Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

[Snyk] Upgrade css-loader from 6.8.1 to 7.1.2 #9

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

nerdy-tech-com-gitub
Copy link
Owner

snyk-top-banner

Snyk has created this PR to upgrade css-loader from 6.8.1 to 7.1.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


⚠️ Warning: This PR contains major version upgrade(s), and may be a breaking change.

  • The recommended version is 8 versions ahead of your current version.

  • The recommended version was released on 5 months ago.

Issues fixed by the recommended upgrade:

Issue Score Exploit Maturity
high severity Denial of Service (DoS)
SNYK-JS-HTTPPROXYMIDDLEWARE-8229906
386 Proof of Concept
medium severity Cross-site Scripting (XSS)
SNYK-JS-COOKIE-8163060
386 No Known Exploit
medium severity Cross-site Scripting (XSS)
SNYK-JS-SERIALIZEJAVASCRIPT-6147607
386 Proof of Concept
Release notes
Package name: css-loader
  • 7.1.2 - 2024-05-22

    7.1.2 (2024-05-22)

    Bug Fixes

    • keep order of @ imports with the webpackIgnore comment (#1600) (76757ef)
  • 7.1.1 - 2024-04-10

    7.1.1 (2024-04-10)

    Bug Fixes

    • automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)
  • 7.1.0 - 2024-04-08

    7.1.0 (2024-04-08)

    Features

    • added the getJSON option to output CSS modules mapping (#1577) (af834b4)
  • 7.0.0 - 2024-04-04

    7.0.0 (2024-04-04)

    ⚠ BREAKING CHANGES

    • The modules.namedExport option is true by default if you enable the esModule option

    Migration guide:

    Before:

    import style from "./style.css";

    console.log(style.myClass);

    After:

    import * as style from "./style.css";

    console.log(style.myClass);

    Typescript migration:

    Before:

    declare module '*.module.css' {
      const classes: { [key: string]: string };
      export default classes;
    }

    After:

    declare module '*.module.css' {
      const classes: { [key: string]: string };
      export = classes;
    }
    • The modules.exportLocalsConvention has the value as-is when the modules.namedExport option is true and you don't specify a value
    • Minimum supported webpack version is 5.27.0
    • Minimum supported Node.js version is 18.12.0

    Features

    • The modules.namedExports option works fine with any modules.exportLocalsConvention values (f96a110)
    • Added dashed variants for the modules.exportLocalsConvention options (40e1668)
  • 6.11.0 - 2024-04-03

    6.11.0 (2024-04-03)

    Features

    Bug Fixes

    • do not break @ scope at-rule without params (#1581) (e022e3b)
  • 6.10.0 - 2024-01-30

    6.10.0 (2024-01-30)

    Features

    • add @ rspack/core as an optional peer dependency (#1568) (3924679)
    • pass the resourceQuery and resourceFragment to the auto and mode callback (#1569) (d641c4d)
    • support named exports with any characters (6f43929)
  • 6.9.1 - 2024-01-18

    6.9.1 (2024-01-18)

    Bug Fixes

    • css nesting support
    • @ scope at-rule support
  • 6.9.0 - 2024-01-09

    6.9.0 (2024-01-09)

    Features

    • updated generateExportEntry to expose node details (#1556) (05002f3)

    Bug Fixes

  • 6.8.1 - 2023-05-28

    6.8.1 (2023-05-28)

    Bug Fixes

    • use cause for original errors and warnings (#1526) (ae3d8ae)
from css-loader GitHub release notes

Important

  • Warning: This PR contains a major version upgrade, and may be a breaking change.
  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade css-loader from 6.8.1 to 7.1.2.

See this package in npm:
css-loader

See this project in Snyk:
https://app.snyk.io/org/nerds-github/project/aa77fd79-7d27-4ab0-9d41-5dd117531784?utm_source=github&utm_medium=referral&page=upgrade-pr
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants