Skip to content
This repository was archived by the owner on Nov 13, 2025. It is now read-only.

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Dec 31, 2022

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, json5, @svgr/webpack, babel-loader, css-loader, html-webpack-plugin, imports-loader, string-replace-loader, style-loader, webpack and webpack-cli. These dependencies need to be updated together.

Updates json5 from 2.1.3 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates json5 from 2.2.0 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates @svgr/webpack from 4.3.2 to 6.5.1

Release notes

Sourced from @​svgr/webpack's releases.

v6.5.1

No release notes provided.

v6.5.0

Bug Fixes

Features

  • babel-preset: fix 'role' attribute on svg element for react native (#787) (35d85e0)

v6.4.0

Bug Fixes

  • deps: add babel-preset to core dependencies (#782) (464ec5f)

Features

  • a11y: add attribute role="img" to the svg element (#750) (8b9edc4)
  • support spaces in file names (#779) (6ee639a)

v6.3.1

Bug Fixes

v6.3.0

Bug Fixes

Features

  • add descProp option (#729) (a0637d4)
  • cli: output file name when error happen to handling a file (#702) (0ec1fbd)

... (truncated)

Changelog

Sourced from @​svgr/webpack's changelog.

6.5.1 (2022-10-27)

Reverts

  • Revert "feat(a11y): add attribute role="img" to the svg element (#750)" (1382232), closes #750

6.5.0 (2022-10-14)

Bug Fixes

  • fix Yarn peer dependency warning from @​babel/core (#786) (db35837), closes #785

Features

  • babel-preset: fix 'role' attribute on svg element for react native (#787) (35d85e0)

6.4.0 (2022-10-01)

Bug Fixes

  • deps: add babel-preset to core dependencies (#782) (464ec5f)

Features

  • a11y: add attribute role="img" to the svg element (#750) (8b9edc4)
  • support spaces in file names (#779) (6ee639a)

6.3.1 (2022-07-22)

Bug Fixes

6.3.0 (2022-07-18)

Bug Fixes

Features

  • add descProp option (#729) (a0637d4)
  • cli: output file name when error happen to handling a file (#702) (0ec1fbd)

6.2.1 (2022-01-30)

Bug Fixes

... (truncated)

Commits
  • d5efedd v6.5.1
  • 1b65014 Merge pull request #791 from gregberge/upgrade-deps
  • 290748b chore: upgrade deps
  • e700943 Merge pull request #789 from pachuka/fix/svgr-788-accessibility-docs
  • 21fef1b docs: add accessibility explanation to svgProps option
  • 1382232 Revert "feat(a11y): add attribute role="img" to the svg element (#750)"
  • b385279 v6.5.0
  • 35d85e0 feat(babel-preset): fix 'role' attribute on svg element for react native (#787)
  • db35837 fix: fix Yarn peer dependency warning from @​babel/core (#786)
  • 80e8833 docs: rename "master" to "main" in package.json repository fields (#784)
  • Additional commits viewable in compare view

Updates babel-loader from 8.0.4 to 8.3.0

Release notes

Sourced from babel-loader's releases.

v8.3.0

New features

Full Changelog: babel/babel-loader@v8.2.5...v8.3.0

v8.2.5

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v8.2.4...v8.2.5

v8.2.4

What's Changed

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

Thanks @​Reptarsrage!

8.2.1

8.2.0

  • Replace mkdirp with make-dir 47958ca3857e489e450b27c6f3266375015cba82 (@​JLHwung)
  • Use async config loading when available d8cff97ff387ded0fc9b5cbc489228c96c5ab14a (@​the-spyke)

8.1.0

8.0.6

  • Migrate to pify (#785)
  • Reduced memory usage (#781)

8.0.5

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.


Updates css-loader from 3.6.0 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

v6.7.0

6.7.0 (2022-03-04)

Features

v6.6.0

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

6.7.0 (2022-03-04)

Features

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits

Updates html-webpack-plugin from 4.5.1 to 5.5.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.0 (2021-10-25)

Features

  • Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

5.3.2 (2021-06-22)

Bug Fixes

  • update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

  • remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

  • allow to modify the interpolation options in webpack config (d654f5b)
  • drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

5.1.0 (2021-02-12)

Features

  • omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598

5.0.0 (2021-02-03)

... (truncated)

Commits

Updates imports-loader from 0.7.1 to 4.0.1

Release notes

Sourced from imports-loader's releases.

v4.0.1

4.0.1 (2022-08-12)

Bug Fixes

v4.0.0

4.0.0 (2022-05-17)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

v3.1.1

3.1.1 (2021-11-01)

Bug Fixes

v3.1.0

3.1.0 (2021-10-22)

Features

  • output links and descriptions on errors (#110) (b86cb8b)

v3.0.1

3.0.1 (2021-10-21)

Bug Fixes

v3.0.0

3.0.0 (2021-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0

v2.0.0

2.0.0 (2021-02-01)

... (truncated)

Changelog

Sourced from imports-loader's changelog.

4.0.1 (2022-08-12)

Bug Fixes

4.0.0 (2022-05-17)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

3.1.1 (2021-11-01)

Bug Fixes

3.1.0 (2021-10-22)

Features

  • output links and descriptions on errors (#110) (b86cb8b)

3.0.1 (2021-10-21)

Bug Fixes

3.0.0 (2021-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0

2.0.0 (2021-02-01)

⚠ BREAKING CHANGES

  • minimum supported webpack version is 5
  • inline syntax was changed: [] is no longer supported (i.e. imports-loader?imports[]=default|jquery|$&imports[]=angular!./example.js), please use , comma separator (i.e. imports-loader?imports=default|jquery|$,angular!./example.js)

1.2.0 (2020-10-07)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for imports-loader since your current version.


Updates string-replace-loader from 2.1.1 to 3.1.0

Commits
  • a2e006c releasing 3.1.0
  • 2dd9941 some improvements to binding context
  • 437cf61 Merge pull request #70 from smartin85/master
  • bbb91fb add context to replace function
  • 5724411 releasing v3.0.3
  • 391f1e1 Merge pull request #69 from Va1/dependabot/npm_and_yarn/glob-parent-5.1.2
  • 039e88c Bump glob-parent from 5.1.1 to 5.1.2
  • e8e7e2c v3.0.2
  • 9d24e28 Merge pull request #67 from Va1/dependabot/npm_and_yarn/browserslist-4.16.6
  • a7cb839 Bump browserslist from 4.14.7 to 4.16.6
  • Additional commits viewable in compare view

Updates style-loader from 0.19.0 to 3.3.1

Release notes

Sourced from style-loader's releases.

v3.3.1

3.3.1 (2021-10-21)

Bug Fixes

v3.3.0

3.3.0 (2021-09-21)

Features

  • added support for supports(), layer() and media from @import at-rules (b9a600c)
  • allow to pass options to insert function through style.use() (#535) (f8ef63b)

v3.2.1

3.2.1 (2021-07-20)

Bug Fixes

  • added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

v3.2.0

3.2.0 (2021-07-20)

Features

Bug Fixes

  • added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

v3.1.0

3.1.0 (2021-07-12)

Features

  • allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
  • allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

... (truncated)

Changelog

Sourced from style-loader's changelog.

3.3.1 (2021-10-21)

Bug Fixes

3.3.0 (2021-09-21)

Features

  • added support for supports(), layer() and media from @import at-rules (b9a600c)
  • allow to pass options to insert function through style.use() (#535) (f8ef63b)

3.2.1 (2021-07-20)

Bug Fixes

  • added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

3.2.0 (2021-07-20)

Features

Bug Fixes

  • added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

3.1.0 (2021-07-12)

Features

  • allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
  • allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

3.0.0 (2021-06-24)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for style-loader since your current version.


Updates webpack from 4.43.0 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

  • experiments.* normalize to false when opt-out
  • avoid NaN%
  • show the correct error when using a conflicting chunk name in code
  • HMR code tests existance of window before trying to access it
  • fix eval-nosources-* actually exclude sources
  • fix race condition where no module is returned from processing module
  • fix position of standalong semicolon in runtime code

Features

  • add support for @import to extenal CSS when using experimental CSS in node
  • add i64 support to the deprecated WASM implementation

Developer Experience

  • expose EnableWasmLoadingPlugin
  • add more typings
  • generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

  • add resolve.extensionAlias option which allows to alias extensions
    • This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")
  • add support for ES2022 features like static blocks
  • add Tree Shaking support for ProvidePlugin

Bugfixes

  • fix persistent cache when some build dependencies are on a different windows drive
  • make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
  • remove left-over from debugging in TLA/async modules runtime code
  • remove unneeded extra 1s timestamp offset during watching when files are actually untouched
      ...

      Description has been truncated

…gin, imports-loader, string-replace-loader, style-loader, webpack and webpack-cli

Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependencies [json5](https://github.com/json5/json5), [json5](https://github.com/json5/json5), [@svgr/webpack](https://github.com/gregberge/svgr), [babel-loader](https://github.com/babel/babel-loader), [css-loader](https://github.com/webpack-contrib/css-loader), [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin), [imports-loader](https://github.com/webpack-contrib/imports-loader), [string-replace-loader](https://github.com/Va1/string-replace-loader), [style-loader](https://github.com/webpack-contrib/style-loader), [webpack](https://github.com/webpack/webpack) and [webpack-cli](https://github.com/webpack/webpack-cli). These dependencies need to be updated together.


Updates `json5` from 2.1.3 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.1.3...v2.2.3)

Updates `json5` from 2.2.0 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.1.3...v2.2.3)

Updates `@svgr/webpack` from 4.3.2 to 6.5.1
- [Release notes](https://github.com/gregberge/svgr/releases)
- [Changelog](https://github.com/gregberge/svgr/blob/main/CHANGELOG.md)
- [Commits](gregberge/svgr@v4.3.2...v6.5.1)

Updates `babel-loader` from 8.0.4 to 8.3.0
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](babel/babel-loader@v8.0.4...v8.3.0)

Updates `css-loader` from 3.6.0 to 6.7.3
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/css-loader@v3.6.0...v6.7.3)

Updates `html-webpack-plugin` from 4.5.1 to 5.5.0
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](jantimon/html-webpack-plugin@v4.5.1...v5.5.0)

Updates `imports-loader` from 0.7.1 to 4.0.1
- [Release notes](https://github.com/webpack-contrib/imports-loader/releases)
- [Changelog](https://github.com/webpack-contrib/imports-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/imports-loader@v0.7.1...v4.0.1)

Updates `string-replace-loader` from 2.1.1 to 3.1.0
- [Release notes](https://github.com/Va1/string-replace-loader/releases)
- [Commits](Va1/string-replace-loader@v2.1.1...v3.1.0)

Updates `style-loader` from 0.19.0 to 3.3.1
- [Release notes](https://github.com/webpack-contrib/style-loader/releases)
- [Changelog](https://github.com/webpack-contrib/style-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/style-loader@v0.19.0...v3.3.1)

Updates `webpack` from 4.43.0 to 5.75.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v4.43.0...v5.75.0)

Updates `webpack-cli` from 3.3.11 to 5.0.1
- [Release notes](https://github.com/webpack/webpack-cli/releases)
- [Changelog](https://github.com/webpack/webpack-cli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/webpack/webpack-cli/compare/v3.3.11...webpack-cli@5.0.1)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
- dependency-name: json5
  dependency-type: indirect
- dependency-name: "@svgr/webpack"
  dependency-type: direct:production
- dependency-name: babel-loader
  dependency-type: direct:development
- dependency-name: css-loader
  dependency-type: direct:development
- dependency-name: html-webpack-plugin
  dependency-type: direct:development
- dependency-name: imports-loader
  dependency-type: direct:development
- dependency-name: string-replace-loader
  dependency-type: direct:development
- dependency-name: style-loader
  dependency-type: direct:development
- dependency-name: webpack
  dependency-type: direct:development
- dependency-name: webpack-cli
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 31, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants