srraf

srraf copied to clipboard

Bumps [json5](https://github.com/json5/json5) and [postcss-modules](https://github.com/css-modules/postcss-modules). These dependencies needed to be updated together. Updates `json5` from 2.1.0 to 2.2.3 Release notes Sourced from json5's releases. v2.2.3 Fix: [email protected] is now the 'latest'...

dependabot[bot]

Bumps [decode-uri-component](https://github.com/SamVerschueren/decode-uri-component) from 0.2.0 to 0.2.2. Release notes Sourced from decode-uri-component's releases. v0.2.2 Prevent overwriting previously decoded tokens 980e0bf https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2 v0.2.1 Switch to GitHub workflows 76abc93 Fix issue where decode...

dependabot[bot]

Bumps [loader-utils](https://github.com/webpack/loader-utils) and [postcss-modules](https://github.com/css-modules/postcss-modules). These dependencies needed to be updated together. Updates `loader-utils` from 0.2.17 to 1.4.1 Release notes Sourced from loader-utils's releases. v1.4.1 1.4.1 (2022-11-07) Bug Fixes security problem...

dependabot[bot]

Bumps [css-what](https://github.com/fb55/css-what) from 2.1.2 to 2.1.3. Commits 2db00ca 2.1.3 dc51092 fix(css-selectors): extend regex to include superscript in range, fix #27 (#28) a5f1991 Test on node LTS See full diff in...

dependabot[bot]

Bumps [path-parse](https://github.com/jbgutierrez/path-parse) from 1.0.6 to 1.0.7. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.7.1 to 2.8.9. Changelog Sourced from hosted-git-info's changelog. 2.8.9 (2021-04-07) Bug Fixes backport regex fix from #76 (29adfe5), closes #84 2.8.8 (2020-02-29) Bug Fixes #61 & #65...

dependabot[bot]

Bumps [lodash](https://github.com/lodash/lodash) from 4.17.11 to 4.17.21. Commits f299b52 Bump to v4.17.21 c4847eb Improve performance of toNumber, trim and trimEnd on large input strings 3469357 Prevent command injection through _.template's variable...

dependabot[bot]

Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.7. Commits c74c8af 1.3.7 024b8b5 update deps, add linting 032fbaf Use Object.create(null) to avoid default object property hazards 2da9039 1.3.6 cfea636 better git push script,...

dependabot[bot]

Bumps [lodash.merge](https://github.com/lodash/lodash) from 4.6.1 to 4.6.2. Commits See full diff in compare view [](https://help.github.com/articles/configuring-automated-security-fixes) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bumps [mixin-deep](https://github.com/jonschlinkert/mixin-deep) from 1.3.1 to 1.3.2. Commits 754f0c2 1.3.2 90ee1fa ensure keys are valid when mixing in values See full diff in compare view Maintainer changes This version was pushed...

dependabot[bot]