Bump json5, babel-loader, css-loader, file-loader, mini-css-extract-plugin, sass-loader, ts-loader, url-loader, vue-loader, webpack and webpack-cli

[dependabot[bot]]

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, babel-loader, css-loader, file-loader, mini-css-extract-plugin, sass-loader, ts-loader, url-loader, vue-loader, webpack and webpack-cli. These dependencies need to be updated together.

Updates json5 from 2.1.3 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

• Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

• Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

Commits

• c3a7524 2.2.3
• 94fd06d docs: update CHANGELOG for v2.2.3
• 3b8cebf docs(security): use GitHub security advisories
• f0fd9e1 docs: publish a security policy
• 6a91a05 docs(template): bug -> bug report
• 14f8cb1 2.2.2
• 10cc7ca docs: update CHANGELOG for v2.2.2
• 7774c10 fix: add proto to objects and arrays
• edde30a Readme: slight tweak to intro
• 97286f8 Improve example in readme
• Additional commits viewable in compare view

Updates babel-loader from 8.2.2 to 8.3.0

Release notes

Sourced from babel-loader's releases.

v8.3.0

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in babel/babel-loader#971

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v8.3.0

v8.2.5

What's Changed

• fix: respect inputSourceMap loader option by @​alan-agius4 in babel/babel-loader#896

New Contributors

• @​alan-agius4 made their first contribution in babel/babel-loader#896

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.4...v8.2.5

v8.2.4

What's Changed

• doc(README.md): fix a broken markdown link by @​loveDstyle in babel/babel-loader#919
• Bump loader-utils to 2.x by @​stianjensen in babel/babel-loader#931
• Use md5 hashing for OpenSSL 3 by @​pathmapper in babel/babel-loader#924

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

• Use md5 hash for caching on node v17 (babel/babel-loader#918)

Thanks @​Reptarsrage!

Commits

• 9bf5652 8.3.0
• 80ab7d0 Update @babel/ dependencies
• 493ac6c Pass external dependencies from Babel to Webpack (#971)
• df28fe3 Fix broken main test (#950)
• 0b338e4 update hash method so it doesn't fail on a fips enabled machine (#939)
• 1f98d3c 8.2.5
• c622868 fix: respect inputSourceMap loader option (#896)
• f7982c1 8.2.4
• 4bb9e21 Use md5 hashing for OpenSSL 3 (#924)
• 247c94b Bump loader-utils to 2.x (#931)
• Additional commits viewable in compare view

Updates css-loader from 3.6.0 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

• remove sourceURL from emitted CSS (#1487) (962924c)

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

• css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

• defaultGetLocalIdent export (#1427) (74dac1e)

v6.7.0

6.7.0 (2022-03-04)

Features

• re-export defaultGetLocalIdent (#1423) (207cf36)

v6.6.0

6.6.0 (2022-02-02)

Features

• added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

• regression with unicode characters in locals (b7a8441)
• runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

• remove sourceURL from emitted CSS (#1487) (962924c)

6.7.2 (2022-11-13)

Bug Fixes

• css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

• defaultGetLocalIdent export (#1427) (74dac1e)

6.7.0 (2022-03-04)

Features

• re-export defaultGetLocalIdent (#1423) (207cf36)

6.6.0 (2022-02-02)

Features

• added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

• regression with unicode characters in locals (b7a8441)
• runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

• support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits

• ef749f2 chore(release): 6.7.3
• 36fb945 chore: fix cspell
• 962924c fix: remove sourceURL from emitted CSS (#1487)
• 3f3f302 chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)
• 04ca713 chore: update dependencies to the latest version (#1485)
• 9449827 chore: update styfle/cancel-workflow-action (#1484)
• 6c67af8 chore: add cSpell to check spelling issues (#1482)
• 239b9ac chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)
• 394d200 chore(release): 6.7.2
• 2f4c273 fix: css modules generation with inline syntax (#1480)
• Additional commits viewable in compare view

Updates file-loader from 4.3.0 to 6.2.0

Release notes

Sourced from file-loader's releases.

v6.2.0

6.2.0 (2020-10-27)

Features

• added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

• immutable flag when the name option have hash in query string (#392) (381d8bd)

v6.1.1

6.1.1 (2020-10-09)

Chore

• update schema-utils

v6.1.0

6.1.0 (2020-08-31)

Features

• pass immutable flag to asset info (#383) (40fcde8)

v6.0.0

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

• use md4 by default for hashing (#369) (ad39022)

v5.1.0

5.1.0 (2020-02-19)

Features

• support the query template for the name option (#366) (cd8698b)

v5.0.2

5.0.2 (2019-11-25)

Chore

... (truncated)

Changelog

Sourced from file-loader's changelog.

6.2.0 (2020-10-27)

Features

• added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

• immutable flag when the name option have hash in query string (#392) (381d8bd)

6.1.1 (2020-10-09)

Chore

• update schema-utils

6.1.0 (2020-08-31)

Features

• pass immutable flag to asset info (#383) (40fcde8)

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

• use md4 by default for hashing (#369) (ad39022)

5.1.0 (2020-02-19)

Features

• support the query template for the name option (#366) (cd8698b)

5.0.2 (2019-11-25)

Chore

• add the funding field in package.json

5.0.1 (2019-11-25)

... (truncated)

Commits

• c423008 chore(release): 6.2.0
• 654e0d6 feat: added the sourceFilename property to asset info with original filenam...
• 381d8bd fix: immutable flag when the name option have hash in query string (#392)
• 14ed4c9 ci: updated webpack versions (#389)
• 6fadfbe chore(release): 6.1.1
• 60508cf chore(deps): update
• 25e2668 chore(release): 6.1.0
• 6e22f6e test: fix
• 40fcde8 feat: pass immutable flag to asset info (#383)
• 718aef5 chore(deps): update (#375)
• Additional commits viewable in compare view

Updates mini-css-extract-plugin from 0.9.0 to 2.7.2

Release notes

Sourced from mini-css-extract-plugin's releases.

v2.7.2

2.7.2 (2022-12-06)

Bug Fixes

• don't crash in web workers (#1004) (4d98d4b)

v2.7.1

2.7.1 (2022-11-29)

Bug Fixes

• preserve order of link tags on HMR (#982) (6ea0922)

v2.7.0

2.7.0 (2022-11-16)

Features

• add function support for locals (loader) (#985) (65519d0)

v2.6.1

2.6.1 (2022-06-15)

Bug Fixes

• do not attempt hot reloading when emit is false (#953) (b426f04)

v2.6.0

2.6.0 (2022-03-03)

Features

• added baseUri option support (from entry options) (#915) (6004d95)

v2.5.3

2.5.3 (2022-01-25)

Bug Fixes

• types (#903) (6650691)

v2.5.2

2.5.2 (2022-01-17)

... (truncated)

Changelog

Sourced from mini-css-extract-plugin's changelog.

2.7.2 (2022-12-06)

Bug Fixes

• don't crash in web workers (#1004) (4d98d4b)

2.7.1 (2022-11-29)

Bug Fixes

• preserve order of link tags on HMR (#982) (6ea0922)

2.7.0 (2022-11-16)

Features

• add function support for locals (loader) (#985) (65519d0)

2.6.1 (2022-06-15)

Bug Fixes

• do not attempt hot reloading when emit is false (#953) (b426f04)

2.6.0 (2022-03-03)

Features

• added baseUri option support (from entry options) (#915) (6004d95)

2.5.3 (2022-01-25)

Bug Fixes

• types (#903) (6650691)

2.5.2 (2022-01-17)

Bug Fixes

• types (dfb9afd)

2.5.1 (2022-01-17)

... (truncated)

Commits

• b616093 chore(release): 2.7.2
• 4d98d4b fix: don't crash in web workers (#1004)
• 5ef989b chore(deps): bump minimist from 1.2.5 to 1.2.6 (#928)
• cd7d933 chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#993)
• 9178a0c chore: update dependencies to the latest version (#1003)
• 7053ce2 chore(release): 2.7.1
• 82ed663 refactor: fix compatibility with old browsers (#1000)
• 7585663 chore(deps): update (#999)
• 6ea0922 fix: preserve order of link tags on HMR (#982)
• 2633446 chore: update styfle/cancel-workflow-action (#996)
• Additional commits viewable in compare view

Updates sass-loader from 8.0.2 to 13.2.0

Release notes

Sourced from sass-loader's releases.

v13.2.0

13.2.0 (2022-11-09)

Features

• add support for node-sass v8 (#1100) (e5581b7)

v13.1.0

13.1.0 (2022-10-06)

Features

• allow to extend conditionNames (#1092) (6e02c64)

v13.0.2

13.0.2 (2022-06-27)

Bug Fixes

• hide error stacktrace on Sass errors (#1069) (5e6a61b)

v13.0.1

13.0.1 (2022-06-24)

Bug Fixes

• optimize debug message formatting, #1065 (#1066) (49a578a)

v13.0.0

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0 (#1048)
• emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

• do not crash on importers for modern API (#1052) (095814e)
• do not store original sass error in webpack error(#1053) (06d7533)

v12.6.0

12.6.0 (2022-02-15)

... (truncated)

Changelog

Sourced from sass-loader's changelog.

13.2.0 (2022-11-09)

Features

• add support for node-sass v8 (#1100) (e5581b7)

13.1.0 (2022-10-06)

Features

• allow to extend conditionNames (#1092) (6e02c64)

13.0.2 (2022-06-27)

Bug Fixes

• hide error stacktrace on Sass errors (#1069) (5e6a61b)

13.0.1 (2022-06-24)

Bug Fixes

• optimize debug message formatting, #1065 (#1066) (49a578a)

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0 (#1048)
• emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

• do not crash on importers for modern API (#1052) (095814e)
• do not store original sass error in webpack error(#1053) (06d7533)

12.6.0 (2022-02-15)

Features

• added support for automatic loading of sass-embedded (#1025) (c8dae87)

12.5.0 (2022-02-14)

... (truncated)

Commits

• e8fbc79 chore(release): 13.2.0
• e5581b7 feat: add support for node-sass v8 (#1100)
• acb3ce0 chore(deps): bump loader-utils from 2.0.2 to 2.0.3 (#1099)
• 1cdea4e chore: update dependencies to the latest version (#1098)
• 094a303 docs: update cla link (#1096)
• c32f63a ci: add dependency review action (#1094)
• b31751d chore(release): 13.1.0
• 6e02c64 feat: allow to extend conditionNames (#1092)
• edab08f chore: update dependencies to the latest version (#1093)
• 3a34fef chore: update commitlint action (#1091)
• Additional commits viewable in compare view

Updates ts-loader from 8.0.12 to 8.4.0

Release notes

Sourced from ts-loader's releases.

v8.4.0

• fix: cater for change in resolveTypeReferenceDirective API in 4.7 - thanks @​dragomirtitian
• This is a backport from v9.2.7 for webpack 4 compatibility

v8.3.0

• Fixed impossibility to have several instances of ts-loader with different compiler options - thanks @​timocov* This is a backport from v9.2.0 for webpack 4 compatibility

v8.2.0

• Use caches for module resolution and type reference directives when using compiler default functions - thanks @​sheetalkamat - uses: microsoft/TypeScript#43700
• This is a backport from v9.1.0 for webpack 4 compatibility - thanks @​jasonkleban

v8.1.0

• feat: remove top-level typescript import statements - thanks @​ulivz

v8.0.18

• Perf: Optimize fileExists callback path - thanks @​berickson1

v8.0.17

• Included correct webpack source location in emitted errors - thanks @​lorenzodallavecchia

v8.0.16

• Re-Fixed missing errors in watch mode in webpack5 - thanks @​appzuka

v8.0.15

• Update definition files in watch mode in webpack@5 - thanks @​appzuka,@​JonWallsten,@​alexander-akait
• Add afterDeclarations to getCustomTransformers in README.md - thanks @​appzuka

v8.0.14

• Upgrade chalk, loader-utils, and semver to latest stable versions - thanks Avi Vahl

v8.0.13

• Speed up builds by adding an in-memory cache to file path lookups - thanks @​berickson1

Changelog

Sourced from ts-loader's changelog.

v8.4.0

• fix: cater for change in resolveTypeReferenceDirective API in 4.7 - thanks @​dragomirtitian
• This is a backport from v9.2.7 for webpack 4 compatibility

v8.3.0

• Fixed impossibility to have several instances of ts-loader with different compiler options - thanks @​timocov
• This is a backport from v9.2.0 for webpack 4 compatibility

v8.2.0

• Use caches for module resolution and type reference directives when using compiler default functions - thanks @​sheetalkamat - uses: microsoft/TypeScript#43700
• This is a backport from v9.1.0 for webpack 4 compatibility

v8.1.0

• feat: remove top-level typescript import statements - thanks @​ulivz

v8.0.18

• Perf: Optimize fileExists callback path - thanks @​berickson1

v8.0.17

• Included correct webpack source location in emitted errors - thanks @​lorenzodallavecchia

v8.0.16

• Re-Fixed missing errors in watch mode in webpack5 - thanks @​appzuka

v8.0.15

• Update definition files in watch mode in webpack@5 - thanks @​appzuka,@​JonWallsten,@​alexander-akait
• Add afterDeclarations to getCustomTransformers in README.md - thanks @​appzuka

v8.0.14

• Upgrade chalk, loader-utils, and semver to latest stable versions - thanks Avi Vahl

v8.0.13

• Speed up builds by adding an in-memory cache to file path lookups - thanks @​berickson1

Commits

• ef85a62 fix: cater for change in resolveTypeReferenceDirective API in 4.7 (#1446)
• 3639cbd Backport #1317 to v8 (#1319)
• 6787a39 Backport #1287 to v8 (#1291)
• 8a32b04 docs: remove reference to travis and appveyor
• dc99b31 Fix 'Usage with webpack watch' code example syntax (#1280)
• 0d6c803 run comparison tests in consistent location on Windows (#1277)
• a1b19a1 feat: remove top-level typescript import statements (#1259)
• 656d6b8 Drop Travis (#1267)
• c2c1aef Optimize fileExists callback path (#1266)
• 953358e Stop testing TypeScript 3.6 and 3.7
• Additional commits viewable in compare view

Updates url-loader from 2.3.0 to 4.1.1

Release notes

Sourced from url-loader's releases.

v4.1.1

4.1.1 (2020-10-09)

Chore

• update schema-utils

v4.1.0

4.1.0 (2020-04-08)

Features

• the mimetype option can be Boolean
• added the encoding option
• added the generator option

v4.0.0

4.0.0 (2020-03-17)

⚠ BREAKING CHANGES

• deps: migrate on mime-types package, some rare types may have other mimetype

v3.0.0

3.0.0 (2019-11-26)

BREAKING CHANGES

• minimum required nodejs version is 10.13.0
• rename the esModules option to esModule
• switch to ES modules by default (the option esModule is true by default)

Changelog

Sourced from url-loader's changelog.

4.1.1 (2020-10-09)

Chore

• update schema-utils

4.1.0 (2020-04-08)

Features

• the mimetype option can be Boolean
• added the encoding option
• added the generator option

4.0.0 (2020-03-17)

⚠ BREAKING CHANGES

• deps: migrate on mime-types package, some rare types may have other mimetype

Bug Fixes

• description on the esModule option (#204) (a2f127d)

• deps: migrate on mime-types package (#209) (fc8721f)

3.0.0 (2019-11-26)

BREAKING CHANGES

• minimum required nodejs version is 10.13.0
• rename the esModules option to esModule
• switch to ES modules by default (the option esModule is true by default)

Commits

• acf4eb1 chore(release): 4.1.1
• 20c744b chore(deps): update (#220)
• 1811901 chore: remove unnecessary deps
• 35eeed1 ci: migrate on github actions (#213)
• 06d270a chore(release): 4.1.0
• 488b6ec refactor: code (#212)
• 36f1354 feat: add encoding & generator options (#210)
• 8828d64 chore(release): 4.0.0
• fc8721f chore(deps): migrate on mime-types package (#209)
• f13757a chore(deps): update (#208)
• Additional commits viewable in compare view

Updates vue-loader from 15.9.6 to 17.0.1

Release notes

Sourced from vue-loader's releases.

v17.0.1

Bug Fixes

• add vue and @vue/compiler-sfc to optional peerDependencies (df0ded5), closes #1944
• merge custom queries rather than appending (#1911) (9e4249a)

v17.0.0

Features

• support reactivityTransform option (e07490e)

BREAKING CHANGES

• remove refSugar option, require vue@^3.2.13

v16.8.3

Bug Fixes

• HMR not working correctly with vue-class-component components (#1897) (76b1448)

v16.8.2

Bug Fixes

• should allow chaining with loaders for non-vue files (#1889) (f32f953), closes #1879 #1883 #1890
• plugin: use compiler.webpack when possible (#1884) (