covid-19-stats
covid-19-stats copied to clipboard
Bump json5, react-scripts, webpack, webpack-dev-middleware and babel-loader
Bumps json5 to 2.2.3 and updates ancestor dependencies json5, react-scripts, webpack, webpack-dev-middleware and babel-loader. These dependencies need to be updated together.
Updates json5
from 2.1.1 to 2.2.3
Release notes
Sourced from json5's releases.
v2.2.3
- Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2
- Fix: Properties with the name
__proto__
are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).v2.2.1
- Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
v2.2.0
- New: Accurate and documented TypeScript declarations are now included. There is no need to install
@types/json5
. (#236, #244)v2.1.3 [code, diff]
v2.1.2
- Fix: Bump
minimist
tov1.2.5
. (#222)
Changelog
Sourced from json5's changelog.
v2.2.3 [code, diff]
- Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)
v2.2.2 [code, diff]
- Fix: Properties with the name
__proto__
are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).v2.2.1 [code, diff]
- Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)
v2.2.0 [code, diff]
- New: Accurate and documented TypeScript declarations are now included. There is no need to install
@types/json5
. (#236, #244)v2.1.3 [code, diff]
v2.1.2 [code, diff]
- Fix: Bump
minimist
tov1.2.5
. (#222)
Commits
c3a7524
2.2.394fd06d
docs: update CHANGELOG for v2.2.33b8cebf
docs(security): use GitHub security advisoriesf0fd9e1
docs: publish a security policy6a91a05
docs(template): bug -> bug report14f8cb1
2.2.210cc7ca
docs: update CHANGELOG for v2.2.27774c10
fix: add proto to objects and arraysedde30a
Readme: slight tweak to intro97286f8
Improve example in readme- Additional commits viewable in compare view
Updates react-scripts
from 3.4.0 to 5.0.1
Changelog
Sourced from react-scripts's changelog.
3.4.4 (2020-10-20)
v3.4.4 release bumps
resolve-url-loader
to a version for whichnpm audit
does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.Migrating from 3.4.3 to 3.4.4
Inside any created project that has not been ejected, run:
npm install --save --save-exact [email protected]
or
yarn add --exact [email protected]
3.4.3 (2020-08-12)
v3.4.3 release bumps
terser-webpack-plugin
to a version for whichnpm audit
does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.Migrating from 3.4.2 to 3.4.3
Inside any created project that has not been ejected, run:
npm install --save --save-exact [email protected]
or
yarn add --exact [email protected]
3.4.2 (2020-08-11)
v3.4.2 release bumps
webpack-dev-server
to a version for whichnpm audit
does not report a vulnerability. Note that this vulnerability did not affect Create React App projects, so this change is only necessary to satisfy auditing tools.Migrating from 3.4.1 to 3.4.2
Inside any created project that has not been ejected, run:
npm install --save --save-exact [email protected]
or
... (truncated)
Commits
19fa58d
Publish9802941
fix: webpack noise printed only if error or warning (#12245)2eef1d0
Update templates to use React 18createRoot
(#12220)221e511
Publish5614c87
Add support for Tailwind (#11717)20edab4
fix(webpackDevServer): disable overlay for warnings (#11413)3afbbc0
Update all dependencies (#11624)f5467d5
feat(eslint-config-react-app): support ESLint 8.x (#11375)c7627ce
Update webpack and dev server (#11646)544befe
Update package.json (#11597)- Additional commits viewable in compare view
Updates webpack
from 4.41.5 to 5.75.0
Release notes
Sourced from webpack's releases.
v5.75.0
Bugfixes
experiments.*
normalize tofalse
when opt-out- avoid
NaN%
- show the correct error when using a conflicting chunk name in code
- HMR code tests existance of
window
before trying to access it- fix
eval-nosources-*
actually exclude sources- fix race condition where no module is returned from processing module
- fix position of standalong semicolon in runtime code
Features
- add support for
@import
to extenal CSS when using experimental CSS in node- add
i64
support to the deprecated WASM implementationDeveloper Experience
- expose
EnableWasmLoadingPlugin
- add more typings
- generate getters instead of readonly properties in typings to allow overriding them
v5.74.0
Features
- add
resolve.extensionAlias
option which allows to alias extensions
- This is useful when you are forced to add the
.js
extension to imports when the file really has a.ts
extension (typescript +"type": "module"
)- add support for ES2022 features like static blocks
- add Tree Shaking support for
ProvidePlugin
Bugfixes
- fix persistent cache when some build dependencies are on a different windows drive
- make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
- remove left-over from debugging in TLA/async modules runtime code
- remove unneeded extra 1s timestamp offset during watching when files are actually untouched
- This sometimes caused an additional second build which are not really needed
- fix
shareScope
option forModuleFederationPlugin
- set
"use-credentials"
also for same origin scriptsPerformance
- Improve memory usage and performance of aggregating needed files/directories for watching
- This affects rebuild performance
Extensibility
- export
HarmonyImportDependency
for pluginsv5.73.0
... (truncated)
Commits
8241da7
5.75.0a91d923
Merge pull request #16458 from webpack/bugfix/semi4608b11
Merge pull request #16457 from webpack/tooling/updatedfdd0b0
Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback23b9a1c
Merge pull request #16167 from exposir/fixts6f2c5e8
Merge pull request #16257 from alexzhang1030/calc_deterministic_verbosef7f36ad
Merge pull request #16339 from Liamolucko/wasm-i64761a542
fix semicolon position2403a36
Merge pull request #16345 from ahabhgk/fix-eval-nosourcesc18203c
update tooling- Additional commits viewable in compare view
Updates webpack-dev-middleware
from 3.7.2 to 5.3.3
Release notes
Sourced from webpack-dev-middleware's releases.
v5.3.3
5.3.3 (2022-05-18)
Bug Fixes
v5.3.2
5.3.2 (2022-05-17)
Bug Fixes
v5.3.1
5.3.1 (2022-02-01)
Bug Fixes
v5.3.0
5.3.0 (2021-12-16)
Features
v5.2.2
5.2.2 (2021-11-17)
Chore
- update
schema-utils
package to4.0.0
versionv5.2.1
5.2.1 (2021-09-25)
- internal release, no visible changes and features
v5.2.0
5.2.0 (2021-09-24)
... (truncated)
Changelog
Sourced from webpack-dev-middleware's changelog.
5.3.3 (2022-05-18)
Bug Fixes
5.3.2 (2022-05-17)
Bug Fixes
5.3.1 (2022-02-01)
Bug Fixes
5.3.0 (2021-12-16)
Features
5.2.2 (2021-11-17)
Chore
- update
schema-utils
package to4.0.0
version5.2.1 (2021-09-25)
- internal release, no visible changes and features
5.2.0 (2021-09-24)
Features
5.1.0 (2021-09-09)
... (truncated)
Commits
f3c62b8
chore(release): 5.3.3eeb8aa8
fix: types forRequest
andResponse
(#1271)1a45388
chore(release): 5.3.2b8fb945
chore(deps): memfs force update (#1269)f88067d
chore: update deps and ci (#1260)7186318
chore(deps-dev): bump@commitlint/cli
57c50ef
ci: updatecheckout
,setup-node
, andcodecov
actions (#1267)840146a
chore(deps-dev): bump@babel/preset-env
10c12eb
chore(deps-dev): bump del from 6.0.0 to 6.1.0 (#1264)d35413f
chore(deps-dev): bump standard-version- Additional commits viewable in compare view
Updates babel-loader
from 8.0.6 to 8.3.0
Release notes
Sourced from babel-loader's releases.
v8.3.0
New features
- Pass external dependencies from Babel to Webpack by
@nicolo-ribaudo
in babel/babel-loader#971Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.5...v8.3.0
v8.2.5
What's Changed
- fix: respect
inputSourceMap
loader option by@alan-agius4
in babel/babel-loader#896New Contributors
@alan-agius4
made their first contribution in babel/babel-loader#896Full Changelog: https://github.com/babel/babel-loader/compare/v8.2.4...v8.2.5
v8.2.4
What's Changed
- doc(README.md): fix a broken markdown link by
@loveDstyle
in babel/babel-loader#919- Bump loader-utils to 2.x by
@stianjensen
in babel/babel-loader#931- Use md5 hashing for OpenSSL 3 by
@pathmapper
in babel/babel-loader#924Thanks
@loveDstyle
,@stianjensen
and@pathmapper
for your first PRs!8.2.3
This release fixes compatibility with Node.js 17
- Use md5 hash for caching on node v17 (babel/babel-loader#918)
Thanks
@Reptarsrage
!8.2.1
- Move
@ava/babel
todevDependencies
#881 (@jvasseur
)8.2.0
- Replace
mkdirp
withmake-dir
47958ca3857e489e450b27c6f3266375015cba82 (@JLHwung
)- Use async config loading when available d8cff97ff387ded0fc9b5cbc489228c96c5ab14a (
@the-spyke
)8.1.0
- docs(readme): fix typo #818 (
@frederickfogerty
)- docs(contributing): fix typo #821 (
@PatNeedham
)- Add schema validation #822 (
@ogonkov
)- Add supportsTopLevelAwait to caller #814 (
@nicolo-ribaudo
)- feat: expose webpack target via babel caller #826 (
@DylanPiercey
)- Bump deps for audit #834 (
@existentialism
)
Commits
9bf5652
8.3.080ab7d0
Update@babel/
dependencies493ac6c
Pass external dependencies from Babel to Webpack (#971)df28fe3
Fix broken main test (#950)0b338e4
update hash method so it doesn't fail on a fips enabled machine (#939)1f98d3c
8.2.5c622868
fix: respectinputSourceMap
loader option (#896)f7982c1
8.2.44bb9e21
Use md5 hashing for OpenSSL 3 (#924)247c94b
Bump loader-utils to 2.x (#931)- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) -
@dependabot use these labels
will set the current labels as the default for future PRs for this repo and language -
@dependabot use these reviewers
will set the current reviewers as the default for future PRs for this repo and language -
@dependabot use these assignees
will set the current assignees as the default for future PRs for this repo and language -
@dependabot use this milestone
will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the Security Alerts page.