resolve-url-loader icon indicating copy to clipboard operation
resolve-url-loader copied to clipboard

update dependencies

Open bholloway opened this issue 3 years ago • 8 comments

Fixes #226

bholloway avatar Oct 14 '22 01:10 bholloway

Webpack 4 tests are failing. Looks like we are unable to use loader-utils@3 due to getOptions() being removed.

See discussion.

bholloway avatar Oct 14 '22 04:10 bholloway

One possible solution here is to merge just the 2nd commit which inlines loaderUtils.isUrlRequest() but not update any dependencies.

That doesn't fix resolve-url-loader but would allow users with any webpack@5 project to make a local dependency override and use loaderUtils@3 without breaking functionality.

bholloway avatar Oct 14 '22 08:10 bholloway

Hello @bholloway, they apparently backported a fix to all their major version, can we just get the hotfix that doesn't suppress options ?

Choose your weapon: https://github.com/webpack/loader-utils/releases

Proposed update : "loader-utils": "^2.0.4"

and nothing else is needed.

mmalka avatar Dec 01 '22 14:12 mmalka

I've proposed a fix for version 3 in #229.

orien avatar Dec 02 '22 01:12 orien

looking again at this now

bholloway avatar Dec 02 '22 05:12 bholloway

The resolve-url-loader constraint in version 4 and version 5 already allows downstream users to upgrade to a patched version of loader-utlis.

Version 5.0.0 allows loader-utils v2.0.4: https://github.com/bholloway/resolve-url-loader/blob/5.0.0/packages/resolve-url-loader/package.json#L40

Version 4.0.0 allows loader-utils v2.0.4:https://github.com/bholloway/resolve-url-loader/blob/4.0.0/packages/resolve-url-loader/package.json#L40

I don't think there's any urgency to release changes to these versions.

orien avatar Dec 02 '22 06:12 orien

Hmm yes good point @orien

bholloway avatar Dec 02 '22 06:12 bholloway

Current state of this change is that

  1. its not strictly necessary since vulnerabilities have been solved
  2. there is some CI issues because tests - probably because I have selected old Sass with old Node and the Node LTS has moved forward a long way

I will put this on hold and come back to it later but (2) might block any later work to update dependencies

bholloway avatar Dec 02 '22 07:12 bholloway