[Maintainence] CVE fixes for 2.19.4

changelogs/fragments/10822.yml

@@ -0,0 +1,2 @@
+chore:
+- CVE Fixed for 2.19, Update Webpack to support jspdf upgrade ([#10822](https://github.com/opensearch-project/OpenSearch-Dashboards/pull/10822))

package.json

@@ -135,7 +135,10 @@
     "**/watchpack-chokidar2/chokidar": "^3.5.3",
     "**/eslint-plugin-mocha-next/mocha": "npm:mocha@^10.1.0",
     "**/xml2js": "^0.5.0",
-    "**/yaml": "^2.2.2"
+    "**/yaml": "^2.2.2",
+    "**/cipher-base": "^1.0.5",
+    "**/pbkdf2": "^3.1.3",
+    "**/sha.js": "^2.4.12"
   },
   "workspaces": {
     "packages": [

packages/osd-optimizer/src/worker/webpack.config.ts

@@ -266,6 +266,22 @@ export function getWebpackConfig(bundle: Bundle, bundleRefs: BundleRefs, worker:
             },
           },
         },
+        {
+          test: /\.m?js$/,
+          include: [/node_modules[\\/]fast-png/, /node_modules[\\/]iobuffer/],
+          use: {
+            loader: 'babel-loader',
+            options: {
+              presets: [BABEL_PRESET_PATH],
+              plugins: [
+                '@babel/plugin-transform-class-properties',
+                '@babel/plugin-transform-class-static-block',
+                '@babel/plugin-transform-private-methods',
+                '@babel/plugin-transform-private-property-in-object',
+              ],
+            },
+          },
+        },
       ],
     },