin": "^14.0.0",
2222
"css-loader": "^7.1.3",
2323
"html-webpack-plugin": "^5.6.6",
2424
"mini-css-extract-plugin": "^2.10.0",
2525
"raw-loader": "^4.0.2",
2626
"sass": "^1.97.3",
2727
"sass-loader": "^16.0.0",
2828
"style-loader": "^4.0.0",
29-
"webpack": "^5.104.1",
29+
"webpack": "^5.105.4",
3030
"webpack-bundle-analyzer": "^5.0.0",
3131
"webpack-cli": "^6.0.0",
3232
"webpack-dev-server": "^5.2.3"

0 commit comments

Comments
 (0)