[Snyk] Upgrade webpack from 4.44.2 to 4.46.0

[snyk-bot]

Snyk has created this PR to upgrade webpack from 4.44.2 to 4.46.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released a year ago, on 2021-01-11.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack

• 4.46.0 - 2021-01-11
  

  Bugfixes

  • fix behavior of defaults for resolve.roots to be backward-compatible
• 4.45.0 - 2021-01-08
  

  Features

  • resolve server-relative requests relative to project context by default

  Bugfixes

  • fix a bug where splitChunk minSize is not handled correctly
  • fix a bug where the order of splitChunk cacheGroups is not handled correctly
• 4.44.2 - 2020-09-17

from webpack GitHub release notes

Commit messages

Package name: webpack

• 444e59f 4.46.0
• 758bb25 Merge pull request #12387 from webpack/bugfix/12386
• 79de1a2 enable backward-compatibility for resolve.roots
• ef75c04 Fix filename in azure pipeline
• 7714953 add test case
• 0331322 4.45.0
• e43bb4b Merge pull request #12372 from webpack/bugfix/split-chunks-min-size-4
• 4de8451 fix bug where cacheGroup index was inverted
• 3f69f3c fix bug where module size is added multiple times to the split chunk info
• c572c15 Merge pull request #11831 from Pyrolistical/patch-1
• 811395e Fixed resolve.roots default

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs