[caniszczyk]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• ui/package.json
• ui/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-DECODEURICOMPONENT-21802484	803

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[caniszczyk]

This update includes two major version upgrades that introduce significant breaking changes and require developer action.

Top Upgrades

• babel-jest@25.5.1 → babel-jest@27.0.0
• fork-ts-checker-webpack-plugin@1.4.3 → fork-ts-checker-webpack-plugin@5.0.0

These upgrades are high-risk and will likely require code and configuration adjustments.

Breaking Change Analysis

babel-jest (25.5.1 → 27.0.0)

This is a major upgrade across two versions of Jest (v26 and v27), introducing several breaking changes.

• Modern Fake Timers: Jest 27 enables modern fake timers by default. This can alter test behavior, especially for tests relying on timers, due to changes in how ticks are handled between test hooks.
• API and ESM Changes: Jest 27 introduced API changes and improved support for ES Modules, which may require updates to your transform configuration. For instance, the way babel-jest is imported and used in transformers might have changed.
• Node.js and TypeScript Versions: Support for Node.js 8 was dropped in Jest 26, and a minimum TypeScript version of 3.8 is now required.

Recommendation: Carefully review tests that use fake timers (jest.useFakeTimers()). You may need to switch to legacy timers (jest.useFakeTimers('legacy')) temporarily or refactor your tests. Check your Jest and Babel configurations for compatibility with the new versions.

Source: Jest documentation and community discussions.

fork-ts-checker-webpack-plugin (1.4.3 → 5.0.0)

This is a substantial upgrade from v1 to v5, which almost certainly requires a migration to webpack 5.

• Webpack 5 Requirement: Version 5 of this plugin is designed for webpack 5. Upgrading will likely fail if you are still using webpack 4, as the plugin's hooks and types were updated.
• Configuration Changes: The plugin's options and default behaviors have changed significantly across major versions. For example, tslint support was removed in earlier versions, and the plugin now relies on TypeScript's module resolution, not webpack's.
• Dependency Requirements: Newer versions of the plugin require newer versions of Node.js and TypeScript.

Recommendation: This upgrade should be coupled with a migration to webpack 5. You will need to review the plugin's documentation for the new configuration options and ensure your tsconfig.json is correctly set up for module resolution.

Source: Plugin documentation and GitHub issues.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[netlify]

✅ Deploy Preview for devspace-docs canceled.

Name	Link
🔨 Latest commit	0e835ca
🔍 Latest deploy log	https://app.netlify.com/projects/devspace-docs/deploys/6ae32cc36a7ed46f7e3bd217