Bumps js-yaml to 4.1.1 and updates ancestor dependencies js-yaml, css-loader and firebase-tools. These dependencies need to be updated together.
Updates js-yaml from 4.1.0 to 4.1.1
Changelog
Sourced from js-yaml's changelog.
[4.1.1] - 2025年11月12日
Security
- Fix prototype pollution issue in yaml merge (<<) operator.
Commits
Updates css-loader from 0.28.11 to 7.1.2
Release notes
Sourced from css-loader's releases.
v7.1.2
7.1.2 (2024年05月22日)
Bug Fixes
- keep order of
@imports with the webpackIgnore comment (#1600) (76757ef)
v7.1.1
7.1.1 (2024年04月10日)
Bug Fixes
- automatically rename class
default to _default when named export is enabled (#1590) (d6c31a1)
v7.1.0
7.1.0 (2024年04月08日)
Features
- added the
getJSON option to output CSS modules mapping (#1577) (af834b4)
v7.0.0
7.0.0 (2024年04月04日)
⚠ BREAKING CHANGES
- The
modules.namedExport option is true by default if you enable the esModule option
Migration guide:
Before:
import style from "./style.css";
console.log(style.myClass);
After:
import * as style from "./style.css";
console.log(style.myClass);
... (truncated)
Changelog
Sourced from css-loader's changelog.
7.1.2 (2024年05月22日)
Bug Fixes
- keep order of
@imports with the webpackIgnore comment (#1600) (76757ef)
7.1.1 (2024年04月10日)
Bug Fixes
- automatically rename class
default to _default when named export is enabled (#1590) (d6c31a1)
7.1.0 (2024年04月08日)
Features
- added the
getJSON option to output CSS modules mapping (#1577) (af834b4)
7.0.0 (2024年04月04日)
⚠ BREAKING CHANGES
- The
modules.namedExport option is true by default if you enable the esModule option
Migration guide:
Before:
import style from "./style.css";
console.log(style.myClass);
After:
import * as style from "./style.css";
console.log(style.myClass);
To restore 6.x behavior, please use:
module.exports = {
</tr></table>
... (truncated)
Commits
Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.
Updates firebase-tools from 9.22.0 to 13.27.0
Release notes
Sourced from firebase-tools's releases.
v13.27.0
- Fixes an issue where
emulators:exec would return a 0 error code when emulators failed to start. (#7974)
- Added
--import and emulators:export support to the Data Connect emulator.
- Added
firebase.json#emulators.dataconnect.dataDir. When set, Data Connect data will be persisted to the configured directory between emulator runs.
- Added App Hosting Emulator: https://firebase.google.com/docs/app-hosting/emulate
- Added
apphosting:config:export to export App Hosting configurations such as secrets into an apphosting.local.yaml file, to be used by the emulator
v13.26.0
- Migrated some API calls from
firebase.googleapis.com to cloudresourcemanager.googleapis.com.
- Moved firebase-tools-ui server.js logic to fireabse-tools to run it in-memory. (#7897)
- Updates
superstatic to 9.1.0 (#7929).
- Added the appdistribution:group:list and appdistribution:testers:list commands.
- Aliased
appdistribution:group:* commands to appdistribution:groups:*.
- Updated the Firebase Data Connect local toolkit to v1.7.3, which includes:
- Bug fixes for
@auth expressions that reference the auth variable
- Allows custom boolean claims on the auth token to be returned in expressions
- Adds support for
Optional arrays in Swift codegen
- Updates Kotlin codegen to use fully-qualified class names everywhere
- Removes
StringType_pattern from generated docs and GQL prelude. (#7968)
v13.25.0
- Fix Task Queue Emulator error handling to display error message properly. (#7916)
- Fixed some misleading logs when using the Data Connect emulator with
FIREBASE_DATACONNECT_POSTGRESQL_STRING set. (#7882)
- Update the Firebase Data Connect local toolkit to v1.7.0, which includes support for
query in mutations, @check for advanced authorization, and replaces java.util.Date with com.google.firebase.dataconnect.LocalDate for Date scalar fields and variables in Kotlin codegen. (#7936)
- Fixed
firebase init genkit to work with genkit version 0.9.0.
v13.24.2
- Bump the Firebase Data Connect local toolkit to v1.6.1, which fixes the
OrderDirection enum with Optional types in Dart codegen and adds @ExperimentalFirebaseDataConnect annotations in Kotlin codegen to avoid compiler warnings. (#7912)
v13.24.1
- Fixes an issue where Cloud resource location wasn't set during
firebase init
v13.24.0
- Fixes an error creating a rollout with App Hosting in the beta API (#7896)
- Added support for Next.js 15. (#7588)
v13.23.1
- Check that billing is enabled and move App Hosting next to Hosting in init list (#7871).
- Fix rollouts:create to handle backend regionality & other fixes. (#7862)
- Fixed Next.js issue with PPR routes not rendering correctly. (#7625)
- Bump the Firebase Data Connect local toolkit version to v1.6.0, which adds support for
upsertMany, introduces vars as a shorthand for request.variables in @auth expressions, adds new methods to GeneratedConnector and GeneratedOperation implementations in Kotlin codegen (requires the v16.0.0-beta03 SDK), and fixes the use of Timestamp with optional types in Dart codegen (#7888).
v13.23.0
- Add support for deploying new blocking triggers. (#6384)
- Have the firestore:delete command retry on bandwidth exceeded errors. (#7845)
v13.22.1
- Updated dependencies in functions initialization template. (#7809)
- Fixed Flutter web apps that might require the --no-tree-shake-icons flag in order to build. (#7724)
- Removed outdated dependency on
rimraf.
... (truncated)
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps js-yaml to 4.1.1 and updates ancestor dependencies js-yaml, css-loader and firebase-tools. These dependencies need to be updated together.
Updates
js-yamlfrom 4.1.0 to 4.1.1Changelog
Sourced from js-yaml's changelog.
Commits
cc482e74.1.1 released50968b8dist rebuildd092d86lint fix383665ffix prototype pollution in merge (<<)0d3ca7aREADME.md: HTTP => HTTPS (#678)49baadddoc: 'empty' style option for !!nullba3460eFix demo link (#618)Updates
css-loaderfrom 0.28.11 to 7.1.2Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
d5ba44achore(release): 7.1.276757effix: keep order of@imports with thewebpackIgnorecomment (#1600)4b41689ci: use node v22 (#1596)2068222chore: update dependencies to latest version (#1595)e006f66refactor: useenvironmentto gettemplateLiteralvalue (#1591)5c717c9chore(release): 7.1.1d6c31a1fix: automatically rename classdefaultto_defaultwhen named export is ...b162e25chore(release): 7.1.015f793ddocs: update logic (#1587)9c165a4docs: update migration guide (#1586)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.
Updates
firebase-toolsfrom 9.22.0 to 13.27.0Release notes
Sourced from firebase-tools's releases.
... (truncated)
Commits
f10767d13.27.08019e2eMinor text update (#7986)c014dc5Update CHANGELOG to include App Hosting emulator (#7985)4059bdbCleaning up some leftovers from #7836 (#7982)08aa6e2fix start command logging bug (#7984)c8c86ddenable emulator (#7983)04b288cApphosting emulator: Clean up secrets when writing to apphosting.local.yaml (...c130377Emulators:exec should rethrow errors from emulator startup (#7976)0f45706support custom port for apphosting emulator (#7977)c920e3eAdd analytics about firebasePath and FIREBASE_BINARY.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.