[Snyk] Security upgrade @rails/webpacker from 4.2.2 to 5.2.2

[dauntlessnomad]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	619/1000 Why? Has a fix available, CVSS 8.1	Prototype Pollution SNYK-JS-AJV-584908	Yes	No Known Exploit
	644/1000 Why? Has a fix available, CVSS 8.6	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	Yes	No Known Exploit
	479/1000 Why? Has a fix available, CVSS 5.3	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	Yes	No Known Exploit
	506/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 3.7	Prototype Pollution SNYK-JS-MINIMIST-2429795	Yes	Proof of Concept
	601/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 5.6	Prototype Pollution SNYK-JS-MINIMIST-559764	Yes	Proof of Concept
	696/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 7.5	Prototype Poisoning SNYK-JS-QS-3153490	Yes	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @rails/webpacker

The new version differs by 117 commits.

• 745837a 5.2.2
• 21e2e6a Bump deps and remove node-sass (#2997)
• 6fbacc8 Merge pull request #2903 from pedrofurtado/5-x-stable
• 27a42bf Update ruby.yml
• b46ce72 Update file.js (#2902)
• 2f0f955 Support to Yarn v2/berry for webpacker 5.x (#2889)
• 9ec5daa 5.2.1
• e0b693d Revert "set Webpacker logger to tagged when rails TaggedLogging (#1311)"
• 38e3028 Fix test
• b7eb831 5.2.0
• f929500 Update webpack dependencies (#2692)
• 905b8ab Update terser-webpack-plugin (#2687)
• 63ff6e4 Minor dependency bump (#2686)
• 370fbfd Lint
• df050da Update debugging instructions (#2422)
• 92a1fdc environment.plugins.get('Manifest').opts is now environment.plugins.get('Manifest').options. (#2434)
• 04540f8 Fix doc spacing in helper.rb (#2325)
• 6d64a51 Allows setting of parallelization options (#2093)
• 76c174b set Webpacker logger to tagged when rails TaggedLogging (#1311)
• 409009b Documentation for target browsers (#2634)
• c71dc65 Remove default from rules (#2662)
• 82a1332 Use ruby/setup-ruby@v1 (#2618)
• 8cafa21 Remove default value from transform-runtime (#2666)
• 26109b3 Fix file-loader compat issue in webpacker 5 (#2668)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution
🦉 Regular Expression Denial of Service (ReDoS)