typicode/husky
### [`v7.0.4`](https://togithub.com/typicode/husky/releases/v7.0.4)
[Compare Source](https://togithub.com/typicode/husky/compare/v7.0.3...v7.0.4)
*No changes. Husky v7.0.3 was reverted, this version is the same as v7.0.2.*
### [`v7.0.3`](https://togithub.com/typicode/husky/compare/v7.0.2...v7.0.3)
[Compare Source](https://togithub.com/typicode/husky/compare/v7.0.2...v7.0.3)
okonet/lint-staged
### [`v11.2.4`](https://togithub.com/okonet/lint-staged/releases/v11.2.4)
[Compare Source](https://togithub.com/okonet/lint-staged/compare/v11.2.3...v11.2.4)
##### Performance Improvements
- replace `cosmiconfig` with `lilconfig` ([#981](https://togithub.com/okonet/lint-staged/issues/981)) ([04529e2](https://togithub.com/okonet/lint-staged/commit/04529e2b9040adc54cc8e5efc66b95bc0023477c))
webpack-contrib/mini-css-extract-plugin
### [`v2.4.3`](https://togithub.com/webpack-contrib/mini-css-extract-plugin/blob/master/CHANGELOG.md#243-httpsgithubcomwebpack-contribmini-css-extract-plugincomparev242v243-2021-10-21)
[Compare Source](https://togithub.com/webpack-contrib/mini-css-extract-plugin/compare/v2.4.2...v2.4.3)
nodejs/node
### [`v14.18.1`](https://togithub.com/nodejs/node/releases/v14.18.1)
[Compare Source](https://togithub.com/nodejs/node/compare/v14.18.0...v14.18.1)
This is a security release.
##### Notable changes
- **CVE-2021-22959**: HTTP Request Smuggling due to spaced in headers (Medium)
- The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). More details will be available at [CVE-2021-22959](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22959) after publication.
- **CVE-2021-22960**: HTTP Request Smuggling when parsing the body (Medium)
- The parse ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. More details will be available at [CVE-2021-22960](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22960) after publication.
##### Commits
- \[[`8c254ca7e4`](https://togithub.com/nodejs/node/commit/8c254ca7e4)] - **deps**: update llhttp to 2.1.4 (Fedor Indutny) [nodejs-private/node-private#285](https://togithub.com/nodejs-private/node-private/pull/285)
- \[[`9b92ae2499`](https://togithub.com/nodejs/node/commit/9b92ae2499)] - **http**: add regression test for smuggling content length (Matteo Collina) [nodejs-private/node-private#285](https://togithub.com/nodejs-private/node-private/pull/285)
- \[[`f467539719`](https://togithub.com/nodejs/node/commit/f467539719)] - **http**: add regression test for chunked smuggling (Matteo Collina) [nodejs-private/node-private#285](https://togithub.com/nodejs-private/node-private/pull/285)
preactjs/preact
### [`v10.5.15`](https://togithub.com/preactjs/preact/releases/10.5.15)
[Compare Source](https://togithub.com/preactjs/preact/compare/10.5.14...10.5.15)
#### Fixes
- Skip rendering rollup/rollup
### [`v2.58.3`](https://togithub.com/rollup/rollup/blob/master/CHANGELOG.md#2583)
[Compare Source](https://togithub.com/rollup/rollup/compare/v2.58.2...v2.58.3)
*2021-10-25*
##### Bug Fixes
- Republish 2.58.1 with npm 6 as files were missing
### [`v2.58.2`](https://togithub.com/rollup/rollup/blob/master/CHANGELOG.md#2582)
[Compare Source](https://togithub.com/rollup/rollup/compare/v2.58.1...v2.58.2)
*2021-10-25*
##### Bug Fixes
- Republish 2.58.1 as files were missing
### [`v2.58.1`](https://togithub.com/rollup/rollup/blob/master/CHANGELOG.md#2581)
[Compare Source](https://togithub.com/rollup/rollup/compare/v2.58.0...v2.58.1)
*2021-10-25*
##### Bug Fixes
- Fix an issue with the CommonJS plugin when module.exports is falsy ([#4247](https://togithub.com/rollup/rollup/issues/4247))
##### Pull Requests
- [#4247](https://togithub.com/rollup/rollup/pull/4247): Handle falsy synthetic namespaces ([@lukastaegert](https://togithub.com/lukastaegert))
lukeed/sirv
### [`v1.0.18`](https://togithub.com/lukeed/sirv/releases/v1.0.18)
[Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.17...v1.0.18)
#### Patches
- (sirv): Append `charset=utf-8` to HTML content-type ([#106](https://togithub.com/lukeed/sirv/issues/106), [#122](https://togithub.com/lukeed/sirv/issues/122)): [`d1b8ba6`](https://togithub.com/lukeed/sirv/commit/d1b8ba6)
*Thank you [@aleclarson](https://togithub.com/aleclarson)~!*
***
> **Full Changelog**: https://github.com/lukeed/sirv/compare/v1.0.17...v1.0.18
webpack-contrib/style-loader
### [`v3.3.1`](https://togithub.com/webpack-contrib/style-loader/blob/master/CHANGELOG.md#331-httpsgithubcomwebpack-contribstyle-loadercomparev330v331-2021-10-21)
[Compare Source](https://togithub.com/webpack-contrib/style-loader/compare/v3.3.0...v3.3.1)
Microsoft/TypeScript
### [`v4.4.4`](https://togithub.com/Microsoft/TypeScript/releases/v4.4.4)
[Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v4.4.3...v4.4.4)
This patch release contains fixes for [a performance regression in `--build` mode](https://togithub.com/microsoft/TypeScript/issues/46204) by [only calling `realpath` on `package.json`](https://togithub.com/microsoft/TypeScript/pull/462090) files only when those files are known to exist on disk, and [to only perform this work under `--watch` mode](https://togithub.com/microsoft/TypeScript/pull/46211).
***
For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-4/).
For the complete list of fixed issues, check out the
- [fixed issues query for Typescript 4.4.0 (Beta)](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.0+%28Beta%29%22+).
- [fixed issues query for Typescript 4.4.1 (RC)](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.1+%28RC%29%22+).
- [fixed issues query for Typescript 4.4.2](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.2%22+).
- [fixed issues query for Typescript 4.4.3](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.3%22+).
- [fixed issues query for Typescript 4.4.4](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.4%22+).
Downloads are available on:
- [npm](https://www.npmjs.com/package/typescript)
- [Visual Studio 2017/2019](https://marketplace.visualstudio.com/items?itemName=TypeScriptTeam.TypeScript-444) ([Select new version in project options](https://togithub.com/Microsoft/TypeScript/wiki/Updating-TypeScript-in-Visual-Studio-2017))
- [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)
webpack/webpack
### [`v5.60.0`](https://togithub.com/webpack/webpack/releases/v5.60.0)
[Compare Source](https://togithub.com/webpack/webpack/compare/v5.59.1...v5.60.0)
### Features
- Allow to pass more options to `experiments.lazyCompilation`. e. g. port, https stuff
### Bugfixes
- fix `output.hashFunction` used to persistent caching too
- Initialize `buildDependencies` Set correctly when loaders are added in `beforeLoaders` hook
### [`v5.59.1`](https://togithub.com/webpack/webpack/releases/v5.59.1)
[Compare Source](https://togithub.com/webpack/webpack/compare/v5.59.0...v5.59.1)
### Bugfixes
- fix regexp in managedPaths
- fix hanging when trying to write lockfile for `experiments.buildHttp`
### [`v5.59.0`](https://togithub.com/webpack/webpack/releases/v5.59.0)
[Compare Source](https://togithub.com/webpack/webpack/compare/v5.58.2...v5.59.0)
### Features
- add `/*#__PURE__*/` for `Object()` in generated code
- add RegExp and function support for `managed/immutablePaths`
- add hooks for multiple phases in module build
- improvements to `experiments.buildHttp`
- allow to share cache
- add allowlist
- add `splitChunks.minSizeReduction` option
### Bugfixes
- fix memory caching for Data URLs
- fix crash in `waitFor` when modules are unsafe cached
- fix bug in build cycle detection
### [`v5.58.2`](https://togithub.com/webpack/webpack/releases/v5.58.2)
[Compare Source](https://togithub.com/webpack/webpack/compare/v5.58.1...v5.58.2)
### Bugfixes
- fix serialization context passed
- fix a bug which caused module duplication when using persistent caching, unsafe cache and memory cache with GC
- fix validation of snapshots of non-existing directories
### Performance
- store a hash in first bits of bigint to workaround v8 hashing: https://github.com/v8/v8/blob/b704bc0958e2e26305a68e89d215af1aee011148/src/objects/bigint.h#L192-L195
webpack/webpack-cli
### [`v4.9.1`](https://togithub.com/webpack/webpack-cli/blob/master/CHANGELOG.md#491-httpsgithubcomwebpackwebpack-clicomparewebpack-cli490webpack-cli491-2021-10-18)
[Compare Source](https://togithub.com/webpack/webpack-cli/compare/webpack-cli@4.9.0...webpack-cli@4.9.1)
##### Bug Fixes
- compatibility with dynamic `import` ([#3006](https://togithub.com/webpack/webpack-cli/issues/3006)) ([6a9aac9](https://togithub.com/webpack/webpack-cli/commit/6a9aac99665f0d2f2f0c58c757c6befbc7734c8f))
yarnpkg/yarn
### [`v1.22.17`](https://togithub.com/yarnpkg/yarn/compare/v1.22.16...v1.22.17)
[Compare Source](https://togithub.com/yarnpkg/yarn/compare/v1.22.16...v1.22.17)
### [`v1.22.16`](https://togithub.com/yarnpkg/yarn/compare/v1.22.15...v1.22.16)
[Compare Source](https://togithub.com/yarnpkg/yarn/compare/v1.22.15...v1.22.16)
Configuration
📅 Schedule: "before 3am on Monday" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
[ ] If you want to rebase/retry this PR, click this checkbox.
This PR contains the following updates:
14.17.21
->14.17.32
10.0.4
->10.0.6
7.0.2
->7.0.4
11.2.3
->11.2.4
2.4.2
->2.4.3
14.18.0
->14.18.1
10.5.14
->10.5.15
2.58.0
->2.58.3
1.0.17
->1.0.18
3.3.0
->3.3.1
4.4.3
->4.4.4
5.58.1
->5.60.0
4.9.0
->4.9.1
1.22.15
->1.22.17
Release Notes
typicode/husky
### [`v7.0.4`](https://togithub.com/typicode/husky/releases/v7.0.4) [Compare Source](https://togithub.com/typicode/husky/compare/v7.0.3...v7.0.4) *No changes. Husky v7.0.3 was reverted, this version is the same as v7.0.2.* ### [`v7.0.3`](https://togithub.com/typicode/husky/compare/v7.0.2...v7.0.3) [Compare Source](https://togithub.com/typicode/husky/compare/v7.0.2...v7.0.3)okonet/lint-staged
### [`v11.2.4`](https://togithub.com/okonet/lint-staged/releases/v11.2.4) [Compare Source](https://togithub.com/okonet/lint-staged/compare/v11.2.3...v11.2.4) ##### Performance Improvements - replace `cosmiconfig` with `lilconfig` ([#981](https://togithub.com/okonet/lint-staged/issues/981)) ([04529e2](https://togithub.com/okonet/lint-staged/commit/04529e2b9040adc54cc8e5efc66b95bc0023477c))webpack-contrib/mini-css-extract-plugin
### [`v2.4.3`](https://togithub.com/webpack-contrib/mini-css-extract-plugin/blob/master/CHANGELOG.md#243-httpsgithubcomwebpack-contribmini-css-extract-plugincomparev242v243-2021-10-21) [Compare Source](https://togithub.com/webpack-contrib/mini-css-extract-plugin/compare/v2.4.2...v2.4.3)nodejs/node
### [`v14.18.1`](https://togithub.com/nodejs/node/releases/v14.18.1) [Compare Source](https://togithub.com/nodejs/node/compare/v14.18.0...v14.18.1) This is a security release. ##### Notable changes - **CVE-2021-22959**: HTTP Request Smuggling due to spaced in headers (Medium) - The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). More details will be available at [CVE-2021-22959](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22959) after publication. - **CVE-2021-22960**: HTTP Request Smuggling when parsing the body (Medium) - The parse ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. More details will be available at [CVE-2021-22960](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-22960) after publication. ##### Commits - \[[`8c254ca7e4`](https://togithub.com/nodejs/node/commit/8c254ca7e4)] - **deps**: update llhttp to 2.1.4 (Fedor Indutny) [nodejs-private/node-private#285](https://togithub.com/nodejs-private/node-private/pull/285) - \[[`9b92ae2499`](https://togithub.com/nodejs/node/commit/9b92ae2499)] - **http**: add regression test for smuggling content length (Matteo Collina) [nodejs-private/node-private#285](https://togithub.com/nodejs-private/node-private/pull/285) - \[[`f467539719`](https://togithub.com/nodejs/node/commit/f467539719)] - **http**: add regression test for chunked smuggling (Matteo Collina) [nodejs-private/node-private#285](https://togithub.com/nodejs-private/node-private/pull/285)preactjs/preact
### [`v10.5.15`](https://togithub.com/preactjs/preact/releases/10.5.15) [Compare Source](https://togithub.com/preactjs/preact/compare/10.5.14...10.5.15) #### Fixes - Skip renderingrollup/rollup
### [`v2.58.3`](https://togithub.com/rollup/rollup/blob/master/CHANGELOG.md#2583) [Compare Source](https://togithub.com/rollup/rollup/compare/v2.58.2...v2.58.3) *2021-10-25* ##### Bug Fixes - Republish 2.58.1 with npm 6 as files were missing ### [`v2.58.2`](https://togithub.com/rollup/rollup/blob/master/CHANGELOG.md#2582) [Compare Source](https://togithub.com/rollup/rollup/compare/v2.58.1...v2.58.2) *2021-10-25* ##### Bug Fixes - Republish 2.58.1 as files were missing ### [`v2.58.1`](https://togithub.com/rollup/rollup/blob/master/CHANGELOG.md#2581) [Compare Source](https://togithub.com/rollup/rollup/compare/v2.58.0...v2.58.1) *2021-10-25* ##### Bug Fixes - Fix an issue with the CommonJS plugin when module.exports is falsy ([#4247](https://togithub.com/rollup/rollup/issues/4247)) ##### Pull Requests - [#4247](https://togithub.com/rollup/rollup/pull/4247): Handle falsy synthetic namespaces ([@lukastaegert](https://togithub.com/lukastaegert))lukeed/sirv
### [`v1.0.18`](https://togithub.com/lukeed/sirv/releases/v1.0.18) [Compare Source](https://togithub.com/lukeed/sirv/compare/v1.0.17...v1.0.18) #### Patches - (sirv): Append `charset=utf-8` to HTML content-type ([#106](https://togithub.com/lukeed/sirv/issues/106), [#122](https://togithub.com/lukeed/sirv/issues/122)): [`d1b8ba6`](https://togithub.com/lukeed/sirv/commit/d1b8ba6) *Thank you [@aleclarson](https://togithub.com/aleclarson)~!* *** > **Full Changelog**: https://github.com/lukeed/sirv/compare/v1.0.17...v1.0.18webpack-contrib/style-loader
### [`v3.3.1`](https://togithub.com/webpack-contrib/style-loader/blob/master/CHANGELOG.md#331-httpsgithubcomwebpack-contribstyle-loadercomparev330v331-2021-10-21) [Compare Source](https://togithub.com/webpack-contrib/style-loader/compare/v3.3.0...v3.3.1)Microsoft/TypeScript
### [`v4.4.4`](https://togithub.com/Microsoft/TypeScript/releases/v4.4.4) [Compare Source](https://togithub.com/Microsoft/TypeScript/compare/v4.4.3...v4.4.4) This patch release contains fixes for [a performance regression in `--build` mode](https://togithub.com/microsoft/TypeScript/issues/46204) by [only calling `realpath` on `package.json`](https://togithub.com/microsoft/TypeScript/pull/462090) files only when those files are known to exist on disk, and [to only perform this work under `--watch` mode](https://togithub.com/microsoft/TypeScript/pull/46211). *** For release notes, check out the [release announcement](https://devblogs.microsoft.com/typescript/announcing-typescript-4-4/). For the complete list of fixed issues, check out the - [fixed issues query for Typescript 4.4.0 (Beta)](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.0+%28Beta%29%22+). - [fixed issues query for Typescript 4.4.1 (RC)](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.1+%28RC%29%22+). - [fixed issues query for Typescript 4.4.2](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.2%22+). - [fixed issues query for Typescript 4.4.3](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.3%22+). - [fixed issues query for Typescript 4.4.4](https://togithub.com/microsoft/TypeScript/issues?q=milestone%3A%22TypeScript+4.4.4%22+). Downloads are available on: - [npm](https://www.npmjs.com/package/typescript) - [Visual Studio 2017/2019](https://marketplace.visualstudio.com/items?itemName=TypeScriptTeam.TypeScript-444) ([Select new version in project options](https://togithub.com/Microsoft/TypeScript/wiki/Updating-TypeScript-in-Visual-Studio-2017)) - [NuGet package](https://www.nuget.org/packages/Microsoft.TypeScript.MSBuild)webpack/webpack
### [`v5.60.0`](https://togithub.com/webpack/webpack/releases/v5.60.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.59.1...v5.60.0) ### Features - Allow to pass more options to `experiments.lazyCompilation`. e. g. port, https stuff ### Bugfixes - fix `output.hashFunction` used to persistent caching too - Initialize `buildDependencies` Set correctly when loaders are added in `beforeLoaders` hook ### [`v5.59.1`](https://togithub.com/webpack/webpack/releases/v5.59.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.59.0...v5.59.1) ### Bugfixes - fix regexp in managedPaths - fix hanging when trying to write lockfile for `experiments.buildHttp` ### [`v5.59.0`](https://togithub.com/webpack/webpack/releases/v5.59.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.58.2...v5.59.0) ### Features - add `/*#__PURE__*/` for `Object()` in generated code - add RegExp and function support for `managed/immutablePaths` - add hooks for multiple phases in module build - improvements to `experiments.buildHttp` - allow to share cache - add allowlist - add `splitChunks.minSizeReduction` option ### Bugfixes - fix memory caching for Data URLs - fix crash in `waitFor` when modules are unsafe cached - fix bug in build cycle detection ### [`v5.58.2`](https://togithub.com/webpack/webpack/releases/v5.58.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.58.1...v5.58.2) ### Bugfixes - fix serialization context passed - fix a bug which caused module duplication when using persistent caching, unsafe cache and memory cache with GC - fix validation of snapshots of non-existing directories ### Performance - store a hash in first bits of bigint to workaround v8 hashing: https://github.com/v8/v8/blob/b704bc0958e2e26305a68e89d215af1aee011148/src/objects/bigint.h#L192-L195webpack/webpack-cli
### [`v4.9.1`](https://togithub.com/webpack/webpack-cli/blob/master/CHANGELOG.md#491-httpsgithubcomwebpackwebpack-clicomparewebpack-cli490webpack-cli491-2021-10-18) [Compare Source](https://togithub.com/webpack/webpack-cli/compare/webpack-cli@4.9.0...webpack-cli@4.9.1) ##### Bug Fixes - compatibility with dynamic `import` ([#3006](https://togithub.com/webpack/webpack-cli/issues/3006)) ([6a9aac9](https://togithub.com/webpack/webpack-cli/commit/6a9aac99665f0d2f2f0c58c757c6befbc7734c8f))yarnpkg/yarn
### [`v1.22.17`](https://togithub.com/yarnpkg/yarn/compare/v1.22.16...v1.22.17) [Compare Source](https://togithub.com/yarnpkg/yarn/compare/v1.22.16...v1.22.17) ### [`v1.22.16`](https://togithub.com/yarnpkg/yarn/compare/v1.22.15...v1.22.16) [Compare Source](https://togithub.com/yarnpkg/yarn/compare/v1.22.15...v1.22.16)Configuration
📅 Schedule: "before 3am on Monday" (UTC).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by WhiteSource Renovate. View repository job log here.