Bump json5, babel-core and babel-loader

[dependabot[bot]]

Bumps json5 to 1.0.2 and updates ancestor dependencies json5, babel-core and babel-loader. These dependencies need to be updated together.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

• a62db1e 1.0.2
• e0c23fe docs: update CHANGELOG for v1.0.2
• 62a6540 fix: add proto to objects and arrays
• See full diff in compare view

Updates babel-core from 5.8.33 to 5.8.38

Commits

• 3ef6e59 v5.8.38
• 34b9a23 v5.8.36
• a271d6f remove traceur tests
• de9cf9f remove line-numbers
• 0dcb25b v5.8.35
• 9e24292 add old tag when publishing babel 5
• c34db0b Merge pull request #3237 from samwgoldman/declare-type-declare-interface-5.x
• 6cdd4d8 Merge pull request #3238 from samwgoldman/export-interface-5.x
• 8f0681d Add export interface Flow syntax support
• 2fda09c Add declare type and declare interface Flow syntax support
• Additional commits viewable in compare view

Updates babel-loader from 5.4.2 to 9.1.3

Release notes

Sourced from babel-loader's releases.

v9.1.3

Security dependency updates

• Bump http-cache-semantics from 4.1.0 to 4.1.1 by @​dependabot in babel/babel-loader#982
• Bump semver from 7.3.2 to 7.5.2 by @​dependabot in babel/babel-loader#993
• bump find-cache-dir to v4 by @​JLHwung in babel/babel-loader#995

New Contributors

• @​piwysocki made their first contribution in babel/babel-loader#981
• @​comoser made their first contribution in babel/babel-loader#897

Full Changelog: https://github.com/babel/babel-loader/compare/v9.1.2...v9.1.3

v9.1.2

9.1.1 was a broken release, it didn't include all the commits.

Dependencies updates

• Bump qs from 6.5.2 to 6.5.3 by @​dependabot in babel/babel-loader#977
• Bump json5 from 2.2.1 to 2.2.3 by @​dependabot in babel/babel-loader#980

Misc

• GitHub Workflows security hardening by @​sashashura in babel/babel-loader#976

New Contributors

• @​sashashura made their first contribution in babel/babel-loader#976

Full Changelog: https://github.com/babel/babel-loader/compare/v9.1.0...v9.1.2

v9.1.0

New features

• Pass external dependencies from Babel to Webpack by @​nicolo-ribaudo in babel/babel-loader#971

Full Changelog: https://github.com/babel/babel-loader/compare/v9.0.1...v9.1.0

v9.0.1

Bug Fixes

• remove "node:" builtin prefix by @​JLHwung in babel/babel-loader#970

Full Changelog: https://github.com/babel/babel-loader/compare/v9.0.0...v9.0.1

v9.0.0

What's Changed

• update hash method mechanism so it doesn't fail on a fips enabled machine by @​darmbrust in babel/babel-loader#939
• Require babel ^7.12.0 and Node.js >= 14.15.0 versions by @​JLHwung in babel/babel-loader#956
• Remove dependency on loader-utils and drop webpack 4 support by @​nied in babel/babel-loader#942

New Contributors

• @​darmbrust made their first contribution in babel/babel-loader#939
• @​nied made their first contribution in babel/babel-loader#942

... (truncated)

Changelog

Sourced from babel-loader's changelog.

Changelog

For changes in version v7.0.0 and up please go to release

Old Changelog

v6.4.1

🐛 Bug Fix

• Fixed reset of BABEL_ENV when options.forceEnv is used (#420) @​nikopavlica

v6.4.0

🚀 New Feature

• added metadata passing from babel to webpack, which is currently used by react-intl (#398) @​Ognian

v6.3.2

😢 Regression

• forceEnv was interfering with regular environment handling

v6.3.1

🐛 Bug Fix

• The new forceEnv options wasn't working as expected (#379) @​chrisvasz

v6.3.0

🚀 New Feature

• Add new config option forceEnv (#368) @​moimael

Allow to override BABEL_ENV/NODE_ENV at loader-level. Useful for isomorphic applications which have separate babel config for client and server.

🐛 Bug Fix

• Update loader-utils dependency to ^0.2.16 to fix compatibility with webpack 2 (#371) @​leonaves

💅 Polish

• Improve FS caching to do less sync calls which improves performance slightly (#375) @​akx

v6.2.10

Support for webpack 2.2-rc has been added in this release

... (truncated)

Commits

• b89dfbd 9.1.3
• 54fb781 Update caniuse
• 6f300f3 bump find-cache-dir to v4 (#995)
• 2fd1c0a Bump semver from 7.3.2 to 7.5.2 (#993)
• b3682fd Add more exhaustive example on customized-loader (#897)
• a797c3b ci: bump actions/checkout (#981)
• 170350e Bump http-cache-semantics from 4.1.0 to 4.1.1 (#982)
• 78bd0a1 Update README.md (#987)
• c049187 Bump webpack from 5.74.0 to 5.76.0 (#986)
• 0406d16 9.1.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the Security Alerts page.