smallbets / userbase

Create secure and private web apps using only static JavaScript, HTML, and CSS.
https://userbase.com
MIT License
2.29k stars 125 forks source link

Bump json5, babel-loader, css-loader, file-loader, html-loader, postcss-loader, source-map-loader, style-loader, url-loader, webpack and webpack-cli in /src/proof-of-concept #414

Open dependabot[bot] opened 1 year ago

dependabot[bot] commented 1 year ago

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, babel-loader, css-loader, file-loader, html-loader, postcss-loader, source-map-loader, style-loader, url-loader, webpack and webpack-cli. These dependencies need to be updated together.

Updates json5 from 2.1.3 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

  • Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view


Updates babel-loader from 8.2.2 to 8.3.0

Release notes

Sourced from babel-loader's releases.

v8.3.0

New features

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v8.3.0

v8.2.5

What's Changed

New Contributors

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.4...v8.2.5

v8.2.4

What's Changed

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

Thanks @​Reptarsrage!

Commits


Updates css-loader from 2.1.1 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

v6.7.0

6.7.0 (2022-03-04)

Features

v6.6.0

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

6.7.0 (2022-03-04)

Features

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits


Updates file-loader from 3.0.1 to 6.2.0

Release notes

Sourced from file-loader's releases.

v6.2.0

6.2.0 (2020-10-27)

Features

  • added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

  • immutable flag when the name option have hash in query string (#392) (381d8bd)

v6.1.1

6.1.1 (2020-10-09)

Chore

  • update schema-utils

v6.1.0

6.1.0 (2020-08-31)

Features

v6.0.0

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

v5.1.0

5.1.0 (2020-02-19)

Features

  • support the query template for the name option (#366) (cd8698b)

v5.0.2

5.0.2 (2019-11-25)

Chore

... (truncated)

Changelog

Sourced from file-loader's changelog.

6.2.0 (2020-10-27)

Features

  • added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

  • immutable flag when the name option have hash in query string (#392) (381d8bd)

6.1.1 (2020-10-09)

Chore

  • update schema-utils

6.1.0 (2020-08-31)

Features

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

5.1.0 (2020-02-19)

Features

  • support the query template for the name option (#366) (cd8698b)

5.0.2 (2019-11-25)

Chore

  • add the funding field in package.json

5.0.1 (2019-11-25)

... (truncated)

Commits


Updates html-loader from 0.5.5 to 4.2.0

Release notes

Sourced from html-loader's releases.

v4.2.0

4.2.0 (2022-09-22)

Features

v4.1.0

4.1.0 (2022-07-11)

Features

v4.0.0

4.0.0 (2022-06-15)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0
  • update parse5 to 7.0.0

Bug Fixes

  • handle text with <script> in the script element (#444) (9949d82)

v3.1.2

Fix

  • broken release

v3.1.0

3.1.0 (2022-01-08)

Features

  • add possibility to extend default minimize options (#414) (0fa36af)

v3.0.1

3.0.1 (2021-11-02)

Bug Fixes

... (truncated)

Changelog

Sourced from html-loader's changelog.

4.2.0 (2022-09-22)

Features

4.1.0 (2022-07-11)

Features

4.0.0 (2022-06-15)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0
  • update parse5 to 7.0.0

Bug Fixes

  • handle text with <script> in the script element (#444) (9949d82)

3.1.0 (2022-01-08)

Features

  • add possibility to extend default minimize options (#414) (0fa36af)

3.0.1 (2021-11-02)

Bug Fixes

3.0.0 (2021-10-21)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0

Features

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-loader since your current version.


Updates postcss-loader from 3.0.0 to 7.0.2

Release notes

Sourced from postcss-loader's releases.

v7.0.2

7.0.2 (2022-11-29)

Bug Fixes

  • support ESM version of postcss.config.js and postcss.config.mjs (#614) (955085f)

v7.0.1

7.0.1 (2022-07-11)

Bug Fixes

  • unexpected failing on CSS syntax error (#593) (888d72e)

v7.0.0

7.0.0 (2022-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

v6.2.1

6.2.1 (2021-11-26)

Bug Fixes

v6.2.0

6.2.0 (2021-10-13)

Features

v6.1.1

6.1.1 (2021-07-01)

Bug Fixes

  • do not swallow exception from postcss (2eec42b)

v6.1.0

6.1.0 (2021-06-10)

... (truncated)

Changelog

Sourced from postcss-loader's changelog.

7.0.2 (2022-11-29)

Bug Fixes

  • support ESM version of postcss.config.js and postcss.config.mjs (#614) (955085f)

7.0.1 (2022-07-11)

Bug Fixes

  • unexpected failing on CSS syntax error (#593) (888d72e)

7.0.0 (2022-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

6.2.1 (2021-11-26)

Bug Fixes

6.2.0 (2021-10-13)

Features

6.1.1 (2021-07-01)

Bug Fixes

  • do not swallow exception from postcss (2eec42b)

6.1.0 (2021-06-10)

Features

  • allow String value for the "implementation" option (0d342b1)

6.0.0 (2021-06-10)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for postcss-loader since your current version.


Updates source-map-loader from 0.2.4 to 4.0.1

Release notes

Sourced from source-map-loader's releases.

v4.0.1

4.0.1 (2022-10-07)

Bug Fixes

  • logic when sourceRoot contains absolute URL (e724a1f)

v4.0.0

4.0.0 (2022-06-13)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

v3.0.2

3.0.2 (2022-10-21)

Bug Fixes

  • logic when sourceRoot contains absolute URL (#191) (625cc81)

v3.0.1

3.0.1 (2022-01-03)

Chore

  • update source-map-js

v3.0.0

3.0.0 (2021-05-21)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0

v2.0.2

2.0.2 (2021-05-17)

Bug Fixes

  • don't ignore source file when sourceContent contains null (#148) (8ec2b86)

v2.0.1

2.0.1 (2021-02-10)

... (truncated)

Changelog

Sourced from source-map-loader's changelog.

4.0.1 (2022-10-07)

Bug Fixes

  • logic when sourceRoot contains absolute URL (e724a1f)

4.0.0 (2022-06-13)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0

3.0.1 (2022-01-03)

Chore

  • update source-map-js

3.0.0 (2021-05-21)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 12.13.0

2.0.2 (2021-05-17)

Bug Fixes

  • don't ignore source file when sourceContent contains null (#148) (8ec2b86)

2.0.1 (2021-02-10)

Bug Fixes

  • switch from source-map to source-map-js package (perf increase)
  • fix watch with invalid sourceURL

2.0.0 (2020-12-24)

⚠ BREAKING CHANGES

  • minimum supported webpack version is 5

1.1.3 (2020-12-04)

... (truncated)

Commits
  • dc5c08d chore(release): 4.0.1
  • e724a1f fix: logic when sourceRoot contains absolute URL
  • 3094e6a chore: update dependencies to the latest version (#187)
  • cd593a8 chore: update commitlint action (#185)
  • 3cc129d chore: run cancel workflow on pull request (#181)
  • c7b6040 chore: upgrade dependencies to the latest version (#183)
  • 7c8bf9b chore: update jest to the latest version (#182)
  • 28b1c77 ci: update github workflow security (#184)
  • 687db56 ci: add job to cancel previous runs (#179)
  • b8d2538 chore: update-dependencies to the latest version (#177)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for source-map-loader since your current version.


Updates style-loader from 0.23.1 to 3.3.1

Release notes

Sourced from style-loader's releases.

v3.3.1

3.3.1 (2021-10-21)

Bug Fixes

v3.3.0

3.3.0 (2021-09-21)

Features

  • added support for supports(), layer() and media from @import at-rules (b9a600c)
  • allow to pass options to insert function through style.use() (#535) (f8ef63b)

v3.2.1

3.2.1 (2021-07-20)

Bug Fixes

  • added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

v3.2.0

3.2.0 (2021-07-20)

Features

Bug Fixes

  • added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

v3.1.0

3.1.0 (2021-07-12)

Features

  • allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
  • allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

... (truncated)

Changelog

Sourced from style-loader's changelog.

3.3.1 (2021-10-21)

Bug Fixes

3.3.0 (2021-09-21)

Features

  • added support for supports(), layer() and media from @import at-rules (b9a600c)
  • allow to pass options to insert function through style.use() (#535) (f8ef63b)

3.2.1 (2021-07-20)

Bug Fixes

  • added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

3.2.0 (2021-07-20)

Features

Bug Fixes

  • added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

3.1.0 (2021-07-12)

Features

  • allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
  • allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

3.0.0 (2021-06-24)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for style-loader since your current version.


Updates url-loader from 1.1.2 to 4.1.1

Release notes

Sourced from url-loader's releases.

v4.1.1

4.1.1 (2020-10-09)

Chore

  • update schema-utils

v4.1.0

4.1.0 (2020-04-08)

Features

  • the mimetype option can be Boolean
  • added the encoding option
  • added the generator option

v4.0.0

4.0.0 (2020-03-17)

⚠ BREAKING CHANGES

  • deps: migrate on mime-types package, some rare types may have other mimetype

v3.0.0

3.0.0 (2019-11-26)

BREAKING CHANGES

  • minimum required nodejs version is 10.13.0
  • rename the esModules option to esModule
  • switch to ES modules by default (the option esModule is true by default)

v2.3.0