From ef0ff3cb9d7f4abba6b2492f4a59a6e8b001edfa Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Sat, 24 Jan 2026 08:40:23 +0000
Subject: [PATCH] fix: package.json to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-TAR-15038581
- https://snyk.io/vuln/SNYK-JS-ELLIPTIC-14908844
- https://snyk.io/vuln/SNYK-JS-LODASH-15053838
---
 package.json | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index 5fe2fa24af9d..fdfc089f41a7 100644
--- a/package.json
+++ b/package.json
@@ -55,21 +55,21 @@
     "ember-cli-string-utils": "^1.0.0",
     "enhanced-resolve": "^3.4.1",
     "exports-loader": "^0.6.3",
-    "extract-text-webpack-plugin": "3.0.0",
+    "extract-text-webpack-plugin": "3.0.2",
     "file-loader": "^0.10.0",
     "fs-extra": "^4.0.0",
     "get-caller-file": "^1.0.0",
     "glob": "^7.0.3",
     "heimdalljs": "^0.2.4",
     "heimdalljs-logger": "^0.1.9",
-    "html-webpack-plugin": "^2.29.0",
+    "html-webpack-plugin": "^4.0.0",
     "istanbul-instrumenter-loader": "^2.0.0",
     "karma-source-map-support": "^1.2.0",
     "less": "^2.7.2",
     "less-loader": "^4.0.5",
     "license-webpack-plugin": "^1.0.0",
     "loader-utils": "^1.0.2",
-    "lodash": "^4.11.1",
+    "lodash": "^4.17.23",
     "magic-string": "^0.22.3",
     "memory-fs": "^0.4.1",
     "node-modules-path": "^1.0.0",
@@ -92,10 +92,10 @@
     "stylus-loader": "^3.0.1",
     "typescript": "~2.4.2",
     "url-loader": "^0.5.7",
-    "webpack": "~3.5.5",
+    "webpack": "~5.0.0",
     "webpack-concat-plugin": "1.4.0",
     "webpack-dev-middleware": "~1.12.0",
-    "webpack-dev-server": "~2.7.1",
+    "webpack-dev-server": "~4.0.0",
     "webpack-merge": "^4.1.0",
     "zone.js": "^0.8.14"
   },