Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/OpenConext/OpenConext-attribute-aggregation/network/alerts).
Bumps the npm_and_yarn group group in /aa-gui with 3 updates: css-loader, optimize-css-assets-webpack-plugin and postcss.
Updates
css-loader
from 0.25.0 to 6.10.0Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
7bbb57c
chore(release): 6.10.0d641c4d
feat: pass theresourceQuery
andresourceFragment
to theauto
and `mode...3924679
feat: add@rspack/core
as an optional peer dependency (#1568)6f43929
feat: support named exports with any charactersf9192ee
chore(release): 6.9.16515be0
fix: css nesting support and@scope
at-rule0751f7a
docs: update (#1562)2d17551
chore(release): 6.9.0e38116f
chore: update dependencies to latest version (#1561)d09ff73
test: getLocalIdent and node type (#1560)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.
Updates
optimize-css-assets-webpack-plugin
from 1.3.2 to 6.0.1Commits
e896b97
6.0.124ed912
fix: cve in dependencies29c44fb
6.0.051313e4
feat(deps): upgrade cssnano and postcss major version3e6a04c
5.0.69567391
fix: previous version breaking changes (#156)09d29b3
5.0.5d0a7da7
feat(deps): update dependencies (#154)41d1e23
Redirect to css-minimizer-webpack-plugin for webpack 5 or abovee9b84f1
5.0.4Updates
postcss
from 5.2.18 to 8.4.36Release notes
Sourced from postcss's releases.
... (truncated)
Changelog
Sourced from postcss's changelog.
... (truncated)
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show