POAM: April 24

[clmedders]

This PR handles security vulnerabilities for April 2024

• Addressing critical variability with both Bable updates-> https://github.com/GSA/plainlanguage.gov/security/dependabot/49
• Chang log for Webpack update.

Testing:

• Pull down branch and run npm install and ensure no build errors
• Start local with npm run start and visit local and visually inspect site to ensure no regressions
• Local run npm run build-js to ensure no accessibility errors

DependenciesDependency	Old	New
@babel/core	7.23.7	7.24.4
@babel/preset-env	7.23.8	7.24.4
webpack	5.89.0	5.91.0

[mejiaj]

@clmedders testing instructions mention pa11y task, but its npm run build-js that uses these dependencies.

I was able to test without any issues.

Build log

npm run build-js

> [email protected] build-js
> webpack --progress

asset bundle.js 859 KiB [emitted] [minimized] [big] (name: site)
runtime modules 663 bytes 3 modules
cacheable modules 300 KiB
  ./assets/js/main.js 288 bytes [built] [code generated]
  ./node_modules/jquery/dist/jquery.js 279 KiB [built] [code generated]
  ./node_modules/stickyfilljs/dist/stickyfill.js 20.6 KiB [built] [code generated]

WARNING in configuration
The 'mode' option has not been set, webpack will fallback to 'production' for this value.
Set 'mode' option to 'development' or 'production' to enable defaults for each environment.
You can also set it to 'none' to disable any default behavior. Learn more: https://webpack.js.org/configuration/mode/

WARNING in asset size limit: The following asset(s) exceed the recommended size limit (244 KiB).
This can impact web performance.
Assets:
  bundle.js (859 KiB)

WARNING in entrypoint size limit: The following entrypoint(s) combined asset size exceeds the recommended limit (244 KiB). This can impact web performance.
Entrypoints:
  site (859 KiB)
      bundle.js


WARNING in webpack performance recommendations:
You can limit the size of your bundles by using import() or require.ensure to lazy load some parts of your application.
For more info visit https://webpack.js.org/guides/code-splitting/

webpack 5.91.0 compiled with 4 warnings in 572 ms