Upgrade copy-webpack-plugin to fix tar vulnerability. (#181)

* Upgrade `copy-webpack-plugin` to fix `tar` vulnerability.

- also re-lock the projects lock files to stay current

* Update CHANGELOG.md

* Update @chakra-ui/react

Author: bendvc

package-lock.json

@@ -25,4 +25,4 @@
     "format": "lerna run --parallel --stream format",
     "bump-version": "node ./scripts/bump-version.js"
   }
-}
+}

package.json

@@ -1,4 +1,6 @@
-## v1.2.0-dev (Sep 27, 2021)
+## To be released
+
+-   Upgrade `copy-webpack-plugin` to latest `^9.0.1` version. [3191](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/181)
 ## v1.1.0 (Sep 27, 2021)
 
 -   Update the bundle push command to remove legacy bundle upload preview URL from console output. [#81](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/81)

packages/hello-world/package-lock.json

@@ -52,7 +52,7 @@
     "body-parser": "^1.19.0",
     "chalk": "1.1.3",
     "compression": "1.7.4",
-    "copy-webpack-plugin": "^6.0.0",
+    "copy-webpack-plugin": "^9.0.1",
     "event-emitter": "^0.3.5",
     "git-rev-sync": "^3.0.1",
     "glob": "7.1.1",

packages/pwa-kit-create-app/package-lock.json

@@ -39,7 +39,7 @@
     },
     "dependencies": {
         "@chakra-ui/icons": "^1.0.6",
-        "@chakra-ui/react": "^1.3.3",
+        "@chakra-ui/react": "^1.6.12",
         "@chakra-ui/skip-nav": "^1.1.4",
         "@emotion/react": "^11.1.5",
         "@emotion/styled": "^11.1.5",