Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2023

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, @storybook/addon-storysource, @storybook/svelte, babel-loader, css-loader, sass-loader, style-loader, svelte-loader and webpack. These dependencies need to be updated together.

Updates json5 from 2.1.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

v2.2.0

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

  • Fix: Bump minimist to v1.2.5. (#222)
Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

v2.2.0 [code, diff]

  • New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

  • Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

  • Fix: Bump minimist to v1.2.5. (#222)
Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates @storybook/addon-storysource from 5.2.8 to 6.5.15

Release notes

Sourced from @​storybook/addon-storysource's releases.

v6.5.15

Bug Fixes

  • Support Angular 15.0.4 #20287
  • CLI: execute automigrations when pressing enter in the prompts #20208

Maintenance

  • Ember: Remove global Ember usage #17843

v6.5.15-alpha.1

Bug Fixes

  • Support Angular 15.0.4 #20287
  • CLI: execute automigrations when pressing enter in the prompts #20208

v6.5.15-alpha.0

Maintenance

  • Ember: Remove global Ember usage #17843

v6.5.14

Bug Fixes

  • Angular: Fix "webpack_require.nmd is not a function issue" in Angular 15 #20043
  • CLI/React native: Fix addons template to import register instead of manager #19620

Maintenance

  • Core: Patch preview-web and refs to support React Native #19975

Dependency Upgrades

  • Upgrade loader-utils to 2.0.4 in storysource and source-loader #19891

v6.5.14-alpha.2

Bug Fixes

  • Angular: Fix "webpack_require.nmd is not a function issue" in Angular 15 #20043

v6.5.14-alpha.1

Maintenance

  • Core: Patch preview-web and refs to support React Native #19975

v6.5.14-alpha.0

Bug Fixes

  • CLI/React native: Fix addons template to import register instead of manager #19620

... (truncated)

Changelog

Sourced from @​storybook/addon-storysource's changelog.

6.5.15 (December 20, 2022)

Bug Fixes

  • Support Angular 15.0.4 #20287
  • CLI: execute automigrations when pressing enter in the prompts #20208

Maintenance

  • Ember: Remove global Ember usage #17843

6.5.15-alpha.1 (December 20, 2022)

Bug Fixes

  • Support Angular 15.0.4 #20287
  • CLI: execute automigrations when pressing enter in the prompts #20208

6.5.15-alpha.0 (December 12, 2022)

Maintenance

  • Ember: Remove global Ember usage #17843

6.5.14 (December 2, 2022)

Bug Fixes

  • Angular: Fix "webpack_require.nmd is not a function issue" in Angular 15 #20043
  • CLI/React native: Fix addons template to import register instead of manager #19620

Maintenance

  • Core: Patch preview-web and refs to support React Native #19975

Dependency Upgrades

  • Upgrade loader-utils to 2.0.4 in storysource and source-loader #19891

6.5.14-alpha.2 (December 2, 2022)

Bug Fixes

  • Angular: Fix "webpack_require.nmd is not a function issue" in Angular 15 #20043

6.5.14-alpha.1 (November 27, 2022)

Maintenance

  • Core: Patch preview-web and refs to support React Native #19975

... (truncated)

Commits
  • feab19d v6.5.15
  • 075a8dd Update git head to 6.5.15-alpha.1, update yarn.lock [ci skip]
  • cfd775b v6.5.15-alpha.1
  • 9c19ef0 Update git head to 6.5.15-alpha.0, update yarn.lock [ci skip]
  • 095d6ad v6.5.15-alpha.0
  • ae06ca9 Update git head to 6.5.14, update yarn.lock [ci skip]
  • cf65eb7 v6.5.14
  • 6e1e6dd Update git head to 6.5.14-alpha.2, update yarn.lock [ci skip]
  • 71f07c4 v6.5.14-alpha.2
  • 885e7ac Update git head to 6.5.14-alpha.1, update yarn.lock [ci skip]
  • Additional commits viewable in compare view

Updates @storybook/svelte from 5.2.8 to 5.3.21

Changelog

Sourced from @​storybook/svelte's changelog.

5.3.21 (August 28, 2020)

Bug Fixes

  • Core: Add skip dispose option to ClientApi (#9868)

5.3.20 (August 27, 2020)

Bug Fixes

  • React-native server: Fix addon tabs (#10468)
  • Addon-docs: Fix babel JSX handling in MDX (#11448)
  • Revert "Fix: Search stories" (#10916)

5.3.19 (May 24, 2020)

Bug Fixes

  • UI: Fix search stories (#10539)

Security

  • Upgrade markdown-to-jsx to 6.11.4 (#10873)

5.3.18 (March 31, 2020)

Bug Fixes

  • Core: Fix manager assets to be routed in express (#9646)
  • Storyshots: Fix MDX transform (#10223)
  • Addon-docs: Restore IE11 compat on Windows by transpiling acorn-jsx (#9790)
  • Addon-docs: Ensure visibility of links within prop descriptions (#10210)

5.3.17 (March 14, 2020)

Bug Fixes

  • Components: Change react-syntax-highlighter from esm to cjs (#9780)

5.3.16 (March 14, 2020)

Failed NPM publish

5.3.15 (March 14, 2020)

Bug Fixes

  • Core: Disables html-webpack-plugin's option to remove script tag types (#10042)
  • Addon-actions: Style ActionLogger to preserve whitespace (#10046)

... (truncated)

Commits

Updates babel-loader from 8.0.6 to 8.3.0

Release notes

Sourced from babel-loader's releases.

v8.3.0

New features

Full Changelog: babel/babel-loader@v8.2.5...v8.3.0

v8.2.5

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v8.2.4...v8.2.5

v8.2.4

What's Changed

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

Thanks @​Reptarsrage!

8.2.1

8.2.0

  • Replace mkdirp with make-dir 47958ca3857e489e450b27c6f3266375015cba82 (@​JLHwung)
  • Use async config loading when available d8cff97ff387ded0fc9b5cbc489228c96c5ab14a (@​the-spyke)

8.1.0

Commits
Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.


Updates css-loader from 3.4.0 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

v6.7.0

6.7.0 (2022-03-04)

Features

v6.6.0

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

6.7.2 (2022-11-13)

Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

6.7.0 (2022-03-04)

Features

6.6.0 (2022-02-02)

Features

  • added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits

Updates sass-loader from 8.0.0 to 13.2.0

Release notes

Sourced from sass-loader's releases.

v13.2.0

13.2.0 (2022-11-09)

Features

v13.1.0

13.1.0 (2022-10-06)

Features

v13.0.2

13.0.2 (2022-06-27)

Bug Fixes

v13.0.1

13.0.1 (2022-06-24)

Bug Fixes

v13.0.0

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0 (#1048)
  • emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

  • do not crash on importers for modern API (#1052) (095814e)
  • do not store original sass error in webpack error(#1053) (06d7533)

v12.6.0

12.6.0 (2022-02-15)

... (truncated)

Changelog

Sourced from sass-loader's changelog.

13.2.0 (2022-11-09)

Features

13.1.0 (2022-10-06)

Features

13.0.2 (2022-06-27)

Bug Fixes

13.0.1 (2022-06-24)

Bug Fixes

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

  • minimum supported Node.js version is 14.15.0 (#1048)
  • emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

  • do not crash on importers for modern API (#1052) (095814e)
  • do not store original sass error in webpack error(#1053) (06d7533)

12.6.0 (2022-02-15)

Features

  • added support for automatic loading of sass-embedded (#1025) (c8dae87)

12.5.0 (2022-02-14)

... (truncated)

Commits

Updates style-loader from 1.1.2 to 1.3.0

Release notes

Sourced from style-loader's releases.

v1.3.0

1.3.0 (2020-10-03)

Features

Bug Fixes

v1.2.1

1.2.1 (2020-04-28)

Bug Fixes

  • hot module replacement logic for lazy type (#468) (88a5c2b)

v1.2.0

1.2.0 (2020-04-24)

Features

  • hot module replacement for css modules (6d14e0a)

v1.1.4

1.1.4 (2020-04-15)

Chore

  • update deps

v1.1.3

1.1.3 (2020-01-17)

Bug Fixes

Changelog

Sourced from style-loader's changelog.

1.3.0 (2020-10-03)

Features

Bug Fixes

1.2.1 (2020-04-28)

Bug Fixes

  • hot module replacement logic for lazy type (#468) (88a5c2b)

1.2.0 (2020-04-24)

Features

  • hot module replacement for css modules (6d14e0a)

1.1.4 (2020-04-15)

Chore

  • update deps

1.1.3 (2020-01-17)

Bug Fixes

Commits

Updates svelte-loader from 2.13.6 to 3.1.4

Changelog

Sourced from svelte-loader's changelog.

3.1.4

  • Bump loader-utils dependency

3.1.3

  • Prevent webpack process crashing on undefined dependencies (#197)

3.1.2

  • Update to latest svelte-hmr package fixing Webpack 4 support
  • Fix sourcemap breakpoints (#183)

3.1.1

  • Fix empty sourcesContent (#177)

3.1.0

  • Pass preprocessor source maps to compiler (#172)
  • Recompile style imports after an error (#173)

3.0.0

  • Breaking: compiler options must now be specified under compilerOptions (#159)
  • Breaking: removed support for deprecated style, script, and markup options, which are now located under the preprocess configuration (#158)
  • Breaking: dropped Svelte 2 support (#150)
  • Breaking: dropped Node 8 support (#157)
  • Add Webpack 5 support (#151)
    • Webpack 5 requires an additional rule in webpack.config.js to load the Svelte runtime correctly
  • Replace broken Svelte 2 HMR with the implementation from rixo/svelte-loader-hot (#156)
  • Add Node 14 support and remove virtual modules implementation (fixes #125, #131)

Thanks to @​non25, @​Smittyvb, @​rixo, and the numerous others who contributed to this major release!

Commits
Maintainer changes

This version was pushed to npm by dummdidumm, a new releaser for svelte-loader since your current version.


Updates webpack from 4.41.4 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

  • experiments.* normalize to false when opt-out
  • avoid NaN%
  • show the correct error when using a conflicting chunk name in code
  • HMR code tests existance of window before trying to access it
  • fix eval-nosources-* actually exclude sources
  • fix race condition where no module is returned from processing module
  • fix position of standalong semicolon in runtime code

Features

  • add support for @import to extenal CSS when using experimental CSS in node
  • add i64 support to the deprecated WASM implementation

Developer Experience

  • expose EnableWasmLoadingPlugin
  • add more typings
  • generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

  • add resolve.extensionAlias option which allows to alias extensions
    • This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")
  • add support for ES2022 features like static blocks
  • add Tree Shaking support for ProvidePlugin

Bugfixes

  • fix persistent cache when some build dependencies are on a different windows drive
  • make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
  • remove left-over from debugging in TLA/async modules runtime code
  • remove unneeded extra 1s timestamp offset during watching when files are actually untouched
    • This sometimes caused an additional second build which are not really needed
  • fix shareScope option for ModuleFederationPlugin
  • set "use-credentials" also for same origin scripts

Performance

  • Improve memory usage and performance of aggregating needed files/directories for watching
    • This affects rebuild performance

Extensibility

  • export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo...

Description has been truncated

…ader, css-loader, sass-loader, style-loader, svelte-loader and webpack

Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependencies [json5](https://github.com/json5/json5), [@storybook/addon-storysource](https://github.com/storybookjs/storybook/tree/HEAD/addons/storysource), [@storybook/svelte](https://github.com/storybookjs/storybook/tree/HEAD/app/svelte), [babel-loader](https://github.com/babel/babel-loader), [css-loader](https://github.com/webpack-contrib/css-loader), [sass-loader](https://github.com/webpack-contrib/sass-loader), [style-loader](https://github.com/webpack-contrib/style-loader), [svelte-loader](https://github.com/sveltejs/svelte-loader) and [webpack](https://github.com/webpack/webpack). These dependencies need to be updated together.


Updates `json5` from 2.1.1 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.1.1...v2.2.3)

Updates `@storybook/addon-storysource` from 5.2.8 to 6.5.15
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v6.5.15/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v6.5.15/addons/storysource)

Updates `@storybook/svelte` from 5.2.8 to 5.3.21
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/v5.3.21/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v5.3.21/app/svelte)

Updates `babel-loader` from 8.0.6 to 8.3.0
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](babel/babel-loader@v8.0.6...v8.3.0)

Updates `css-loader` from 3.4.0 to 6.7.3
- [Release notes](https://github.com/webpack-contrib/css-loader/releases)
- [Changelog](https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/css-loader@v3.4.0...v6.7.3)

Updates `sass-loader` from 8.0.0 to 13.2.0
- [Release notes](https://github.com/webpack-contrib/sass-loader/releases)
- [Changelog](https://github.com/webpack-contrib/sass-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/sass-loader@v8.0.0...v13.2.0)

Updates `style-loader` from 1.1.2 to 1.3.0
- [Release notes](https://github.com/webpack-contrib/style-loader/releases)
- [Changelog](https://github.com/webpack-contrib/style-loader/blob/master/CHANGELOG.md)
- [Commits](webpack/style-loader@v1.1.2...v1.3.0)

Updates `svelte-loader` from 2.13.6 to 3.1.4
- [Release notes](https://github.com/sveltejs/svelte-loader/releases)
- [Changelog](https://github.com/sveltejs/svelte-loader/blob/master/CHANGELOG.md)
- [Commits](sveltejs/svelte-loader@v2.13.6...v3.1.4)

Updates `webpack` from 4.41.4 to 5.75.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v4.41.4...v5.75.0)

---
updated-dependencies:
- dependency-name: json5
  dependency-type: indirect
- dependency-name: "@storybook/addon-storysource"
  dependency-type: direct:development
- dependency-name: "@storybook/svelte"
  dependency-type: direct:development
- dependency-name: babel-loader
  dependency-type: direct:development
- dependency-name: css-loader
  dependency-type: direct:development
- dependency-name: sass-loader
  dependency-type: direct:development
- dependency-name: style-loader
  dependency-type: direct:development
- dependency-name: svelte-loader
  dependency-type: direct:development
- dependency-name: webpack
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jan 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant