Bump json5, @babel/core and html-webpack-plugin in /src/ui

[dependabot[bot]]

Bumps json5 to 1.0.2 and updates ancestor dependencies json5, @babel/core and html-webpack-plugin. These dependencies need to be updated together.

Updates json5 from 1.0.1 to 1.0.2

Release notes

Sourced from json5's releases.

v1.0.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295). This has been backported to v1. (#298)

Changelog

Sourced from json5's changelog.

Unreleased [code, diff]

v2.2.3 [code, diff]

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

... (truncated)

Commits

• a62db1e 1.0.2
• e0c23fe docs: update CHANGELOG for v1.0.2
• 62a6540 fix: add proto to objects and arrays
• See full diff in compare view

Updates @babel/core from 7.0.0 to 7.20.12

Release notes

Sourced from @​babel/core's releases.

v7.20.12 (2023-01-04)

Thanks @​cross19xx, @​JBYoshi and @​nmn for your first PRs!

:bug: Bug Fix

• babel-traverse
  • #15224 Fix TaggedTemplateLiteral evaluation (@​nmn)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
  • #15312 fix: delete this in static class properties initialization (@​SuperSodaSea)

:nail_care: Polish

• babel-traverse
  • #15313 Implement support for evaluating computed properties. (@​JBYoshi)

Committers: 5

• Jonathan Browne (@​JBYoshi)
• Kenneth Kwakye-Gyamfi (@​cross19xx)
• Naman Goel (@​nmn)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Tianlan Zhou (@​SuperSodaSea)

v7.20.11 (2022-12-23)

:eyeglasses: Spec Compliance

• babel-helper-module-transforms, babel-plugin-proposal-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs
  • #15290 Return rejected promise when stringify import specifier throws (@​SuperSodaSea)

:bug: Bug Fix

• babel-plugin-transform-block-scoping
  • #15309 Fix for binding shadowing outer var with loop closure (@​nicolo-ribaudo)

Committers: 2

• Nicolò Ribaudo (@​nicolo-ribaudo)
• Tianlan Zhou (@​SuperSodaSea)

v7.20.10 (2022-12-23)

:bug: Bug Fix

• babel-traverse
  • #15305 fix: guessExecutionStatusRelativeTo exception (@​liuxingbaoyu)

Committers: 2

• Babel Bot (@​babel-bot)
• @​liuxingbaoyu

v7.20.9 (2022-12-23)

:bug: Bug Fix

• babel-plugin-transform-block-scoping
  • #15303 fix: Do not throw exceptions when scope information is corrupted (@​liuxingbaoyu)

... (truncated)

Changelog

Sourced from @​babel/core's changelog.

v7.20.12 (2023-01-04)

:bug: Bug Fix

• babel-traverse
  • #15224 Fix TaggedTemplateLiteral evaluation (@​nmn)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-class-properties
  • #15312 fix: delete this in static class properties initialization (@​SuperSodaSea)

:nail_care: Polish

• babel-traverse
  • #15313 Implement support for evaluating computed properties. (@​JBYoshi)

v7.20.11 (2022-12-23)

:eyeglasses: Spec Compliance

• babel-helper-module-transforms, babel-plugin-proposal-dynamic-import, babel-plugin-transform-modules-amd, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs
  • #15290 Return rejected promise when stringify import specifier throws (@​SuperSodaSea)

:bug: Bug Fix

• babel-plugin-transform-block-scoping
  • #15309 Fix for binding shadowing outer var with loop closure (@​nicolo-ribaudo)

v7.20.10 (2022-12-23)

:bug: Bug Fix

• babel-traverse
  • #15305 fix: guessExecutionStatusRelativeTo exception (@​liuxingbaoyu)

v7.20.9 (2022-12-23)

:bug: Bug Fix

• babel-plugin-transform-block-scoping
  • #15303 fix: Do not throw exceptions when scope information is corrupted (@​liuxingbaoyu)

v7.20.8 (2022-12-22)

:bug: Bug Fix

• babel-plugin-transform-block-scoping
  • #15301 fix: transform-block-scoping accesses properties of null (@​liuxingbaoyu)
• babel-plugin-proposal-class-properties, babel-traverse
  • #15294 Properly transpile exported classes that shadowed builtins (@​JLHwung)

v7.20.7 (2022-12-22)

:eyeglasses: Spec Compliance

• babel-helper-member-expression-to-functions, babel-helper-replace-supers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes
  • #15223 fix: Deleting super property should throw (@​SuperSodaSea)
• babel-helpers, babel-plugin-proposal-class-properties, babel-plugin-transform-classes, babel-plugin-transform-object-super
  • #15241 fix: Throw correct error types from sed ant class TDZ helpers (@​SuperSodaSea)

:bug: Bug Fix

• babel-parser, babel-plugin-transform-typescript
  • #15209 fix: Support auto accessors with TypeScript annotations (@​liuxingbaoyu)
• babel-traverse
  • #15287 Fix .parentPath after rename in SwitchCase (@​nicolo-ribaudo)

... (truncated)

Commits

• eb71c63 v7.20.12
• 6e9f7b7 fix: prototype pollution from json5 (#15316)
• d414940 v7.20.7
• 6757a60 Rewrite transform-block-scoping plugin (#15200)
• 362451b chore: Enable eslint rule no-unnecessary-type-assertion (#15260)
• e5e1369 fix: Computed properties should keep original definition order (#15232)
• 29a97b8 v7.20.5
• f6546d7 Bump typescript to 4.9.3 (#15202)
• 5f19f62 Bump babel deps (#15187)
• 12a58cb v7.20.2
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for @​babel/core since your current version.

Updates html-webpack-plugin from 3.2.0 to 5.5.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.0 (2021-10-25)

Features

• Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

• update terser (9c7fba0

5.3.2 (2021-06-22)

Bug Fixes

• update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

• remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

• allow to modify the interpolation options in webpack config (d654f5b)
• drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

• improve ssr (73d2a66)

5.1.0 (2021-02-12)

Features

• omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598

5.0.0 (2021-02-03)

... (truncated)

Commits

• 873d75b chore(release): 5.5.0
• ddeb774 chore: update examples
• 1e42625 feat: Support type=module via scriptLoading option
• 7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
• 79be779 [chore] changes actions to run on pull_requests
• b7e5859 [chore] fixes CI to avoid race conditions
• 48131d3 chore(release): 5.4.0
• 16a841a [chore] rebuild examples
• 3bb7c17 Update index.js
• e38ac97 Update index.js
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.