Bump postcss, resolve-url-loader and vue-loader by dependabot[bot] · Pull Request #10 · ProcessMaker/package-skeleton
Bumps postcss to 8.4.31 and updates ancestor dependencies postcss, resolve-url-loader and vue-loader. These dependencies need to be updated together.
Updates postcss from 8.4.29 to 8.4.31
Release notes
Sourced from postcss's releases.
8.4.31
- Fixed
\rparsing to fix CVE-2023-44270.8.4.30
- Improved source map performance (by
@romainmenke).
Changelog
Sourced from postcss's changelog.
8.4.31
- Fixed
\rparsing to fix CVE-2023-44270.8.4.30
- Improved source map performance (by Romain Menke).
Commits
90208deRelease 8.4.31 version58cc860Fix carrier return parsing4fff8e4Improve pnpm test outputcd43ed1Update dependenciescaa916bUpdate dependencies8972f76Typo11a5286Typo45c5501Release 8.4.30 versionbc3c341Update linterb2be58aMerge pull request #1881 from romainmenke/improve-sourcemap-performance--phil...- Additional commits viewable in compare view
Updates resolve-url-loader from 3.1.5 to 5.0.0
Release notes
Sourced from resolve-url-loader's releases.
5.0.0
Breaking changes
- Require
node>=12.- Support only
webpack>=4.- Update to
postcss@^8.- Remove
reworkengine (which was deprecated in V4).Bugfixes
- Fix log messages not correctly normalising absolute paths to posix style on Windows platform
- Fixes to end-to-end tests and test framework.
5.0.0-beta.1
Breaking changes
- Require
node>=12.- Support only
webpack>=4.- Update to
postcss@^8.- Remove
reworkengine (which was deprecated in V4).Bugfixes
- Fix log messages not correctly normalising absolute paths to posix style on Windows platform
- Fixes to end-to-end tests and test framework.
5.0.0-alpha.1
Breaking changes
- Require
node>=12.- Support only
webpack>=4.- Update to
postcss@^8.- Remove
reworkengine (which was deprecated in V4).Bugfixes
- Fix log messages not correctly normalising absolute paths to posix style on Windows platform
4.0.0
Features
- Better resolution of the original source location - You can more successfully use
url()in variables and mixins.- Dependencies now accept a wider range and explicit dependency on
reworkandrework-visithas been removed.Breaking Changes
- The
engineoption is deprecated which means the oldreworkengine is deprecated.- The
keepQuerybehaviour is now the default, thekeepQueryoption has been removed.- The
removeCRoption defaults totruewhen executing on Windows OS.- The
absoluteoption has been removed.- The
joinoption has changed.Migrating
See the changlog.
... (truncated)
Changelog
Sourced from resolve-url-loader's changelog.
resolve-url-loader
Version 5
Features
- Update
postcssand completely removereworkparser.Breaking Changes
- Require
node@>=12.- Support
webpack@>=4(no longer tested for earlier versions).- The
engineoption has been removed.Migrating
Remove the
engineoption if you are using it.Version 4
Features
- Better resolution of the original source location - You can more successfully use
url()in variables and mixins.- Dependencies now accept a wider range and explicit dependency on
reworkandrework-visithas been removed.Breaking Changes
- The
engineoption is deprecated which means the oldreworkengine is deprecated.- The
keepQuerybehaviour is now the default, thekeepQueryoption has been removed.- The
removeCRoption defaults totruewhen executing on Windows OS.- The
absoluteoption has been removed.- The
joinoption has changed.Migrating
Remove the
engineoption if you are using it - the default "postcss" engine is much more reliable. The "rework" engine will still work for now but will be removed in the next major version.Remove the
keepQueryoption if you are using it.Remove the
absoluteoption, webpack should work fine without it. If you have a specific need to rebaseurl()then you should use a separate loader.If you use a custom
joinfunction then you will need to refactor it to the new API. Refer to the advanced usage documentation.If you wish to still use
engine: "rework"then note thatreworkandrework-visitpackages are nowpeerDependenciesthat must be explicitly installed by you.Version 3
Features
- Use
postcssparser by default. This is long overdue as the oldreworkparser doesn't cope with modern css.
... (truncated)
Commits
bf01da95.0.078393f6update branch references to v56787839github actions for CI1457038update changelog and readmea01faf95.0.0-beta.1fb09faeremove the engine option harder, ensure deprecation warning is tested5654fa4remove the engine option and related tests, use getOptions from loader where ...10f9cdb5.0.0-alpha.1b168dd3adjust deprecation message for engine option29e142anormalise windows absolute paths to posix format in log messages- Additional commits viewable in compare view
Updates vue-loader from 15.10.2 to 17.2.2
Release notes
Sourced from vue-loader's releases.
v17.2.2
Bug Fixes
- fix: windows path for
experiments.cssby@h-a-n-ain vuejs/vue-loader#2049v17.2.1
Features
- A new
experimentalInlineMatchResourceoption (webpack 5 only), which leverages webpack 5's inline matchResource feature in the underlying implementation, and works well with theexperiments.cssfeature (#2046) (3149f6d)Note: v17.2.0 was released by accident; it has the same content as v17.1.2, therefore not included in the Releases page.
v17.1.2
Bug Fixes
- keep build stable when run in a different path (#2040) (a81dc0f)
- properly close the watcher after webpack 4 tests (40b93b9)
v17.1.1
Bug Fixes
- support experimental
propsDestructureanddefineModeloptions (6269698)v17.1.0
Bug Fixes
- fix: reference project compiler, fixes #2031 by
@heywhyin vuejs/vue-loader#2038- fix: do not throw when
Rule.layeris used by@nolimitdevin vuejs/vue-loader#2000Features
- support 3.3 imported types hmr (bbd98fc)
Full Changelog: vuejs/vue-loader@v17.0.1...v17.1.0
v17.0.1
Bug Fixes
- add
vueand@vue/compiler-sfcto optional peerDependencies (df0ded5), closes #1944- merge custom queries rather than appending (#1911) (9e4249a)
v17.0.0
Features
- support
reactivityTransformoption (e07490e)BREAKING CHANGES
... (truncated)
Changelog
Sourced from vue-loader's changelog.
17.2.2 (2023-06-02)
Bug Fixes
17.2.1 (2023-06-01)
Features
- A new
experimentalInlineMatchResourceoption (webpack 5 only), which leverages webpack 5's inline match resource feature and works well with theexperiments.cssfeature (#2046) (3149f6d)Note: v17.2.0 was released by accident, it has the same content as v17.1.2, therefore not included in the changelog.
17.1.2 (2023-05-29)
Bug Fixes
- keep build stable when run in a different path (#2040) (a81dc0f)
- properly close the watcher after tests (40b93b9)
17.1.1 (2023-05-11)
Bug Fixes
- support propsDestructure and defineModel options (6269698)
17.1.0 (2023-04-26)
Bug Fixes
17.1.0-beta.0 (2023-04-19)
... (truncated)
Commits
790ef9d17.2.2f3f45dffix: windows path forexperiments.css(#2049)6968b38chore: update readme (#2047)4a6c103chore: v17.2.1 changelog [skip ci]27026ac17.2.1659d51fchore: remove duplicate entries in CHANGELOG.md3149f6dfeat: support experimental inline match resource (#2046)6ad8056chore: 17.1.2 changelog4b7263317.1.240b93b9fix: properly close the watcher after tests- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.