[Snyk] Security upgrade webpack from 4.47.0 to 5.0.0

[ananthkamath]

Snyk has created this PR to fix one or more vulnerable packages in the `yarn` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • yarn.lock

Note for zero-installs users

If you are using the Yarn feature zero-installs that was introduced in Yarn V2, note that this PR does not update the .yarn/cache/ directory meaning this code cannot be pulled and immediately developed on as one would expect for a zero-install project - you will need to run yarn to update the contents of the ./yarn/cache directory.
If you are not using zero-install you can ignore this as your flow should likely be unchanged.

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	701/1000 Why? Recently disclosed, Has a fix available, CVSS 8.3	Improper Verification of Cryptographic Signature SNYK-JS-ELLIPTIC-8172694	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@types/estree@1.0.6	None	0	25.8 kB	types
npm/@webassemblyjs/helper-numbers@1.11.6	None	0	6.68 kB	xtuc
npm/acorn-import-attributes@1.9.5	None	0	32 kB	xtuc
npm/es-module-lexer@1.5.4	None	0	90.9 kB	guybedford
npm/glob-to-regexp@0.4.1	None	0	18.1 kB	nickfitzgerald
npm/unquote@1.1.1	None	0	2.41 kB	lakenen
npm/unset-value@1.0.0	None	0	8.53 kB	jonschlinkert
npm/upath@1.2.0	None	0	34.3 kB	anodynos
npm/update-browserslist-db@1.0.13	filesystem, shell Transitive: environment	+1	19.5 kB	ai
npm/uri-js@4.4.1	None	+1	503 kB	garycourt
npm/urix@0.1.0	None	0	4.37 kB	lydell
npm/url-parse@1.5.10	None	0	63 kB	swaagie
npm/url@0.11.3	None	0	78.3 kB	ljharb
npm/use@3.1.1	None	0	9.51 kB	jonschlinkert
npm/util.promisify@1.0.1	None	+1	1.99 MB	ljharb
npm/util@0.11.1	environment	0	24.5 kB	goto-bus-stop
npm/utils-merge@1.0.1	None	0	3.72 kB	jaredhanson
npm/uuid@8.3.2	None	0	116 kB	ctavan
npm/v8-compile-cache@2.4.0	environment, filesystem, unsafe	0	14.9 kB	yungsters
npm/vary@1.1.2	None	0	8.75 kB	dougwilson
npm/vendors@1.0.4	None	0	4.17 kB	wooorm
npm/vm-browserify@1.1.2	None	0	15.5 kB	goto-bus-stop
npm/watchpack-chokidar2@2.0.1	None	0	427 B	sokra
npm/watchpack@1.7.5	None	0	22.8 kB	sokra
npm/webpack-assets-manifest@3.1.1	filesystem	+2	83.4 kB	webdeveric
npm/webpack-cli@3.3.12	environment, filesystem, shell, unsafe	+1	250 kB	evilebottnawi
npm/webpack-dev-middleware@3.7.3	filesystem	+1	49.1 kB	evilebottnawi
npm/webpack-dev-server@3.11.3	environment, filesystem, network	0	508 kB	evilebottnawi
npm/webpack-log@2.0.0	None	0	15.7 kB	michael-ciniawsky
npm/webpack@4.47.0	environment, filesystem, unsafe	+1	1.79 MB	thelarkinn
npm/websocket-extensions@0.1.4	None	0	55 kB	jcoglan
npm/which-boxed-primitive@1.0.2	None	0	15 kB	ljharb
npm/which-module@2.0.1	None	0	4.04 kB	nexdrew
npm/which-typed-array@1.1.14	None	+1	59.3 kB	ljharb
npm/which@1.3.1	environment	0	9.42 kB	isaacs
npm/worker-farm@1.7.0	environment, shell	0	49.9 kB	rvagg
npm/wrap-ansi@5.1.0	None	0	9.62 kB	sindresorhus
npm/wrappy@1.0.2	None	0	2.96 kB	zkat
npm/ws@6.2.2	network	0	102 kB	lpinca
npm/xtend@4.0.2	None	0	6.46 kB	raynos
npm/y18n@4.0.3	filesystem	0	11 kB	oss-bot
npm/yallist@3.1.1	None	0	14.8 kB	isaacs
npm/yaml@1.10.2	environment	0	448 kB	eemeli
npm/yargs-parser@13.1.2	environment	0	57.1 kB	oss-bot
npm/yargs@13.3.2	environment, filesystem	0	229 kB	oss-bot
npm/yocto-queue@0.1.0	None	0	6.03 kB	sindresorhus

View full report↗︎