Closed dependabot[bot] closed 1 year ago
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.
OK, I won't notify you again about this release, but will get in touch when a new version is available.
If you change your mind, just re-open this PR and I'll resolve any conflicts on it.
Bumps loader-utils to 2.0.4 and updates ancestor dependencies loader-utils, loader-utils, react-dev-utils and resolve-url-loader. These dependencies need to be updated together.
Updates
loader-utils
from 2.0.0 to 2.0.4Release notes
Sourced from loader-utils's releases.
Changelog
Sourced from loader-utils's changelog.
Commits
6688b50
chore(release): 2.0.4ac09944
fix: ReDoS problem (#225)7162619
chore(release): 2.0.3a93cf6f
fix(security): prototype polution exploit (#217)90c7c4b
chore(release): 2.0.28c2d24e
fix: base64 generation and unicode characters (#197)5fb5562
chore(release): 2.0.11069f61
fix: md4 support on Node.js v17 (#193)Updates
loader-utils
from 1.4.0 to 2.0.4Release notes
Sourced from loader-utils's releases.
Changelog
Sourced from loader-utils's changelog.
Commits
6688b50
chore(release): 2.0.4ac09944
fix: ReDoS problem (#225)7162619
chore(release): 2.0.3a93cf6f
fix(security): prototype polution exploit (#217)90c7c4b
chore(release): 2.0.28c2d24e
fix: base64 generation and unicode characters (#197)5fb5562
chore(release): 2.0.11069f61
fix: md4 support on Node.js v17 (#193)Updates
react-dev-utils
from 11.0.1 to 12.0.1Changelog
Sourced from react-dev-utils's changelog.
... (truncated)
Commits
19fa58d
Publisha422bf2
Ensure posix compliant joins for urls in middleware (#11640)221e511
Publish3afbbc0
Update all dependencies (#11624)3880ba6
Remove dependency pinning (#11474)5cedfe4
Bump browserslist from 4.14.2 to 4.16.5 (#11476)63bba07
Upgrade jest and related packages from 26.6.0 to 27.1.0 (#11338)960b21e
Bump immer from 8.0.4 to 9.0.6 (#11364)f0a837c
Webpack 5 (#11201)369fccf
fix: fast refresh stops on needed bail outs (#11105)Updates
resolve-url-loader
from 3.1.2 to 5.0.0Release notes
Sourced from resolve-url-loader's releases.
... (truncated)
Changelog
Sourced from resolve-url-loader's changelog.
... (truncated)
Commits
bf01da9
5.0.078393f6
update branch references to v56787839
github actions for CI1457038
update changelog and readmea01faf9
5.0.0-beta.1fb09fae
remove the engine option harder, ensure deprecation warning is tested5654fa4
remove the engine option and related tests, use getOptions from loader where ...10f9cdb
5.0.0-alpha.1b168dd3
adjust deprecation message for engine option29e142a
normalise windows absolute paths to posix format in log messagesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/dgraph-io/ratel/network/alerts).