Bumps json5 to 2.2.3 and updates ancestor dependencies json5, babel-loader, css-loader, html-webpack-plugin, sass-loader, style-loader, webpack and webpack-cli. These dependencies need to be updated together.
Updates json5 from 2.1.2 to 2.2.3
Release notes
Sourced from json5's releases.
v2.2.3
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
- Fix: Properties with the name
__proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
v2.2.1
v2.2.0
- New: Accurate and documented TypeScript declarations are now included. There is no need to install
@types/json5. (#236, #244)
- Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)
Changelog
Sourced from json5's changelog.
- Fix: json5@2.2.3 is now the 'latest' release according to npm instead of
v1.0.2. (#299)
- Fix: Properties with the name
__proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
- New: Accurate and documented TypeScript declarations are now included. There
is no need to install
@types/json5. (#236, #244)
- Fix: An out of memory bug when parsing numbers has been fixed. (#228,
#229)
Commits
Updates babel-loader from 8.1.0 to 8.3.0
Release notes
Sourced from babel-loader's releases.
v8.3.0
New features
Full Changelog: babel/babel-loader@v8.2.5...v8.3.0
v8.2.5
What's Changed
New Contributors
Full Changelog: babel/babel-loader@v8.2.4...v8.2.5
v8.2.4
What's Changed
Thanks @loveDstyle, @stianjensen and @pathmapper for your first PRs!
8.2.3
This release fixes compatibility with Node.js 17
Thanks @Reptarsrage!
8.2.1
8.2.0
- Replace
mkdirp with make-dir 47958ca3857e489e450b27c6f3266375015cba82 (@JLHwung)
- Use async config loading when available d8cff97ff387ded0fc9b5cbc489228c96c5ab14a (
@the-spyke)
Commits
Maintainer changes
This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.
Updates css-loader from 3.4.2 to 6.7.3
Release notes
Sourced from css-loader's releases.
v6.7.3
6.7.3 (2022年12月14日)
Bug Fixes
v6.7.2
6.7.2 (2022年11月13日)
Bug Fixes
v6.7.1
6.7.1 (2022年03月08日)
Bug Fixes
v6.7.0
6.7.0 (2022年03月04日)
Features
v6.6.0
6.6.0 (2022年02月02日)
Features
- added the
hashStrategy option (ca4abce)
v6.5.1
6.5.1 (2021年11月03日)
Bug Fixes
- regression with unicode characters in locals (b7a8441)
- runtime path generation (#1393) (feafea8)
v6.5.0
... (truncated)
Changelog
Sourced from css-loader's changelog.
6.7.3 (2022年12月14日)
Bug Fixes
6.7.2 (2022年11月13日)
Bug Fixes
6.7.1 (2022年03月08日)
Bug Fixes
6.7.0 (2022年03月04日)
Features
6.6.0 (2022年02月02日)
Features
- added the
hashStrategy option (ca4abce)
6.5.1 (2021年11月03日)
Bug Fixes
- regression with unicode characters in locals (b7a8441)
- runtime path generation (#1393) (feafea8)
6.5.0 (2021年10月26日)
Features
- support absolute URL in
url() when experiments.buildHttp enabled (#1389) (8946be4)
... (truncated)
Commits
Updates html-webpack-plugin from 4.0.3 to 5.5.0
Changelog
Sourced from html-webpack-plugin's changelog.
5.5.0 (2021年10月25日)
Features
- Support type=module via scriptLoading option (1e42625), closes #1663
5.4.0 (2021年10月15日)
Features
5.3.2 (2021年06月22日)
Bug Fixes
- update lodash and pretty error (9c7fba0
5.3.1 (2021年03月09日)
Bug Fixes
- remove loader-utils from plugin core (82d0ee8)
5.3.0 (2021年03月07日)
Features
- allow to modify the interpolation options in webpack config (d654f5b)
- drop loader-utils dependency (41d7a50)
5.2.0 (2021年02月19日)
Features
5.1.0 (2021年02月12日)
Features
- omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598
5.0.0 (2021年02月03日)
... (truncated)
Commits
Updates sass-loader from 8.0.2 to 13.2.0
Release notes
Sourced from sass-loader's releases.
v13.2.0
13.2.0 (2022年11月09日)
Features
v13.1.0
13.1.0 (2022年10月06日)
Features
v13.0.2
13.0.2 (2022年06月27日)
Bug Fixes
v13.0.1
13.0.1 (2022年06月24日)
Bug Fixes
v13.0.0
13.0.0 (2022年05月18日)
⚠ BREAKING CHANGES
- minimum supported
Node.js version is 14.15.0 (#1048)
- emit
@warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)
Bug Fixes
- do not crash on importers for modern API (#1052) (095814e)
- do not store original sass error in webpack error(#1053) (06d7533)
v12.6.0
12.6.0 (2022年02月15日)
... (truncated)
Changelog
Sourced from sass-loader's changelog.
13.2.0 (2022年11月09日)
Features
13.1.0 (2022年10月06日)
Features
13.0.2 (2022年06月27日)
Bug Fixes
13.0.1 (2022年06月24日)
Bug Fixes
13.0.0 (2022年05月18日)
⚠ BREAKING CHANGES
- minimum supported
Node.js version is 14.15.0 (#1048)
- emit
@warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)
Bug Fixes
- do not crash on importers for modern API (#1052) (095814e)
- do not store original sass error in webpack error(#1053) (06d7533)
12.6.0 (2022年02月15日)
Features
- added support for automatic loading of
sass-embedded (#1025) (c8dae87)
12.5.0 (2022年02月14日)
... (truncated)
Commits
Updates style-loader from 1.1.3 to 1.3.0
Release notes
Sourced from style-loader's releases.
v1.3.0
1.3.0 (2020年10月03日)
Features
Bug Fixes
v1.2.1
1.2.1 (2020年04月28日)
Bug Fixes
- hot module replacement logic for lazy type (#468) (88a5c2b)
v1.2.0
1.2.0 (2020年04月24日)
Features
- hot module replacement for css modules (6d14e0a)
v1.1.4
1.1.4 (2020年04月15日)
Chore
Changelog
Sourced from style-loader's changelog.
1.3.0 (2020年10月03日)
Features
Bug Fixes
1.2.1 (2020年04月28日)
Bug Fixes
- hot module replacement logic for lazy type (#468) (88a5c2b)
1.2.0 (2020年04月24日)
Features
- hot module replacement for css modules (6d14e0a)
1.1.4 (2020年04月15日)
Chore
Commits
Updates webpack from 4.42.1 to 5.75.0
Release notes
Sourced from webpack's releases.
v5.75.0
Bugfixes
experiments.* normalize to false when opt-out
- avoid
NaN%
- show the correct error when using a conflicting chunk name in code
- HMR code tests existance of
window before trying to access it
- fix
eval-nosources-* actually exclude sources
- fix race condition where no module is returned from processing module
- fix position of standalong semicolon in runtime code
Features
- add support for
@import to extenal CSS when using experimental CSS in node
- add
i64 support to the deprecated WASM implementation
Developer Experience
- expose
EnableWasmLoadingPlugin
- add more typings
- generate getters instead of readonly properties in typings to allow overriding them
v5.74.0
Features
- add
resolve.extensionAlias option which allows to alias extensions
- This is useful when you are forced to add the
.js extension to imports when the file really has a .ts extension (typescript + "type": "module")
- add support for ES2022 features like static blocks
- add Tree Shaking support for
ProvidePlugin
Bugfixes
- fix persistent cache when some build dependencies are on a different windows drive
- make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
- remove left-over from debugging in TLA/async modules runtime code
- remove unneeded extra 1s timestamp offset during watching when files are actually untouched
- This sometimes caused an additional second build which are not really needed
- fix
shareScope option for ModuleFederationPlugin
- set
"use-credentials" also for same origin scripts
Performance
- Improve memory usage and performance of aggregating needed files/directories for watching
- This affects rebuild performance
Extensibility
- export
HarmonyImportDependency for plugins
v5.73.0
... (truncated)
Commits
Updates webpack-cli from 3.3.11 to 5.0.1
Release notes
Sourced from webpack-cli's releases.
v5.0.1
5.0.1 (2022年12月05日)
Bug Fixes
- make
define-process-env-node-env alias node-env (#3514) (346a518)
v5.0.0
5.0.0 (2022年11月17日)
Bug Fixes
- improve description of the
--disable-interpret option (#3364) (bdb7e20)
- remove the redundant
utils export (#3343) (a9ce5d0)
- respect
NODE_PATH env variable (#3411) (83d1f58)
- show all CLI specific flags in the minimum help output (#3354) (35843e8)
Features
- failOnWarnings option (#3317) (c48c848)
- update commander to v9 (#3460) (6621c02)
- added the
--define-process-env-node-env option
- update
interpret to v3 and rechoir to v0.8
- add an option for preventing interpret (#3329) (c737383)
BREAKING CHANGES
- the minimum supported webpack version is v5.0.0 (#3342) (b1af0dc), closes #3342
- webpack-cli no longer supports webpack v4, the minimum supported version is webpack v5.0.0
- webpack-cli no longer supports webpack-dev-server v3, the minimum supported version is webpack-dev-server v4.0.0
- remove the
migrate command (#3291) (56b43e4), closes #3291
- remove the
--prefetch option in favor the PrefetchPlugin plugin
- remove the
--node-env option in favor --define-process-env-node-env
- remove the
--hot option in favor of directly using the HotModuleReplacement plugin (only for build command, for serve it will work)
- the behavior logic of the
--entry option has been changed - previously it replaced your entries, now the option adds a specified entry, if you want to return the previous behavior please use webpack --entry-reset --entry './src/my-entry.js'
v4.10.0
4.10.0 (2022年06月13日)
Bug Fixes
Features
v4.9.2
4.9.2 (2022年01月24日)
... (truncated)
Changelog
Sourced from webpack-cli's changelog.
5.0.1 (2022年12月05日)
Bug Fixes
- make
define-process-env-node-env alias node-env (#3514) (346a518)
5.0.0 (2022年11月17日)
Bug Fixes
- improve description of the
--disable-interpret option (#3364) (bdb7e20)
- remove the redundant
utils export (#3343) (a9ce5d0)
- respect
NODE_PATH env variable (#3411) (83d1f58)
- show all CLI specific flags in the minimum help output (#3354) (35843e8)
Features
- failOnWarnings option (#3317) (c48c848)
- update commander to v9 (#3460) (6621c02)
- added the
--define-process-env-node-env option
- update
interpret to v3 and rechoir to v0.8
- add an option for preventing interpret (#3329) (c737383)
BREAKING CHANGES
- the minimum supported webpack version is v5.0.0 (#3342) (b1af0dc), closes #3342
- webpack-cli no longer supports webpack v4, the minimum supported version is webpack v5.0.0
- webpack-cli no longer supports webpack-dev-server v3, the minimum supported version is webpack-dev-server v4.0.0
- remove the
migrate command (#3291) (56b43e4), closes #3291
- remove the
--prefetch option in favor the PrefetchPlugin plugin
- remove the
--node-env option in favor --define-process-env-node-env
- remove the
--hot option in favor of directly using the HotModuleReplacement plugin (only for build command, for serve it will work)
- the behavior logic of the
--entry option has been changed - previously it replaced your entries, now the option adds a specified entry, if you want to return the previous behavior please use webpack --entry-reset --entry './src/my-entry.js'
4.10.0 (2022年06月13日)
Bug Fixes
Features
4.9.2 (2022年01月24日)
Bug Fixes
- respect
negatedDescription for flags from schema (#3102) (463b731)
... (truncated)
Commits
4a0f893 chore(release): publish new version
9de982c chore: fix cspell
32d26c8 chore(deps-dev): bump cspell from 6.15.1 to 6.16.0 (#3517)
2788bf9 chore(deps-dev): bump eslint from 8.28.0 to 8.29.0 (#3516)
ac88ee4 chore(deps-dev): bump lint-staged from 13.0.4 to 13.1.0 (#3515)
346a518 fix: make define-process-env-node-env alias node-env (#3514)
3ec7b16 chore(deps): bump yeoman-environment from 3.12.1 to 3.13.0 (#3508)
c8adfa6 chore(deps-dev): bump @types/node from 18.11.9 to 18.11.10 (#3513)
0ad8cc2 chore(deps-dev): bump cspell from 6.15.0 to 6.15.1 (#3512)
d30f261 chore(deps-dev): bump ts-loader from 9.4.1 to 9.4.2 (#3511)
- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack-cli since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.
Bumps json5 to 2.2.3 and updates ancestor dependencies json5, babel-loader, css-loader, html-webpack-plugin, sass-loader, style-loader, webpack and webpack-cli. These dependencies need to be updated together.
Updates
json5from 2.1.2 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
babel-loaderfrom 8.1.0 to 8.3.0Release notes
Sourced from babel-loader's releases.
Commits
9bf56528.3.080ab7d0Update@babel/dependencies493ac6cPass external dependencies from Babel to Webpack (#971)df28fe3Fix broken main test (#950)0b338e4update hash method so it doesn't fail on a fips enabled machine (#939)1f98d3c8.2.5c622868fix: respectinputSourceMaploader option (#896)f7982c18.2.44bb9e21Use md5 hashing for OpenSSL 3 (#924)247c94bBump loader-utils to 2.x (#931)Maintainer changes
This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.
Updates
css-loaderfrom 3.4.2 to 6.7.3Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
ef749f2chore(release): 6.7.336fb945chore: fix cspell962924cfix: removesourceURLfrom emitted CSS (#1487)3f3f302chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)04ca713chore: update dependencies to the latest version (#1485)9449827chore: update styfle/cancel-workflow-action (#1484)6c67af8chore: add cSpell to check spelling issues (#1482)239b9acchore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)394d200chore(release): 6.7.22f4c273fix: css modules generation with inline syntax (#1480)Updates
html-webpack-pluginfrom 4.0.3 to 5.5.0Changelog
Sourced from html-webpack-plugin's changelog.
... (truncated)
Commits
873d75bchore(release): 5.5.0ddeb774chore: update examples1e42625feat: Support type=module via scriptLoading option7d3645bBump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-380779be779[chore] changes actions to run on pull_requestsb7e5859[chore] fixes CI to avoid race conditions48131d3chore(release): 5.4.016a841a[chore] rebuild examples3bb7c17Update index.jse38ac97Update index.jsUpdates
sass-loaderfrom 8.0.2 to 13.2.0Release notes
Sourced from sass-loader's releases.
... (truncated)
Changelog
Sourced from sass-loader's changelog.
... (truncated)
Commits
e8fbc79chore(release): 13.2.0e5581b7feat: add support for node-sass v8 (#1100)acb3ce0chore(deps): bump loader-utils from 2.0.2 to 2.0.3 (#1099)1cdea4echore: update dependencies to the latest version (#1098)094a303docs: update cla link (#1096)c32f63aci: add dependency review action (#1094)b31751dchore(release): 13.1.06e02c64feat: allow to extendconditionNames(#1092)edab08fchore: update dependencies to the latest version (#1093)3a34fefchore: update commitlint action (#1091)Updates
style-loaderfrom 1.1.3 to 1.3.0Release notes
Sourced from style-loader's releases.
Changelog
Sourced from style-loader's changelog.
Commits
e288500chore(release): 1.3.0bed760frevert: node bump (#486)15889dbfeat: addedmodules.namedExport(#485)6e54e4fchore(deps): update732ef8bfix: check if 'btoa' exists for old IE versions (#479)c623f27fix: esModule option issue (#476)ae7d211docs: fix typo for esModule (#473)b76cb97chore: update Node.js required version (#474)5520e68chore(release): 1.2.188a5c2bfix: hot module replacement logic for lazy type (#468)Updates
webpackfrom 4.42.1 to 5.75.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
8241da75.75.0a91d923Merge pull request #16458 from webpack/bugfix/semi4608b11Merge pull request #16457 from webpack/tooling/updatedfdd0b0Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback23b9a1cMerge pull request #16167 from exposir/fixts6f2c5e8Merge pull request #16257 from alexzhang1030/calc_deterministic_verbosef7f36adMerge pull request #16339 from Liamolucko/wasm-i64761a542fix semicolon position2403a36Merge pull request #16345 from ahabhgk/fix-eval-nosourcesc18203cupdate toolingUpdates
webpack-clifrom 3.3.11 to 5.0.1Release notes
Sourced from webpack-cli's releases.
... (truncated)
Changelog
Sourced from webpack-cli's changelog.
... (truncated)
Commits
4a0f893chore(release): publish new version9de982cchore: fix cspell32d26c8chore(deps-dev): bump cspell from 6.15.1 to 6.16.0 (#3517)2788bf9chore(deps-dev): bump eslint from 8.28.0 to 8.29.0 (#3516)ac88ee4chore(deps-dev): bump lint-staged from 13.0.4 to 13.1.0 (#3515)346a518fix: make define-process-env-node-env alias node-env (#3514)3ec7b16chore(deps): bump yeoman-environment from 3.12.1 to 3.13.0 (#3508)c8adfa6chore(deps-dev): bump@types/nodefrom 18.11.9 to 18.11.10 (#3513)0ad8cc2chore(deps-dev): bump cspell from 6.15.0 to 6.15.1 (#3512)d30f261chore(deps-dev): bump ts-loader from 9.4.1 to 9.4.2 (#3511)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack-cli since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)@dependabot use these labelswill set the current labels as the default for future PRs for this repo and language@dependabot use these reviewerswill set the current reviewers as the default for future PRs for this repo and language@dependabot use these assigneeswill set the current assignees as the default for future PRs for this repo and language@dependabot use this milestonewill set the current milestone as the default for future PRs for this repo and languageYou can disable automated security fix PRs for this repo from the Security Alerts page.