Bump json5, babel-loader, copy-webpack-plugin, css-loader, html-webpack-plugin, less-loader, mini-css-extract-plugin, style-loader, url-loader, webpack and webpack-cli

[dependabot[bot]]

Bumps json5 to 2.2.2 and updates ancestor dependencies json5, babel-loader, copy-webpack-plugin, css-loader, html-webpack-plugin, less-loader, mini-css-extract-plugin, style-loader, url-loader, webpack and webpack-cli. These dependencies need to be updated together.

Updates json5 from 2.1.0 to 2.2.2

Release notes

Sourced from json5's releases.

v2.2.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

• Fix: Bump minimist to v1.2.5. (#222)

v2.1.1

• New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)
• Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)
• Fix: Spelling mistakes have been fixed. (#196)

Changelog

Sourced from json5's changelog.

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

• Fix: Bump minimist to v1.2.5. (#222)

v2.1.1 [code, diff]

• New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)
• Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)
• Fix: Spelling mistakes have been fixed. (#196)

Commits

• 14f8cb1 2.2.2
• 10cc7ca docs: update CHANGELOG for v2.2.2
• 7774c10 fix: add proto to objects and arrays
• edde30a Readme: slight tweak to intro
• 97286f8 Improve example in readme
• d720b4f Improve readme (e.g. explain JSON5 better!) (#291)
• 910ce25 docs: fix spelling of Aseem
• 2aab4dd test: require tap as t in cli tests
• 6d42686 test: remove mocha syntax from tests
• 4798b9d docs: update installation and usage for modules
• Additional commits viewable in compare view

Updates babel-loader from 8.0.6 to 8.3.0

Release notes

Sourced from babel-loader's releases.

v8.3.0

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in babel/babel-loader#971

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v8.3.0

v8.2.5

What's Changed

• fix: respect inputSourceMap loader option by @​alan-agius4 in babel/babel-loader#896

New Contributors

• @​alan-agius4 made their first contribution in babel/babel-loader#896

Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.4...v8.2.5

v8.2.4

What's Changed

• doc(README.md): fix a broken markdown link by @​loveDstyle in babel/babel-loader#919
• Bump loader-utils to 2.x by @​stianjensen in babel/babel-loader#931
• Use md5 hashing for OpenSSL 3 by @​pathmapper in babel/babel-loader#924

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

• Use md5 hash for caching on node v17 (babel/babel-loader#918)

Thanks @​Reptarsrage!

8.2.1

• Move @ava/babel to devDependencies #881 (@​jvasseur)

8.2.0

• Replace mkdirp with make-dir 47958ca3857e489e450b27c6f3266375015cba82 (@​JLHwung)
• Use async config loading when available d8cff97ff387ded0fc9b5cbc489228c96c5ab14a (@​the-spyke)

8.1.0

• docs(readme): fix typo #818 (@​frederickfogerty)
• docs(contributing): fix typo #821 (@​PatNeedham)
• Add schema validation #822 (@​ogonkov)
• Add supportsTopLevelAwait to caller #814 (@​nicolo-ribaudo)
• feat: expose webpack target via babel caller #826 (@​DylanPiercey)
• Bump deps for audit #834 (@​existentialism)

Commits

• 9bf5652 8.3.0
• 80ab7d0 Update @babel/ dependencies
• 493ac6c Pass external dependencies from Babel to Webpack (#971)
• df28fe3 Fix broken main test (#950)
• 0b338e4 update hash method so it doesn't fail on a fips enabled machine (#939)
• 1f98d3c 8.2.5
• c622868 fix: respect inputSourceMap loader option (#896)
• f7982c1 8.2.4
• 4bb9e21 Use md5 hashing for OpenSSL 3 (#924)
• 247c94b Bump loader-utils to 2.x (#931)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.

Updates copy-webpack-plugin from 5.0.3 to 11.0.0

Release notes

Sourced from copy-webpack-plugin's releases.

v11.0.0

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0

v10.2.4

10.2.4 (2022-01-31)

Bug Fixes

• types (#666) (a1c2308)

v10.2.3

10.2.3 (2022-01-29)

Bug Fixes

• async to support (fd095fb)

v10.2.2

10.2.2 (2022-01-28)

Bug Fixes

• types (#664) (f58470e)

v10.2.1

10.2.1 (2022-01-20)

Bug Fixes

• types (#661) (324aecb)

v10.2.0

10.2.0 (2021-12-16)

Features

• removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#654) (5901006)

v10.1.0

10.1.0 (2021-12-10)

... (truncated)

Changelog

Sourced from copy-webpack-plugin's changelog.

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0

build

• drop node v12 (#691) (675c676)

10.2.4 (2022-01-31)

Bug Fixes

• types (#666) (a1c2308)

10.2.3 (2022-01-29)

Bug Fixes

• async to support (fd095fb)

10.2.2 (2022-01-28)

Bug Fixes

• types (#664) (f58470e)

10.2.1 (2022-01-20)

Bug Fixes

• types (#661) (324aecb)

10.2.0 (2021-12-16)

Features

• removed cjs wrapper and generated types in commonjs format (export = and namespaces used in types), now you can directly use exported types (#654) (5901006)

10.1.0 (2021-12-10)

Features

... (truncated)

Commits

• f3b2c24 chore(release): 11.0.0
• 8424ca8 chore(deps): regenerate lock file (#693)
• 675c676 build: drop node v12 (#691)
• a2b1f19 chore: update gitub actions (#692)
• 238c062 chore: upgrade dependencies to the latest version (#688)
• e27006e ci: remove node v17 (#687)
• e50d708 chore: add node 18 to workflow (#686)
• f1a91e6 ci: don't install webpack again (#680)
• 64cf06f docs: add path string to options signature (#683)
• 4b18a6b docs: improve readme
• Additional commits viewable in compare view

Updates css-loader from 2.1.1 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

• remove sourceURL from emitted CSS (#1487) (962924c)

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

• css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

• defaultGetLocalIdent export (#1427) (74dac1e)

v6.7.0

6.7.0 (2022-03-04)

Features

• re-export defaultGetLocalIdent (#1423) (207cf36)

v6.6.0

6.6.0 (2022-02-02)

Features

• added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

• regression with unicode characters in locals (b7a8441)
• runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

• remove sourceURL from emitted CSS (#1487) (962924c)

6.7.2 (2022-11-13)

Bug Fixes

• css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

• defaultGetLocalIdent export (#1427) (74dac1e)

6.7.0 (2022-03-04)

Features

• re-export defaultGetLocalIdent (#1423) (207cf36)

6.6.0 (2022-02-02)

Features

• added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

• regression with unicode characters in locals (b7a8441)
• runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

• support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits

• ef749f2 chore(release): 6.7.3
• 36fb945 chore: fix cspell
• 962924c fix: remove sourceURL from emitted CSS (#1487)
• 3f3f302 chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)
• 04ca713 chore: update dependencies to the latest version (#1485)
• 9449827 chore: update styfle/cancel-workflow-action (#1484)
• 6c67af8 chore: add cSpell to check spelling issues (#1482)
• 239b9ac chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)
• 394d200 chore(release): 6.7.2
• 2f4c273 fix: css modules generation with inline syntax (#1480)
• Additional commits viewable in compare view

Updates html-webpack-plugin from 3.2.0 to 5.5.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.0 (2021-10-25)

Features

• Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

• update terser (9c7fba0

5.3.2 (2021-06-22)

Bug Fixes

• update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

• remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

• allow to modify the interpolation options in webpack config (d654f5b)
• drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

• improve ssr (73d2a66)

5.1.0 (2021-02-12)

Features

• omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598

5.0.0 (2021-02-03)

... (truncated)

Commits

• 873d75b chore(release): 5.5.0
• ddeb774 chore: update examples
• 1e42625 feat: Support type=module via scriptLoading option
• 7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
• 79be779 [chore] changes actions to run on pull_requests
• b7e5859 [chore] fixes CI to avoid race conditions
• 48131d3 chore(release): 5.4.0
• 16a841a [chore] rebuild examples
• 3bb7c17 Update index.js
• e38ac97 Update index.js
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.

Updates less-loader from 5.0.0 to 11.1.0

Release notes

Sourced from less-loader's releases.

v11.1.0

11.1.0 (2022-10-06)

Features

• allow to extend conditionNames (#488) (43cd20c)

v11.0.0

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0

v10.2.0

10.2.0 (2021-10-18)

Features

• use webpack logger for logging (#444) (239c737)

v10.1.0

10.1.0 (2021-10-11)

Features

• add link field in schema (#429) (8580731)

Bug Fixes

• only call addDependency on absolute paths (fa11ce7)

v10.0.1

10.0.1 (2021-07-02)

Bug Fixes

• memory leak (#426) (d74f740)

v10.0.0

10.0.0 (2021-06-17)

⚠ BREAKING CHANGES

... (truncated)

Changelog

Sourced from less-loader's changelog.

11.1.0 (2022-10-06)

Features

• allow to extend conditionNames (#488) (43cd20c)

11.0.0 (2022-05-17)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0

10.2.0 (2021-10-18)

Features

• use webpack logger for logging (#444) (239c737)

10.1.0 (2021-10-11)

Features

• add link field in schema (#429) (8580731)

Bug Fixes

• only call addDependency on absolute paths (fa11ce7)

10.0.1 (2021-07-02)

Bug Fixes

• memory leak (#426) (d74f740)

10.0.0 (2021-06-17)

⚠ BREAKING CHANGES

• less.webpackLoaderContext was removed, please use pluginManager.webpackLoaderContext

Bug Fixes

... (truncated)

Commits

• 21caa3e chore(release): 11.1.0
• 43cd20c feat: allow to extend conditionNames (#488)
• c1aa4f5 chore: update dependencies to the latest version (#487)
• 2dcfe42 chore: update commitlint action (#486)
• 60d6a29 chore: run cancel workflow on pull request (#485)
• 4e81ee0 chore: update jest to the latest version (#483)
• 965f5d8 ci: update github workflow security permissions (#482)
• 454e187 chore: upgrade dependencies to the latest version (#481)
• bb799d1 ci: add job to cancel previous runs (#480)
• d292548 chore: update dependencies to the latest version (#479)
• Additional commits viewable in compare view

Updates mini-css-extract-plugin from 0.7.0 to 2.7.2

Release notes

Sourced from mini-css-extract-plugin's releases.

v2.7.2

2.7.2 (2022-12-06)

Bug Fixes

• don't crash in web workers (#1004) (4d98d4b)

v2.7.1

2.7.1 (2022-11-29)

Bug Fixes

• preserve order of link tags on HMR (#982) (6ea0922)

v2.7.0

2.7.0 (2022-11-16)

Features

• add function support for locals (loader) (#985) (65519d0)

v2.6.1

2.6.1 (2022-06-15)

Bug Fixes

• do not attempt hot reloading when emit is false (#953) (b426f04)

v2.6.0

2.6.0 (2022-03-03)

Features

• added baseUri option support (from entry options) (#915) (6004d95)

v2.5.3

2.5.3 (2022-01-25)

Bug Fixes

• types (#903) (6650691)

v2.5.2

2.5.2 (2022-01-17)

... (truncated)

Changelog

Sourced from mini-css-extract-plugin's changelog.

2.7.2 (2022-12-06)

Bug Fixes

• don't crash in web workers (#1004) (4d98d4b)

2.7.1 (2022-11-29)

Bug Fixes

• preserve order of link tags on HMR (#982) (6ea0922)

2.7.0 (2022-11-16)

Features

• add function support for locals (loader) (#985) (65519d0)

2.6.1 (2022-06-15)

Bug Fixes

• do not attempt hot reloading when emit is false (#953) (b426f04)

2.6.0 (2022-03-03)

Features

• added baseUri option support (from entry options) (#915) (6004d95)

2.5.3 (2022-01-25)

Bug Fixes

• types (#903) (6650691)

2.5.2 (2022-01-17)

Bug Fixes

• types (dfb9afd)

2.5.1 (2022-01-17)

... (truncated)

Commits

• b616093 chore(release): 2.7.2
• 4d98d4b fix: don't crash in web workers (#1004)
• 5ef989b chore(deps): bump minimist from 1.2.5 to 1.2.6 (#928)
• cd7d933 chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#993)
• 9178a0c chore: update dependencies to the latest version (#1003)
• 7053ce2 chore(release): 2.7.1
• 82ed663 refactor: fix compatibility with old browsers (#1000)
• 7585663 chore(deps): update (#999)
• 6ea0922 fix: preserve order of link tags on HMR (#982)
• 2633446 chore: update styfle/cancel-workflow-action (#996)
• Additional commits viewable in compare view

Updates style-loader from 0.23.1 to 3.3.1

Release notes

Sourced from style-loader's releases.

v3.3.1

3.3.1 (2021-10-21)

Bug Fixes

• small perf improvement (#544) (610524e)

v3.3.0

3.3.0 (2021-09-21)

Features

• added support for supports(), layer() and media from @import at-rules (b9a600c)
• allow to pass options to insert function through style.use() (#535) (f8ef63b)

v3.2.1

3.2.1 (2021-07-20)

Bug Fixes

• added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

v3.2.0

3.2.0 (2021-07-20)

Features

• add link field in schema (#525) (7ed3456)

Bug Fixes

• added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

v3.1.0

3.1.0 (2021-07-12)

Features

• allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
• allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

... (truncated)

Changelog

Sourced from style-loader's changelog.

3.3.1 (2021-10-21)

Bug Fixes

• small perf improvement (#544) (610524e)

3.3.0 (2021-09-21)

Features

• added support for supports(), layer() and media from @import at-rules (b9a600c)
• allow to pass options to insert function through style.use() (#535) (f8ef63b)

3.2.1 (2021-07-20)

Bug Fixes

• added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

3.2.0 (2021-07-20)

Features

• add link field in schema (#525) (7ed3456)

Bug Fixes

• added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

3.1.0 (2021-07-12)

Features

• allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)
• allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

• reduce runtime (#519) (8a26186)
• reduce runtime when you use custom options (#520) (21c80c8)

3.0.0 (2021-06-24)

... (truncated)

Commits

• 4663416 chore(release): 3.3.1
• 610524e fix: small perf improvement (#544)
• c799ecc chore(release): 3.3.0
• b47718a test: update (#542)
• 43bede4 refactor: code (#541)
• b9a600c feat: added support for @supports, @layer and @media from @import at-...
• 74fa1cf chore(deps): update (#539)
• cdf0ba7 refactor: code
• caf66a0 chore(deps): update
• f8ef63b feat: allow to pass options to insertDescription has been truncated