Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
v2.2.1
Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
Fix: Properties with the name __proto__ are added to objects and arrays.
(#199) This also fixes a prototype pollution vulnerability reported by
Jonathan Gregson! (#295).
Note: React <16.8 is not supported. If you're still using React older than 16.8, please use react-pdf@^5.0.0 instead.
❗️ = breaking change
What's new?
❗️ Vastly improved performance and bundle size thanks to the modern version of PDF.js that is now used. This drops support for legacy browsers. See README for details.
remove the --prefetch option in favor the PrefetchPlugin plugin
remove the --node-env option in favor --define-process-env-node-env
remove the --hot option in favor of directly using the HotModuleReplacement plugin (only for build command, for serve it will work)
the behavior logic of the --entry option has been changed - previously it replaced your entries, now the option adds a specified entry, if you want to return the previous behavior please use webpack --entry-reset --entry './src/my-entry.js'
remove the --prefetch option in favor the PrefetchPlugin plugin
remove the --node-env option in favor --define-process-env-node-env
remove the --hot option in favor of directly using the HotModuleReplacement plugin (only for build command, for serve it will work)
the behavior logic of the --entry option has been changed - previously it replaced your entries, now the option adds a specified entry, if you want to return the previous behavior please use webpack --entry-reset --entry './src/my-entry.js'
Bumps json5 to 2.2.2 and updates ancestor dependencies json5, webpack, babel-loader, css-loader, file-loader, html-webpack-plugin, less-loader, react-pdf, webpack-cli and error-overlay-webpack-plugin. These dependencies need to be updated together.
Updates
json5
from 2.2.0 to 2.2.2Release notes
Sourced from json5's releases.
Changelog
Sourced from json5's changelog.
Commits
14f8cb1
2.2.210cc7ca
docs: update CHANGELOG for v2.2.27774c10
fix: add proto to objects and arraysedde30a
Readme: slight tweak to intro97286f8
Improve example in readmed720b4f
Improve readme (e.g. explain JSON5 better!) (#291)910ce25
docs: fix spelling of Aseem2aab4dd
test: require tap as t in cli tests6d42686
test: remove mocha syntax from tests4798b9d
docs: update installation and usage for modulesUpdates
webpack
from 4.46.0 to 5.75.0Release notes
Sourced from webpack's releases.
... (truncated)
Commits
8241da7
5.75.0a91d923
Merge pull request #16458 from webpack/bugfix/semi4608b11
Merge pull request #16457 from webpack/tooling/updatedfdd0b0
Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback23b9a1c
Merge pull request #16167 from exposir/fixts6f2c5e8
Merge pull request #16257 from alexzhang1030/calc_deterministic_verbosef7f36ad
Merge pull request #16339 from Liamolucko/wasm-i64761a542
fix semicolon position2403a36
Merge pull request #16345 from ahabhgk/fix-eval-nosourcesc18203c
update toolingUpdates
babel-loader
from 8.2.2 to 8.3.0Release notes
Sourced from babel-loader's releases.
Commits
9bf5652
8.3.080ab7d0
Update@babel/
dependencies493ac6c
Pass external dependencies from Babel to Webpack (#971)df28fe3
Fix broken main test (#950)0b338e4
update hash method so it doesn't fail on a fips enabled machine (#939)1f98d3c
8.2.5c622868
fix: respectinputSourceMap
loader option (#896)f7982c1
8.2.44bb9e21
Use md5 hashing for OpenSSL 3 (#924)247c94b
Bump loader-utils to 2.x (#931)Updates
css-loader
from 3.6.0 to 6.7.3Release notes
Sourced from css-loader's releases.
... (truncated)
Changelog
Sourced from css-loader's changelog.
... (truncated)
Commits
ef749f2
chore(release): 6.7.336fb945
chore: fix cspell962924c
fix: removesourceURL
from emitted CSS (#1487)3f3f302
chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)04ca713
chore: update dependencies to the latest version (#1485)9449827
chore: update styfle/cancel-workflow-action (#1484)6c67af8
chore: add cSpell to check spelling issues (#1482)239b9ac
chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)394d200
chore(release): 6.7.22f4c273
fix: css modules generation with inline syntax (#1480)Updates
file-loader
from 4.3.0 to 6.2.0Release notes
Sourced from file-loader's releases.
... (truncated)
Changelog
Sourced from file-loader's changelog.
... (truncated)
Commits
c423008
chore(release): 6.2.0654e0d6
feat: added thesourceFilename
property to asset info with original filenam...381d8bd
fix: immutable flag when thename
option have hash in query string (#392)14ed4c9
ci: updated webpack versions (#389)6fadfbe
chore(release): 6.1.160508cf
chore(deps): update25e2668
chore(release): 6.1.06e22f6e
test: fix40fcde8
feat: pass immutable flag to asset info (#383)718aef5
chore(deps): update (#375)Updates
html-webpack-plugin
from 3.2.0 to 5.5.0Changelog
Sourced from html-webpack-plugin's changelog.
... (truncated)
Commits
873d75b
chore(release): 5.5.0ddeb774
chore: update examples1e42625
feat: Support type=module via scriptLoading option7d3645b
Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-380779be779
[chore] changes actions to run on pull_requestsb7e5859
[chore] fixes CI to avoid race conditions48131d3
chore(release): 5.4.016a841a
[chore] rebuild examples3bb7c17
Update index.jse38ac97
Update index.jsMaintainer changes
This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.
Updates
less-loader
from 5.0.0 to 11.1.0Release notes
Sourced from less-loader's releases.
... (truncated)
Changelog
Sourced from less-loader's changelog.
... (truncated)
Commits
21caa3e
chore(release): 11.1.043cd20c
feat: allow to extendconditionNames
(#488)c1aa4f5
chore: update dependencies to the latest version (#487)2dcfe42
chore: update commitlint action (#486)60d6a29
chore: run cancel workflow on pull request (#485)4e81ee0
chore: update jest to the latest version (#483)965f5d8
ci: update github workflow security permissions (#482)454e187
chore: upgrade dependencies to the latest version (#481)bb799d1
ci: add job to cancel previous runs (#480)d292548
chore: update dependencies to the latest version (#479)Updates
react-pdf
from 4.2.0 to 6.2.1Release notes
Sourced from react-pdf's releases.
... (truncated)
Commits
2297b2d
v6.2.11ee0376
Fix first annotation not clickable39cf51e
Fix typos (#1227)97d8b87
Replace typeof window checks with typeof document checks300712e
Fix onItemClick callback working only once per itema34a52e
Update documentation on compatibility425834e
Add GitHub Actions Reporter to Jest configuration34fbf09
Add pageIndex, pageNumber to customTextRenderer args0401e2a
Use Node 18 for CI373335c
Improve customTextRenderer exampleUpdates
webpack-cli
from 3.3.12 to 5.0.1Release notes
Sourced from webpack-cli's releases.
... (truncated)
Changelog
Sourced from webpack-cli's changelog.
... (truncated)
Commits
4a0f893
chore(release): publish new version9de982c
chore: fix cspell32d26c8
chore(deps-dev): bump cspell from 6.15.1 to 6.16.0 (#3517)2788bf9
chore(deps-dev): bump eslint from 8.28.0 to 8.29.0 (#3516)ac88ee4
chore(deps-dev): bump lint-staged from 13.0.4 to 13.1.0 (#3515)346a518
fix: make define-process-env-node-env alias node-env (#3514)3ec7b16
chore(deps): bump yeoman-environment from 3.12.1 to 3.13.0 (#3508)c8adfa6
chore(deps-dev): bump@types/node
from 18.11.9 to 18.11.10 (#3513)0ad8cc2
chore(deps-dev): bump cspell from 6.15.0 to 6.15.1 (#3512)d30f261
chore(deps-dev): bump ts-loader from 9.4.1 to 9.4.2 (#3511)Updates
error-overlay-webpack-plugin
from 0.4.2 to 1.1.1Release notes
Sourced from error-overlay-webpack-plugin's releases.