Purexo / FreshRSS-Notify

Un addon pour firefox, notifiant les articles non lu sur votre instance de FreshRSS
https://addons.mozilla.org/fr/firefox/addon/freshrss-notify/
7 stars 1 forks source link

Bump json5, css-loader, file-loader, html-loader, sass-loader, style-loader, webextension-toolbox, webpack and webpack-cli #36

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, css-loader, file-loader, html-loader, sass-loader, style-loader, webextension-toolbox, webpack and webpack-cli. These dependencies need to be updated together.

Updates json5 from 2.1.3 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view


Updates css-loader from 3.2.0 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

v6.7.0

6.7.0 (2022-03-04)

Features

v6.6.0

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

6.7.0 (2022-03-04)

Features

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits


Updates file-loader from 4.2.0 to 6.2.0

Release notes

Sourced from file-loader's releases.

v6.2.0

6.2.0 (2020-10-27)

Features

  • added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

  • immutable flag when the name option have hash in query string (#392) (381d8bd)

v6.1.1

6.1.1 (2020-10-09)

Chore

  • update schema-utils

v6.1.0

6.1.0 (2020-08-31)

Features

v6.0.0

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

v5.1.0

5.1.0 (2020-02-19)

Features

  • support the query template for the name option (#366) (cd8698b)

v5.0.2

5.0.2 (2019-11-25)

Chore

... (truncated)

Changelog

Sourced from file-loader's changelog.

6.2.0 (2020-10-27)

Features

  • added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

  • immutable flag when the name option have hash in query string (#392) (381d8bd)

6.1.1 (2020-10-09)

Chore

  • update schema-utils

6.1.0 (2020-08-31)

Features

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

5.1.0 (2020-02-19)

Features

  • support the query template for the name option (#366) (cd8698b)

5.0.2 (2019-11-25)

Chore

  • add the funding field in package.json

5.0.1 (2019-11-25)

... (truncated)

Commits


Updates html-loader from 0.5.5 to 4.2.0

Release notes

Sourced from html-loader's releases.

v4.2.0

4.2.0 (2022-09-22)

Features

v4.1.0

4.1.0 (2022-07-11)

Features

v4.0.0

4.0.0 (2022-06-15)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0
  • update parse5 to 7.0.0

Bug Fixes

  • handle text with <script> in the script element (#444) (9949d82)

v3.1.2

Fix

  • broken release

v3.1.0

3.1.0 (2022-01-08)

Features

  • add possibility to extend default minimize options (#414) (0fa36af)

v3.0.1

3.0.1 (2021-11-02)

Bug Fixes

... (truncated)

Changelog

Sourced from html-loader's changelog.

4.2.0 (2022-09-22)

Features

4.1.0 (2022-07-11)

Features

4.0.0 (2022-06-15)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0
  • update parse5 to 7.0.0

Bug Fixes

  • handle text with <script> in the script element (#444) (9949d82)

3.1.0 (2022-01-08)

Features

  • add possibility to extend default minimize options (#414) (0fa36af)

3.0.1 (2021-11-02)

Bug Fixes

3.0.0 (2021-10-21)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0

Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-loader since your current version.


Updates sass-loader from 8.0.0 to 13.2.0

Release notes

Sourced from sass-loader's releases.

v13.2.0

13.2.0 (2022-11-09)

Features

v13.1.0

13.1.0 (2022-10-06)

Features

v13.0.2

13.0.2 (2022-06-27)

Bug Fixes

v13.0.1

13.0.1 (2022-06-24)

Bug Fixes

v13.0.0

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0 (#1048)
  • emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

  • do not crash on importers for modern API (#1052) (095814e)
  • do not store original sass error in webpack error(#1053) (06d7533)

v12.6.0

12.6.0 (2022-02-15)

... (truncated)

Changelog

Sourced from sass-loader's changelog.

13.2.0 (2022-11-09)

Features

13.1.0 (2022-10-06)

Features

13.0.2 (2022-06-27)

Bug Fixes

13.0.1 (2022-06-24)

Bug Fixes

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0 (#1048)
  • emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

  • do not crash on importers for modern API (#1052) (095814e)
  • do not store original sass error in webpack error(#1053) (06d7533)

12.6.0 (2022-02-15)

Features

  • added support for automatic loading of sass-embedded (#1025) (c8dae87)

12.5.0 (2022-02-14)

... (truncated)

Commits


Updates style-loader from 1.0.0 to 1.3.0

Release notes

Sourced from style-loader's releases.

v1.3.0

1.3.0 (2020-10-03)

Features

Bug Fixes

v1.2.1

1.2.1 (2020-04-28)

Bug Fixes

  • hot module replacement logic for lazy type (#468) (88a5c2b)

v1.2.0

1.2.0 (2020-04-24)

Features

  • hot module replacement for css modules (6d14e0a)

v1.1.4

1.1.4 (2020-04-15)

Chore

  • update deps

v1.1.3

1.1.3 (2020-01-17)

Bug Fixes

v1.1.2

1.1.2 (2019-12-25)

Bug Fixes

... (truncated)

Changelog

Sourced from style-loader's changelog.

1.3.0 (2020-10-03)

Features

Bug Fixes

1.2.1 (2020-04-28)

Bug Fixes

  • hot module replacement logic for lazy type (#468) (88a5c2b)

1.2.0 (2020-04-24)

Features

  • hot module replacement for css modules (6d14e0a)

1.1.4 (2020-04-15)

Chore

  • update deps

1.1.3 (2020-01-17)

Bug Fixes

1.1.2 (2019-12-25)

Bug Fixes

  • algorithm for importing modules (#449) (91ceaf2)
  • checking that the list of modules is an array (#448) (1138ed7)

1.1.1 (2019-12-20)

... (truncated)

Commits


Updates webextension-toolbox from 3.0.0 to 4.0.3

Release notes

Sourced from webextension-toolbox's releases.

v4.0.3

  • Merge pull request #494 from balcsida/bump-plugin 0480141
  • Bump webpack-webextension-plugin aca3298
  • Merge pull request #483 from webextension-toolbox/dependabot/npm_and_yarn/commander-8.0.0 56b8473
  • Bump commander from 8.0.0-2 to 8.0.0 19f8ebb
  • Merge pull request #492 from webextension-toolbox/dependabot/npm_and_yarn/core-js-3.15.2 ce8444b
  • Merge pull request #493 from webextension-toolbox/dependabot/npm_and_yarn/webpack-5.42.0 4c8f497
  • Merge pull request #488 from webextension-toolbox/dependabot/npm_and_yarn/string-replace-loader-3.0.3 51bf23e
  • Bump webpack from 5.40.0 to 5.42.0 d3ea350
  • Bump string-replace-loader from 3.0.2 to 3.0.3 d613295
  • Bump core-js from 3.15.0 to 3.15.2 ba85193
  • Merge pull request #485 from balcsida/ghactions/nodeci 4ad6afe
  • Merge pull request #487 from webextension-toolbox/dependabot/npm_and_yarn/copy-webpack-plugin-9.0.1 297b9fb
  • Bump copy-webpack-plugin from 9.0.0 to 9.0.1 e428f27
  • Use Latest version of setup-node 894261d

https://github.com/webextension-toolbox/webextension-toolbox/compare/v4.0.2...v4.0.3

v4.0.2

  • Merge pull request #486 from balcsida/bump_version f9b3933
  • Bump webpack-webextension-plugin and node versions a0a025d
  • Add version to example extension f50bdc7

https://github.com/webextension-toolbox/webextension-toolbox/compare/v4.0.1...v4.0.2

v4.0.1

  • Fix a small issue with package-lock.json not working on Node 12.x

v4.0.0

Thanks for bearing with me, folks!

Changes

  • All dependencies are now the latest and greatest - including Webpack, which was bumped from 2.6.1 to 5.40.0. As these dependency updates can introduce breaking changes for certain workflows, that's why the major version got bumped (v3.0.0 to v4.0.0)
  • Edge is now Chromium - so it should get the polyfills automatically (kudos to @​fapdash for this)

Backstage

Changelog

Sourced from webextension-toolbox's changelog.

[4.0.3] - 2021-07-05

Changed

  • Merge pull request #494 from balcsida/bump-plugin 0480141
  • Bump webpack-webextension-plugin aca3298
  • Merge pull request #483 from webextension-toolbox/dependabot/npm_and_yarn/commander-8.0.0 56b8473
  • Bump commander from 8.0.0-2 to 8.0.0 19f8ebb
  • Merge pull request #492 from webextension-toolbox/dependabot/npm_and_yarn/core-js-3.15.2 ce8444b
  • Merge pull request #493 from webextension-toolbox/dependabot/npm_and_yarn/webpack-5.42.0 4c8f497
  • Merge pull request #488 from webextension-toolbox/dependabot/npm_and_yarn/string-replace-loader-3.0.3 51bf23e
  • Bump webpack from 5.40.0 to 5.42.0 d3ea350
  • Bump string-replace-loader from 3.0.2 to 3.0.3 d613295
  • Bump core-js from 3.15.0 to 3.15.2 ba85193
  • Merge pull request #485 from balcsida/ghactions/nodeci 4ad6afe
  • Merge pull request #487 from webextension-toolbox/dependabot/npm_and_yarn/copy-webpack-plugin-9.0.1 297b9fb
  • Bump copy-webpack-plugin from 9.0.0 to 9.0.1 e428f27
  • Use Latest version of setup-node 894261d

[4.0.2] - 2021-06-27

Changed

  • Merge pull request #486 from balcsida/bump_version f9b3933
  • Bump webpack-webextension-plugin and node versions a0a025d
  • Add version to example extension f50bdc7

[4.0.1] - 2021-06-22

Changed

  • Fix a small issue with package-lock.json not working on Node 12.x

[4.0.0] - 2021-06-22

Changed

  • All dependencies are now the latest and greatest - including Webpack, which was bumped from 2.6.1 to 5.40.0. As these dependency updates can introduce breaking changes for certain workflows, that's why the major version got bumped (v3.0.0 to v4.0.0)
  • Edge is now Chromium - so it should get the polyfills automatically (kudos to @​fapdash for this)
  • All CI is now GitHub Actions
  • Dependabot keeps us up to date
  • Dropped Nodejs v10.x support, picked up v16.x
  • Thanks to @​dotproto we now have a cleaner README
Commits
  • 77acf7e 4.0.3
  • 0480141 Merge pull request #494 from balcsida/bump-plugin
  • aca3298 Bump webpack-webextension-plugin
  • 56b8473 Merge pull request #483 from webextension-toolbox/dependabot/npm_and_yarn/com...
  • 19f8ebb Bump commander from 8.0.0-2 to 8.0.0
  • ce8444b Merge pull request #492 from webextension-toolbox/dependabot/npm_and_yarn/cor...
  • 4c8f497 Merge pull request #493 from webextension-toolbox/dependabot/npm_and_yarn/web...
  • 51bf23e Merge pull request #488 from webextension-toolbox/dependabot/npm_and_yarn/str...
  • d3ea350 Bump webpack from 5.40.0 to 5.42.0
  • d613295 Bump string-replace-loader from 3.0.2 to 3.0.3
  • Additional commits viewable in compare view


Updates webpack from 4.44.2 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

  • experiments.* normalize to false when opt-out
  • avoid NaN%
  • show the correct error when using a conflicting chunk name in code
  • HMR code tests existance of window before trying to access it
  • fix eval-nosources-* actually exclude sources
  • fix race condition where no module is returned from processing module
  • fix position of standalong semicolon in runtime code

Features

  • add support for @import to extenal CSS when using experimental CSS in node
  • add i64 support to the deprecated WASM implementation

Developer Experience

  • expose EnableWasmLoadingPlugin
  • add more typings
  • generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

  • add resolve.extensionAlias option which allows to alias extensions
    • This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")
  • add support for ES2022 features like static blocks
  • add Tree Shaking support for ProvidePlugin

Bugfixes

  • fix persistent cache when some build dependencies are on a different windows drive
  • make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
  • remove left-over from debugging in TLA/async modules runtime code
  • remove unneeded extra 1s timestamp offset during watching when files are actually untouched
    • This sometimes caused an additional second build which are not really needed
  • fix shareScope option for ModuleFederationPlugin
  • set "use-credentials" also for same origin scripts

Performance

  • Improve memory usage and performance of aggregating needed files/directories for watching
    • This affects rebuild performance

Extensibility

  • export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits