search

Nexmo / station

Ruby gem to start a platform site with specified markdown content
Other
12 stars 6 forks source link

Update dependency css-loader to v6 (main) #1960

Open mend-for-github-com[bot] opened 2 months ago

mend-for-github-com[bot] commented 2 months ago

This PR contains the following updates:

Package Type Update Change
css-loader dependencies major ^5.2.7 -> ^6.0.0

By merging this PR, the issue #1430 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Critical Critical 9.8 CVE-2022-37601
High High 7.5 CVE-2022-37599
High High 7.5 CVE-2022-37603
Medium Medium 5.5 CVE-2021-23566
Medium Medium 5.3 CVE-2023-44270

Release Notes

webpack-contrib/css-loader (css-loader) ### [`v6.9.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#690-2024-01-09) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.8.1...v6.9.0) ##### Features - updated generateExportEntry to expose node details ([#​1556](https://togithub.com/webpack-contrib/css-loader/issues/1556)) ([05002f3](https://togithub.com/webpack-contrib/css-loader/commit/05002f39e29afd7e12f9efca4d073bc23e3d2150)) ##### Bug Fixes - css experiment detection ([#​1559](https://togithub.com/webpack-contrib/css-loader/issues/1559)) ([f2cfe30](https://togithub.com/webpack-contrib/css-loader/commit/f2cfe30a8f6b0053a268c0d9c1943bb3c8f01338)) ##### [6.8.1](https://togithub.com/webpack-contrib/css-loader/compare/v6.8.0...v6.8.1) (2023-05-28) ##### Bug Fixes - use `cause` for original errors and warnings ([#​1526](https://togithub.com/webpack-contrib/css-loader/issues/1526)) ([ae3d8ae](https://togithub.com/webpack-contrib/css-loader/commit/ae3d8ae54ecb5706fe9c3449487cc8306699469f)) ### [`v6.8.1`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#681-2023-05-28) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.8.0...v6.8.1) ### [`v6.8.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#680-2023-05-27) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.4...v6.8.0) ##### Features - use template literal when it possible to prevent `Maximum call stack size exceeded` ([#​1525](https://togithub.com/webpack-contrib/css-loader/issues/1525)) ([6eb5661](https://togithub.com/webpack-contrib/css-loader/commit/6eb56618185e974abf339c952c263cc7b8a9a066)) ##### Bug Fixes - warning and error serialization ([#​1523](https://togithub.com/webpack-contrib/css-loader/issues/1523)) ([3e52969](https://togithub.com/webpack-contrib/css-loader/commit/3e52969f0f6b1c9d4d16db41ebff8804b340742c)) ##### [6.7.4](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.3...v6.7.4) (2023-05-19) ##### Bug Fixes - bugs in css modules ([c3099fb](https://togithub.com/webpack-contrib/css-loader/commit/c3099fb0cf03927f879f911ab5f51d9edc20d871)) - output warning when built-in CSS support enabled ([#​1520](https://togithub.com/webpack-contrib/css-loader/issues/1520)) ([0700ce8](https://togithub.com/webpack-contrib/css-loader/commit/0700ce8cfab2f25d538eaa2309ae80e1a097a6c1)) ##### [6.7.3](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.2...v6.7.3) (2022-12-14) ##### Bug Fixes - remove `sourceURL` from emitted CSS ([#​1487](https://togithub.com/webpack-contrib/css-loader/issues/1487)) ([962924c](https://togithub.com/webpack-contrib/css-loader/commit/962924c79e274be9f6f81d39eac651c1a4876bc2)) ##### [6.7.2](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.1...v6.7.2) (2022-11-13) ##### Bug Fixes - css modules generation with inline syntax ([#​1480](https://togithub.com/webpack-contrib/css-loader/issues/1480)) ([2f4c273](https://togithub.com/webpack-contrib/css-loader/commit/2f4c27399fdadace5af221ae8df95a36642a377e)) ##### [6.7.1](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.0...v6.7.1) (2022-03-08) ##### Bug Fixes - defaultGetLocalIdent export ([#​1427](https://togithub.com/webpack-contrib/css-loader/issues/1427)) ([74dac1e](https://togithub.com/webpack-contrib/css-loader/commit/74dac1e428569236d386ff4e0f971e35c334087a)) ### [`v6.7.4`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#674-2023-05-19) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.3...v6.7.4) ### [`v6.7.3`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#673-2022-12-14) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.2...v6.7.3) ### [`v6.7.2`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#672-2022-11-13) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.1...v6.7.2) ### [`v6.7.1`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#671-2022-03-08) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.7.0...v6.7.1) ### [`v6.7.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#670-2022-03-04) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.6.0...v6.7.0) ##### Features - re-export defaultGetLocalIdent ([#​1423](https://togithub.com/webpack-contrib/css-loader/issues/1423)) ([207cf36](https://togithub.com/webpack-contrib/css-loader/commit/207cf36d541423f12a8d6680b21530c52a2f07d5)) ### [`v6.6.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#660-2022-02-02) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.5.1...v6.6.0) ##### Features - added the `hashStrategy` option ([ca4abce](https://togithub.com/webpack-contrib/css-loader/commit/ca4abce74d01bc13959e30a4dbbd1ca3a0516d72)) ##### [6.5.1](https://togithub.com/webpack-contrib/css-loader/compare/v6.5.0...v6.5.1) (2021-11-03) ##### Bug Fixes - regression with unicode characters in locals ([b7a8441](https://togithub.com/webpack-contrib/css-loader/commit/b7a84414fb3f6e6ff413cbbb7004fa74a78da331)) - runtime path generation ([#​1393](https://togithub.com/webpack-contrib/css-loader/issues/1393)) ([feafea8](https://togithub.com/webpack-contrib/css-loader/commit/feafea812a95db05e9b52beaced0def611bba5c8)) ### [`v6.5.1`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#651-2021-11-03) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.5.0...v6.5.1) ### [`v6.5.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#650-2021-10-26) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.4.0...v6.5.0) ##### Features - support absolute URL in `url()` when `experiments.buildHttp` enabled ([#​1389](https://togithub.com/webpack-contrib/css-loader/issues/1389)) ([8946be4](https://togithub.com/webpack-contrib/css-loader/commit/8946be4d0f2c0237cd5fa846d67d469ff20058a4)) ##### Bug Fixes - respect `nosources` in the `devtool` option ([c60eff2](https://togithub.com/webpack-contrib/css-loader/commit/c60eff212337c8a65995f6675d25f49bb515e77d)) ### [`v6.4.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#640-2021-10-09) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.3.0...v6.4.0) ##### Features - generate more collision resistant for locals ([c7db752](https://togithub.com/webpack-contrib/css-loader/commit/c7db752fe6a9c7ff28d165fd24a37be08ef83af5)) ##### Bug Fixes - classes generation for client and server bundling ([303a3a1](https://togithub.com/webpack-contrib/css-loader/commit/303a3a171793cf1044c131e291f5c29f9ab86c77)) ### [`v6.3.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#630-2021-09-18) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.2.0...v6.3.0) ##### Features - added `[folder]` placeholder ([a0dee4f](https://togithub.com/webpack-contrib/css-loader/commit/a0dee4fd34dd1b9892dac7645a4e57ec134e561b)) - added the `exportType` option with `'array'`, `'string'` and `'css-style-sheet'` values ([c6d2066](https://togithub.com/webpack-contrib/css-loader/commit/c6d20664ca03226ace26b9766e484e437ec74f60)) - `'array'` - the default export is `Array` with API for `style-loader` and other - `'string'` - the default export is `String` you don't need [`to-string-loader`](https://www.npmjs.com/package/to-string-loader) loader anymore - `'css-style-sheet'` - the default export is a [`constructable stylesheet`](https://developers.google.com/web/updates/2019/02/constructable-stylesheets), you can use `import sheet from './styles.css' assert { type: 'css' };` like in a browser, more information you can find [here](https://togithub.com/webpack-contrib/css-loader#css-style-sheet) - supported `supports()` and `layer()` functions in `@import` at-rules ([#​1377](https://togithub.com/webpack-contrib/css-loader/issues/1377)) ([bce2c17](https://togithub.com/webpack-contrib/css-loader/commit/bce2c17524290591be243829187f909a0ae5a6f7)) - fix multiple merging multiple `@media` at-rules ([#​1377](https://togithub.com/webpack-contrib/css-loader/issues/1377)) ([bce2c17](https://togithub.com/webpack-contrib/css-loader/commit/bce2c17524290591be243829187f909a0ae5a6f7)) ##### Bug Fixes - reduce runtime ([#​1378](https://togithub.com/webpack-contrib/css-loader/issues/1378)) ([cf3a3a7](https://togithub.com/webpack-contrib/css-loader/commit/cf3a3a7346aa73637ee6aae6fef5648965c31a47)) ### [`v6.2.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#620-2021-07-19) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.1.0...v6.2.0) ##### Features - allow the `exportLocalsConvention` option can be a function, useful for named export ([#​1351](https://togithub.com/webpack-contrib/css-loader/issues/1351)) ([3c4b357](https://togithub.com/webpack-contrib/css-loader/commit/3c4b35718273baaf9e0480db715b596fbe5d7453)) ### [`v6.1.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#610-2021-07-17) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v6.0.0...v6.1.0) ##### Features - add `link` in schema ([#​1345](https://togithub.com/webpack-contrib/css-loader/issues/1345)) ([7d4e493](https://togithub.com/webpack-contrib/css-loader/commit/7d4e4931390f9e9356af45ae03057d1505d73109)) ##### Bug Fixes - respect the `localIdentRegExp` option ([#​1349](https://togithub.com/webpack-contrib/css-loader/issues/1349)) ([42f150b](https://togithub.com/webpack-contrib/css-loader/commit/42f150b429afad9b0851d2e6bd75cec120885aa4)) ### [`v6.0.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#600-2021-07-14) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.7...v6.0.0) ##### Notes - using `~` is deprecated when the `esModule` option is enabled (enabled by default) and can be removed from your code (**we recommend it**) (`url(~package/image.png)` -> `url(package/image.png)`, `@import url(~package/style.css)` -> `@import url(package/style.css)`, `composes: import from '~package/one.css';` -> `composes: import from 'package/one.css';`), but we still support it for historical reasons. Why can you remove it? The loader will first try to resolve `@import`/`url()`/etc as relative, if it cannot be resolved, the loader will try to resolve `@import`/`url()`/etc inside [`node_modules` or modules directories](https://webpack.js.org/configuration/resolve/#resolvemodules). - `file-loader` and `url-loader` are deprecated, please migrate on [`asset modules`](https://webpack.js.org/guides/asset-modules/), since v6 `css-loader` is generating `new URL(...)` syntax, it enables by default built-in [`assets modules`](https://webpack.js.org/guides/asset-modules/), i.e. `type: 'asset'` for all `url()` ##### ⚠ BREAKING CHANGES - minimum supported `Node.js` version is `12.13.0` - minimum supported `webpack` version is `5`, we recommend to update to the latest version for better performance - for `url` and `import` options `Function` type was removed in favor `Object` type with the `filter` property, i.e. before `{ url: () => true }`, now `{ url: { filter: () => true } }` and before `{ import: () => true }`, now `{ import: { filter: () => true } }` - the `modules.compileType` option was removed in favor the `modules.mode` option with `icss` value, also the `modules` option can have `icss` string value - `new URL()` syntax used for `url()`, only when the `esModule` option is enabled (enabled by default), it means you can bundle CSS for libraries - [data URI](https://developer.mozilla.org/en-US/docs/Web/HTTP/Basics_of_HTTP/Data_URIs) are handling in `url()`, it means you can register loaders for them, [example](https://webpack.js.org/configuration/module/#rulescheme) - aliases with `false` value for `url()` now generate empty data URI (i.e. `data:0,`), only when the `esModule` option is enabled (enabled by default) - `[ext]` placeholder don't need `.` (dot) before for the `localIdentName` option, i.e. please change `.[ext]` on `[ext]` (no dot before) - `[folder]` placeholder was removed without replacement for the `localIdentName` option, please use a custom function if you need complex logic - `[emoji]` placeholder was removed without replacement for the `localIdentName` option, please use a custom function if you need complex logic - the `localIdentHashPrefix` was removed in favor the `localIdentHashSalt` option ##### Features - supported [`resolve.byDependency.css`](https://webpack.js.org/configuration/resolve/#resolvebydependency) resolve options for `@import` - supported [`resolve.byDependency.icss`](https://webpack.js.org/configuration/resolve/#resolvebydependency) resolve CSS modules and ICSS imports (i.e. `composes`/etc) - added `modules.localIdentHashFunction`, `modules.localIdentHashDigest`, `modules.localIdentHashDigestLength` options for better class hashing controlling - less dependencies ##### Bug Fixes - better performance - fixed circular `@import` ##### Notes - **we strongly recommend not to add `.css` to `resolve.extensions`, it reduces performance and in most cases it is simply not necessary, alternative you can set resolve options [by dependency](https://webpack.js.org/configuration/resolve/#resolvebydependency)** ##### [5.2.7](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.6...v5.2.7) (2021-07-13) ##### Bug Fixes - fix crash when source map is unavailable with external URL in `[@import](https://togithub.com/import)` ([bb76fe4](https://togithub.com/webpack-contrib/css-loader/commit/bb76fe48a198e74cacf29ad4b1c01d485f4db11f)) ##### [5.2.6](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.5...v5.2.6) (2021-05-24) ##### Bug Fixes - always write locals export when css modules/icss enabled ([#​1315](https://togithub.com/webpack-contrib/css-loader/issues/1315)) ([075d9bd](https://togithub.com/webpack-contrib/css-loader/commit/075d9bd044a78543479cbf10ccd3c386a3e434e6)) ##### [5.2.5](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.4...v5.2.5) (2021-05-20) ##### Bug Fixes - compatibility with named export and es5 ([#​1314](https://togithub.com/webpack-contrib/css-loader/issues/1314)) ([0cf8cde](https://togithub.com/webpack-contrib/css-loader/commit/0cf8cdedd8667b1ba13d3b4322087943a25176f6)) ##### [5.2.4](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.3...v5.2.4) (2021-04-19) ##### Bug Fixes - do not crash on 'false' aliases ([#​1292](https://togithub.com/webpack-contrib/css-loader/issues/1292)) ([e913cb1](https://togithub.com/webpack-contrib/css-loader/commit/e913cb1d73a4f5c3c4464e0446a885e9f677a005)) ##### [5.2.3](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.2...v5.2.3) (2021-04-19) ##### Bug Fixes - improve performance ##### [5.2.2](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.1...v5.2.2) (2021-04-16) ##### Bug Fixes - avoid escape nonASCII characters in local names ([0722733](https://togithub.com/webpack-contrib/css-loader/commit/072273308a8ab4b7efdae31440689dc81978ca1d)) ##### [5.2.1](https://togithub.com/webpack-contrib/css-loader/compare/v5.2.0...v5.2.1) (2021-04-09) ##### Bug Fixes - do not crash on unescaped svg data uri ([#​1288](https://togithub.com/webpack-contrib/css-loader/issues/1288)) ([4f289c5](https://togithub.com/webpack-contrib/css-loader/commit/4f289c5e4df6c666fdf6dd3402560ae74d4bf7ee))