Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
v2.2.1
Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
v2.2.0
New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#654) (5901006)
removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#654) (5901006)
Bumps json5 to 2.2.3 and updates ancestor dependencies json5, css-loader, style-loader, babel-loader, copy-webpack-plugin, html-loader, html-webpack-plugin, mini-css-extract-plugin, postcss-loader, webpack and webpack-cli. These dependencies need to be updated together.
Updates
json5from 2.1.1 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a75242.2.394fd06ddocs: update CHANGELOG for v2.2.33b8cebfdocs(security): use GitHub security advisoriesf0fd9e1docs: publish a security policy6a91a05docs(template): bug -> bug report14f8cb12.2.210cc7cadocs: update CHANGELOG for v2.2.27774c10fix: add proto to objects and arraysedde30aReadme: slight tweak to intro97286f8Improve example in readmeUpdates
css-loaderfrom 3.2.0 to 6.7.3Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
ef749f2chore(release): 6.7.336fb945chore: fix cspell962924cfix: removesourceURLfrom emitted CSS (#1487)3f3f302chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)04ca713chore: update dependencies to the latest version (#1485)9449827chore: update styfle/cancel-workflow-action (#1484)6c67af8chore: add cSpell to check spelling issues (#1482)239b9acchore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)394d200chore(release): 6.7.22f4c273fix: css modules generation with inline syntax (#1480)Updates
style-loaderfrom 1.0.0 to 1.3.0Release notes
Sourced from style-loader's releases.
... (truncated)
Changelog
Sourced from style-loader's changelog.
... (truncated)
Commits
e288500chore(release): 1.3.0bed760frevert: node bump (#486)15889dbfeat: addedmodules.namedExport(#485)6e54e4fchore(deps): update732ef8bfix: check if 'btoa' exists for old IE versions (#479)c623f27fix: esModule option issue (#476)ae7d211docs: fix typo for esModule (#473)b76cb97chore: update Node.js required version (#474)5520e68chore(release): 1.2.188a5c2bfix: hot module replacement logic for lazy type (#468)Updates
babel-loaderfrom 8.0.6 to 8.3.0Release notes
Sourced from babel-loader's releases.
Commits
9bf56528.3.080ab7d0Update@babel/dependencies493ac6cPass external dependencies from Babel to Webpack (#971)df28fe3Fix broken main test (#950)0b338e4update hash method so it doesn't fail on a fips enabled machine (#939)1f98d3c8.2.5c622868fix: respectinputSourceMaploader option (#896)f7982c18.2.44bb9e21Use md5 hashing for OpenSSL 3 (#924)247c94bBump loader-utils to 2.x (#931)Maintainer changes
This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.
Updates
copy-webpack-pluginfrom 5.1.1 to 11.0.0Release notes
Sourced from copy-webpack-plugin's releases.
... (truncated)
Changelog
Sourced from copy-webpack-plugin's changelog.
... (truncated)
Commits
f3b2c24chore(release): 11.0.08424ca8chore(deps): regenerate lock file (#693)675c676build: drop node v12 (#691)a2b1f19chore: update gitub actions (#692)238c062chore: upgrade dependencies to the latest version (#688)e27006eci: remove node v17 (#687)e50d708chore: add node 18 to workflow (#686)f1a91e6ci: don't install webpack again (#680)64cf06fdocs: add path string to options signature (#683)4b18a6bdocs: improve readmeUpdates
html-loaderfrom 0.5.5 to 4.2.0Release notes
Sourced from html-loader's releases.
... (truncated)
Changelog
Sourced from html-loader's changelog.
... (truncated)
Commits
17fbef3chore(release): 4.2.027a6caffeat: update html minifier (#462)01905bachore: update commitlint action (#461)37d2073chore: run cancel workflow on pull request (#458)7dd065cchore: update jest to the latest version (#457)3ddf326ci: update github workflow security permissions (#456)2457edachore: upgrade dependencies to the latest version (#455)3ea5738ci: add job to cancel previous runs (#454)33cc6d0chore: update dependencies to the latest version (#453)e81a944ci: add GitHub token permissions for workflow (#450)Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for html-loader since your current version.
Updates
html-webpack-pluginfrom 3.2.0 to 5.5.0Changelog
Sourced from html-webpack-plugin's changelog.
... (truncated)
Commits
873d75bchore(release): 5.5.0ddeb774chore: update examples1e42625feat: Support type=module via scriptLoading option7d3645bBump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-380779be779[chore] changes actions to run on pull_requestsb7e5859[chore] fixes CI to avoid race conditions48131d3chore(release): 5.4.016a841a[chore] rebuild examples3bb7c17Update index.jse38ac97Update index.jsMaintainer changes
This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.
Updates
mini-css-extract-pluginfrom 0.8.2 to 2.7.2Release notes
Sourced from mini-css-extract-plugin's releases.
... (truncated)
Changelog
Sourced from mini-css-extract-plugin's changelog.
... (truncated)
Commits
b616093chore(release): 2.7.24d98d4bfix: don't crash in web workers (#1004)5ef989bchore(deps): bump minimist from 1.2.5 to 1.2.6 (#928)cd7d933chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#993)9178a0cchore: update dependencies to the latest version (#1003)7053ce2chore(release): 2.7.182ed663refactor: fix compatibility with old browsers (#1000)7585663chore(deps): update (#999)6ea0922fix: preserve order of link tags on HMR (#982)2633446chore: update styfle/cancel-workflow-action (#996)Updates
postcss-loaderfrom 3.0.0 to 7.0.2Release notes
Sourced from postcss-loader's releases.