[Snyk] Security upgrade react-hot-loader from 4.12.18 to 4.13.1

[tagraha]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	713/1000 Why? Proof of Concept exploit, Recently disclosed, Has a fix available, CVSS 6.4	Prototype Pollution SNYK-JS-JSON5-3182856	No	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: react-hot-loader

The new version differs by 34 commits.

• 07d1f4e 4.13.1
• bddd179 update loader-utils version (#1849)
• f58a931 Remove space after peerDependency version definition (#1843)
• 642b705 `README.md`fix typo (#1811)
• ed8b310 Note create-react-app support for fast refresh in readme (#1708)
• 6032f42 chore(release): 4.13.0
• c05396b feat: support React 17 (#1557)
• e44103a fix: tailUpdate might be blocked by a PureComponent (#1448)
• 74d3d9b Merge pull request #1513 from gaearon/gaearon-patch-1
• d73d505 README: Link to Fast Refresh Webpack plugin
• e6035ec Make Limitations clearer to understand (#1472)
• 5301dc8 docs: fix typo (#1471)
• 92961be Discourage using webpack loader for all the files (#1452)
• ec3447f fix: when module.hot is not truthy (#1451)
• 1afb27a update changelog
• e1cb244 chore(release): 4.12.21
• 8c39451 add peerDependenciesMeta in package.json (#1433)
• 54e796e Update README.md (#1432)
• d2f63f2 chore(release): 4.12.20
• 5475fe7 fix: patch support for react-dom 16.13 (#1428)
• 08d8b15 Fix link to issue 1001 in readme (#1415)
• 7e91294 Fix small readme typo (#1416)
• 5d3eb82 add inner hook to the SC example
• 1cd74e3 chore(release): 4.12.19

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Prototype Pollution

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Updated
react-start	❌ Failed (Inspect)		Feb 3, 2023 at 9:41AM (UTC)