[Cycode] Fix for vulnerable manifest file dependency - @rspack/cli updated to version 2.0.0-alpha.0

[cycode-security]

Cycode Vulnerable Dependencies Update

This pull request updates the following manifest file:

File Path	Number of packages to update
ui/app/package.json	1

📂 ui/app/package.json

1 package will be updated to resolve vulnerabilities:

Package Name	Current Version	Updated Version
@rspack/cli	1.4.11	2.0.0-alpha.0

Important

This pull request updates the major version for one or more packages. Make sure changes are tested before merging.

Warning

Lock file generation failed for one or more manifest files in this pull request. Please regenerate the lock file manually before merging.

---

Note

^{Cursor Bugbot is generating a summary for commit b094351. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit b094351. Configure here.}

[cursor]

Rspack CLI core version mismatch

High Severity

Updating @rspack/cli to 2.0.0-alpha.0 without also updating @rspack/core from 1.x creates a version mismatch. The Rspack 2 CLI expects a Rspack 2 core, and this incompatibility can cause build, serve, or install commands to fail due to breaking changes.

 

^{Reviewed by Cursor Bugbot for commit b094351. Configure here.}