Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
v2.2.1
Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
v2.2.0
New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
This version was pushed to npm by dummdidumm, a new releaser for svelte-loader since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/graph-paper-org/app-template/network/alerts).
Bumps json5 to 2.2.3 and updates ancestor dependencies json5, @storybook/svelte, babel-loader, tsconfig-paths, rollup-plugin-postcss and svelte-loader. These dependencies need to be updated together.
Updates
json5
from 2.1.3 to 2.2.3Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
c3a7524
2.2.394fd06d
docs: update CHANGELOG for v2.2.33b8cebf
docs(security): use GitHub security advisoriesf0fd9e1
docs: publish a security policy6a91a05
docs(template): bug -> bug report14f8cb1
2.2.210cc7ca
docs: update CHANGELOG for v2.2.27774c10
fix: add proto to objects and arraysedde30a
Readme: slight tweak to intro97286f8
Improve example in readmeUpdates
@storybook/svelte
from 6.0.26 to 6.5.15Release notes
Sourced from
@storybook/svelte
's releases.... (truncated)
Changelog
Sourced from
@storybook/svelte
's changelog.... (truncated)
Commits
feab19d
v6.5.15075a8dd
Update git head to 6.5.15-alpha.1, update yarn.lock [ci skip]cfd775b
v6.5.15-alpha.19c19ef0
Update git head to 6.5.15-alpha.0, update yarn.lock [ci skip]095d6ad
v6.5.15-alpha.0ae06ca9
Update git head to 6.5.14, update yarn.lock [ci skip]cf65eb7
v6.5.146e1e6dd
Update git head to 6.5.14-alpha.2, update yarn.lock [ci skip]71f07c4
v6.5.14-alpha.2885e7ac
Update git head to 6.5.14-alpha.1, update yarn.lock [ci skip]Updates
babel-loader
from 8.1.0 to 8.3.0Release notes
Sourced from babel-loader's releases.
Commits
9bf5652
8.3.080ab7d0
Update@babel/
dependencies493ac6c
Pass external dependencies from Babel to Webpack (#971)df28fe3
Fix broken main test (#950)0b338e4
update hash method so it doesn't fail on a fips enabled machine (#939)1f98d3c
8.2.5c622868
fix: respectinputSourceMap
loader option (#896)f7982c1
8.2.44bb9e21
Use md5 hashing for OpenSSL 3 (#924)247c94b
Bump loader-utils to 2.x (#931)Maintainer changes
This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.
Updates
tsconfig-paths
from 3.9.0 to 3.10.1Changelog
Sourced from tsconfig-paths's changelog.
Commits
80bc810
v3.10.1beb9a47
Add changelog for 3.10.1893b76d
Add register.js to published files9327fa1
v3.10.0766a0e8
Update changelog for 3.10.02cf8b21
Categorize changelogfb67ba2
Update changelog with unreleased PRs079285a
Add file extenstion to typings property value (#151)c49386c
feat(tsconfig-loader): extends config from node_modules without './node_modul...f289c99
fix typo (#165)Updates
rollup-plugin-postcss
from 3.1.8 to 4.0.2Release notes
Sourced from rollup-plugin-postcss's releases.
Commits
71593d9
chore: update ci node versioncaf3429
fix: prioritize dart-sass over node-sass (#402)118253e
fix: update to cssnano 5 (#357)a03c7bf
build(deps): bump ini from 1.3.5 to 1.3.7 (#344)ceee1bc
feat: upgrade postcss to 8.x375412c
change postcss to 8.x (#343)6480f02
chore: upgrade dependencies (#342)700eb14
chore: update postcss version to 8 (#325)661c9ca
chore: Fix typo in comment (#318)Updates
svelte-loader
from 2.13.6 to 3.1.4Changelog
Sourced from svelte-loader's changelog.
Commits
705ab1c
[chore] release 3.1.428795f1
Bump loader-utils from 2.0.0 to 2.0.3 (#215)bba9acb
[chore] Add latest node versions to CI (#207)46fa2e4
[chore] release 3.1.31c41c98
[fix] Validate error path for addDependency() (#199)201272b
[chore] add 'npm' cache for actions/setup-node in .github/workflows (#190)fb59705
[chore] Remove outdated example directory9090867
[docs] unarchivefe3a0be
Update README.mdc1dbb52
Bump ansi-regex from 3.0.0 to 3.0.1 (#204)Maintainer changes
This version was pushed to npm by dummdidumm, a new releaser for svelte-loader since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/graph-paper-org/app-template/network/alerts).