rsoreq / zenbot

Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB.
MIT License
0 stars 0 forks source link

fix(deps): update dependency css-loader to v4 - autoclosed #842

Closed mend-for-github-com[bot] closed 1 year ago

mend-for-github-com[bot] commented 1 year ago

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
css-loader ^3.6.0 -> ^4.0.0 age adoption passing confidence

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-37601
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2021-23382
High High 7.5 CVE-2022-37603
Medium Medium 5.3 CVE-2021-23368
Medium Medium 5.3 CVE-2021-23368

Release Notes

webpack-contrib/css-loader ### [`v4.0.0`](https://togithub.com/webpack-contrib/css-loader/blob/HEAD/CHANGELOG.md#​400-httpsgithubcomwebpack-contribcss-loadercomparev360v400-2020-07-25) [Compare Source](https://togithub.com/webpack-contrib/css-loader/compare/v3.6.0...v4.0.0) ##### ⚠ BREAKING CHANGES - minimum required `Node.js` version is `10.13.0` - minimum required `webpack` version is `4.27.0` - the `esModule` option is `true` by default - default value of the `sourceMap` option depends on the `devtool` option - `icss` plugin disable by default, you need to setup the `modules` option to enable it - the `modules` option is `true` by default for all files matching `/\.module\.\w+$/i.test(filename)` regular expression, `module.auto` is `true` by default - the `modules.context` option was renamed to the `modules.localIdentContext` option - default the `modules.localIdentContext` value is `compiler.context` for the `module.getLocalIdent` option - the `modules.hashPrefix` option was renamed to the `modules.localIdentHashPrefix` option - the `localsConvention` option was moved and renamed to the `modules.exportLocalsConvention` option - the `getLocalIndent` option should be always `Function` and should always return `String` value - the `onlyLocals` option was moved and renamed to the `modules.exportOnlyLocals` option - function arguments of the `import` option were changed, it is now `function(url, media, resourcePath) {}` - inline syntax was changed, please write `~` before the file request, i.e. rewrite `url(~!!loader!package/img.png)` to `url(!!loader!~package/img.png)` - `url()` resolving algorithm now handles absolute paths instead of ignoring them. This can break builds which relied on absolute paths to refer to the asset directory. ([bc19ddd](https://togithub.com/webpack-contrib/css-loader/commit/bc19ddd8779dafbc2a420870a3cb841041ce9c7c)) ##### Features - `@value` supports importing `url()` ([#​1126](https://togithub.com/webpack-contrib/css-loader/issues/1126)) ([7f49a0a](https://togithub.com/webpack-contrib/css-loader/commit/7f49a0a6047846bb2e432558365e19d4a0dfb366)) - improve `url()` resolving algorithm to support more path types ([bc19ddd](https://togithub.com/webpack-contrib/css-loader/commit/bc19ddd8779dafbc2a420870a3cb841041ce9c7c)) - named export for locals ([#​1108](https://togithub.com/webpack-contrib/css-loader/issues/1108)) ([d139ec1](https://togithub.com/webpack-contrib/css-loader/commit/d139ec1d763f9944550b31f2a75183e488dd1224)) - respected the `style` field from package.json ([#​1099](https://togithub.com/webpack-contrib/css-loader/issues/1099)) ([edf5347](https://togithub.com/webpack-contrib/css-loader/commit/edf5347e4203a62e50b87248a83da198afdc6eba)) - support `file:` protocol ([5604205](https://togithub.com/webpack-contrib/css-loader/commit/560420567eb0e1a635648b7f4ff0365db475384c)) - support server relative URLs ##### Bug Fixes - resolution algorithm, you don't need `~` inside packages in `node_modules` ([76f1480](https://togithub.com/webpack-contrib/css-loader/commit/76f1480b14265369ac5dc8dbbce467cfb8e814c5))

mend-for-github-com[bot] commented 1 year ago

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

The artifact failure details are included below:

File name: package-lock.json
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: zenbot4@4.1.0
npm ERR! Found: webpack@4.46.0
npm ERR! node_modules/webpack
npm ERR!   webpack@"^4.44.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer webpack@"^5.0.0" from postcss-loader@5.3.0
npm ERR! node_modules/postcss-loader
npm ERR!   postcss-loader@"^5.0.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force, or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! See /tmp/renovate/cache/others/npm/eresolve-report.txt for a full report.

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/renovate/cache/others/npm/_logs/2023-06-28T01_00_59_862Z-debug-0.log