Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/caiofsouza/vue-backtotop/network/alerts).
Bumps loader-utils to 2.0.4 and updates ancestor dependencies loader-utils, babel-loader, css-loader, file-loader and webpack. These dependencies need to be updated together.
Updates
loader-utilsfrom 1.1.0 to 2.0.4Release notes
Sourced from loader-utils's releases.
... (truncated)
Changelog
Sourced from loader-utils's changelog.
... (truncated)
Commits
6688b50chore(release): 2.0.4ac09944fix: ReDoS problem (#225)7162619chore(release): 2.0.3a93cf6ffix(security): prototype polution exploit (#217)90c7c4bchore(release): 2.0.28c2d24efix: base64 generation and unicode characters (#197)5fb5562chore(release): 2.0.11069f61fix: md4 support on Node.js v17 (#193)d9f4e23chore(release): 2.0.0865dc03refactor: switch tomd4by default (#168)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.
Updates
babel-loaderfrom 6.4.1 to 9.1.0Release notes
Sourced from babel-loader's releases.
... (truncated)
Changelog
Sourced from babel-loader's changelog.
Commits
15fbacf9.1.06348e1cPass external dependencies from Babel to Webpack (#971)457b9adUpdate webpackf42ac9b9.0.14f9c0bfremove "node:" builtin prefix (#970)9ff288f9.0.0006a3dcUpdate README.mddaed88aUpdate README.md0ed5fd6Bump ini from 1.3.5 to 1.3.8 (#968)b1749e3Bump y18n from 4.0.0 to 4.0.3 (#967)Maintainer changes
This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.
Updates
css-loaderfrom 0.25.0 to 6.7.2Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
394d200chore(release): 6.7.22f4c273fix: css modules generation with inline syntax (#1480)7c5cdccchore(deps): bump loader-utils from 2.0.2 to 2.0.3 (#1479)d5bc6eachore: update dependencies to the latest version (#1478)85b6bf7ci: add node v19 (#1477)0f85c5bchore: update dependencies to the latest version (#1474)560c05fci: add dependency review action (#1476)cc4e08fchore: update commitlint action (#1473)9846913chore: run cancel workflow on pull request (#1472)845718cchore: update jest to the latest version (#1471)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.
Updates
file-loaderfrom 0.9.0 to 6.2.0Release notes
Sourced from file-loader's releases.
... (truncated)
Changelog
Sourced from file-loader's changelog.
... (truncated)
Commits
c423008chore(release): 6.2.0654e0d6feat: added thesourceFilenameproperty to asset info with original filenam...381d8bdfix: immutable flag when thenameoption have hash in query string (#392)14ed4c9ci: updated webpack versions (#389)6fadfbechore(release): 6.1.160508cfchore(deps): update25e2668chore(release): 6.1.06e22f6etest: fix40fcde8feat: pass immutable flag to asset info (#383)718aef5chore(deps): update (#375)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for file-loader since your current version.
Updates
webpackfrom 2.7.0 to 5.75.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
8241da75.75.0a91d923Merge pull request #16458 from webpack/bugfix/semi4608b11Merge pull request #16457 from webpack/tooling/updatedfdd0b0Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback23b9a1cMerge pull request #16167 from exposir/fixts6f2c5e8Merge pull request #16257 from alexzhang1030/calc_deterministic_verbosef7f36adMerge pull request #16339 from Liamolucko/wasm-i64761a542fix semicolon position2403a36Merge pull request #16345 from ahabhgk/fix-eval-nosourcesc18203cupdate toolingDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/caiofsouza/vue-backtotop/network/alerts).