[Snyk] Upgrade webpack from 4.43.0 to 4.46.0

[snyk-bot]

Snyk has created this PR to upgrade webpack from 4.43.0 to 4.46.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released a year ago, on 2021-01-11.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	482/1000 Why? Proof of Concept exploit, CVSS 7.5	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	482/1000 Why? Proof of Concept exploit, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack

• 4.46.0 - 2021-01-11
  

  Bugfixes

  • fix behavior of defaults for resolve.roots to be backward-compatible
• 4.45.0 - 2021-01-08
  

  Features

  • resolve server-relative requests relative to project context by default

  Bugfixes

  • fix a bug where splitChunk minSize is not handled correctly
  • fix a bug where the order of splitChunk cacheGroups is not handled correctly
• 4.44.2 - 2020-09-17
• 4.44.1 - 2020-07-30
• 4.44.0 - 2020-07-24
• 4.43.0 - 2020-04-21

from webpack GitHub release notes

Commit messages

Package name: webpack

• 444e59f 4.46.0
• 758bb25 Merge pull request #12387 from webpack/bugfix/12386
• 79de1a2 enable backward-compatibility for resolve.roots
• ef75c04 Fix filename in azure pipeline
• 7714953 add test case
• 0331322 4.45.0
• e43bb4b Merge pull request #12372 from webpack/bugfix/split-chunks-min-size-4
• 4de8451 fix bug where cacheGroup index was inverted
• 3f69f3c fix bug where module size is added multiple times to the split chunk info
• c572c15 Merge pull request #11831 from Pyrolistical/patch-1
• 811395e Fixed resolve.roots default
• 2efeb4b 4.44.2
• 9635616 Merge pull request #11490 from webpack/bugfix/unknown-chunk-4
• 235b87b make sure to generate correct chunk connection for blocks that are only connected in some runtimes
• 4a1f068 Merge pull request #11180 from webpack/test/watch-production-4
• cd4af16 4.44.1
• 7895778 Merge pull request #11244 from webpack/bugfix/dynamic-reexport-default
• 46304c8 ignore default export when reexporting a dynamic module
• 91e81c8 Merge pull request #11190 from merceyz/patch-2
• 087af7c Merge branch 'webpack-4' into patch-2
• d4603c6 4.44.0
• ea06f03 Merge pull request #11225 from webpack/deps/watchpack
• eae1ba0 update watchpack
• 42dc038 Merge pull request #11210 from webpack/ci/timeout-4

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs