[Snyk] Fix for 1 vulnerabilities

[lizardruss]

Snyk has created this PR to fix 1 vulnerabilities in the npm dependencies of this project.

Snyk changed the following file(s):

• ui/package.json
• ui/package-lock.json

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PICOMATCH-21248802	721

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)

[lizardruss]

This upgrade involves multiple, interconnected major versions across your testing and build toolchain (Jest, webpack, Babel). The changes are significant and will require configuration updates, code modifications, and a Node.js version upgrade.

Top 3 Most Impactful Upgrades

1. babel-jest from 25.5.1 to 30.3.0 (HIGH RISK)
This upgrade crosses five major versions of Jest, introducing numerous breaking changes. Key changes include:

• Node.js Support: Support for Node.js versions below 18.x has been dropped.
• API Renames: Deprecated matcher aliases have been removed. You must replace them, for example: toBeCalled() → toHaveBeenCalled().
• Environment: The default test environment changed from jsdom to node in v27. You may need to explicitly set testEnvironment: 'jsdom' in your config.
• Dependencies: jest-environment-jsdom is no longer installed by default as of v28 and must be added as a project dependency.

Recommendation: Address breaking changes incrementally by consulting the official Jest upgrade guides for versions 26 through 30. Start by ensuring your Node.js version is compatible and then run tests to identify required matcher and configuration updates.

2. webpack-dev-server from 4.15.2 to 6.0.0 (HIGH RISK)
This is a significant upgrade with major architectural changes. The upgrade to v6 is particularly impactful:

• Node.js Requirement: v6.0.0 requires Node.js 22.15.0 or newer.
• ESM Only: The package is now published as an ESM-only module.
• CLI Flags Removed: All command-line flags have been removed. You must now use webpack serve and manage all configuration within your webpack.config.js file.
• Dependencies & Internals: The server now uses Express v5, and support for SockJS has been removed. Proxy configuration options have also changed.

Recommendation: This upgrade requires a substantial migration. You must first upgrade your Node.js environment. Then, migrate all CLI flags to your webpack configuration file and ensure your project is compatible with ESM package consumption.

3. ts-loader from 6.0.4 to 9.6.2 (HIGH RISK)
This upgrade is primarily breaking due to its dependencies on the surrounding ecosystem.

• Webpack 5 Required: ts-loader v9.0.0 dropped support for webpack 4 and requires webpack 5.
• Node.js Requirement: Support for Node.js versions below 12 was dropped. [2

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[netlify]

✅ Deploy Preview for devspace-docs canceled.

Name	Link
🔨 Latest commit	7e9e058
🔍 Latest deploy log	https://app.netlify.com/projects/devspace-docs/deploys/6ad7389645e03b061f412bc0