[Snyk] Fix for 1 vulnerabilities

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	551/1000 Why? Recently disclosed, Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: css-loader

The new version differs by 39 commits.

• d7317ca chore(release): css-loader v0.26.2
• 7732614 Merge pull request #428 from helloyou2012/master
• f8cdaca fix deprecation warning (loader-utils)
• 7c45e94 docs(readme): udpates for JSF maintainers
• 199897f Fix Maintainer section look (#409)
• 793390a Merge pull request #408 from d3viant0ne/d3viant0ne-TravisValidations
• 2fd0c78 ci(Travis): updates Travis validations
• e54549e Merge pull request #407 from christianvuerings/readme-minimize
• 4bd7130 README - fix default for minimize
• 9508990 Merge pull request #380 from michael-ciniawsky/readme
• 08e9d47 Add `files` to `package.json`. (#388)
• 5735e5d Implement feedback from other loader readme's
• 851a22b Bump source-map-list to 0.1.7 (#383)
• a38e254 Add license file
• 5b856b2 0.26.1
• 85a2156 docs(README): refactor for webpack v2
• 46ebca3 expose getLocalIdent (#357)
• 564f521 add issue templates
• 9df4467 Update README.md
• 9497d74 0.26.0
• 2cd0cf7 update deps
• 8cd1069 Make -loader suffix consistent in README.md (#375)
• 008e6fd Disable Autoprefixer in cssnano (#361)
• 22f6621 0.25.0

See the full diff

Package name: file-loader

The new version differs by 28 commits.

• 5d8f73e chore(release): 0.10.1
• a8358a0 fix(getOptions): deprecation warn in loaderUtils (#129)
• b01526a Merge pull request #123 from simon04/master
• 32aada7 Remove license link
• 2d239df chore(release): 0.10.0
• ba2e876 ci(Travis): update to webpack standard build
• d82e8de docs(readme): update urls for contrib move
• eaeaa0e docs(readme): fix icon url
• 6fec719 chore(release): add standard version & documentation
• 3e5985a docs(readme): fix maintainers section look
• b5ea427 chore(readme): Update to webpack standard format
• 1462d4b chore(license): add js foundation LICENSE file
• 6833c70 feat(resources): specify custom public file name
• 0727efe chore(issues): add issue templates
• 9fdd47e Add -loader suffix to README to reflect new loader syntax webpack 2 requirement
• 162c8fa 0.9.0
• f21695e Merge pull request #41 from kossnocorp/patch-1
• 6dd8c0d Merge pull request #47 from tedpennings/patch-2
• 6a0317e added missing piece from #42
• 5ae3077 Merge branch 'public-path' #57
• dba9318 Merge pull request #58 from mrpoptart/patch-1
• 0241876 Merge pull request #74 from elyobo/optional-emit
• 20c8fff Make emitting a file optional.
• 011fa30 Update README.md

See the full diff

Package name: img-loader

The new version differs by 12 commits.

• fcf2293 rewrite for webpack 2
• b00d2d6 Merge pull request [Snyk] Security upgrade img-loader from 1.3.1 to 3.0.0 #13 from thetalecrafter/greenkeeper/standard-9.0.0
• 2248170 chore(package): update standard to version 9.0.0
• b6ff9fc Merge pull request [Snyk] Security upgrade img-loader from 1.3.1 to 3.0.0 #11 from thetalecrafter/greenkeeper/initial
• 1d84ffb docs(readme): add Greenkeeper badge
• cadfa4f Merge pull request [Snyk] Fix for 1 vulnerable dependencies #9 from thetalecrafter/greenkeeper-standard-8.0.0
• e85505b chore(package): update standard to version 8.0.0
• 2c6d5ba Merge pull request [Snyk] Fix for 1 vulnerable dependencies #8 from thetalecrafter/greenkeeper-mocha-3.0.0
• a1eb431 chore(package): update mocha to version 3.0.0
• 69b68d8 stinkin badges
• 614d542 be strict
• 94000a8 add travis ci

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)