Update dependency css-loader to v2 #173

mend-for-github-com · 2022-06-07T01:55:17Z

This PR contains the following updates:

Package	Type	Update	Change
css-loader	dependencies	major	`^0.23.1` -> `^2.0.0`

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
High	9.8	CVE-2018-13797
High	8.1	WS-2019-0063
High	7.5	CVE-2021-23382
High	7.5	CVE-2021-23382
High	7.5	CVE-2021-28092
High	7.5	CVE-2021-29059
High	7.5	CVE-2021-33502
High	7.5	WS-2019-0032
High	7.5	WS-2019-0541
High	7.5	WS-2021-0152
Medium	5.3	CVE-2021-29060

Release Notes

webpack-contrib/css-loader

`v2.0.0`

Compare Source

Bug Fixes

broken unucode characters (#850) (f599c70)
correctly processing urls() with ?#hash (#803) (417d105)
don't break loader on invalid or not exists url or import token (#827) (9e52d26)
don't duplicate import with same media in different case (#819) (9f66e33)
emit warnings on broken import at-rules (#806) (4bdf08b)
handle uppercase URL in import at-rules (#818) (3ebdcd5)
inconsistent generate class names for css modules on difference os (#812) (0bdf9b7)
reduce number of require for urls() (#854) (3338656)
support deduplication of string module ids (optimization.namedModules) (#789) (e3bb83a)
support module resolution in composes (#845) (453248f)
same urls() resolving logic for modules (local and global) and without modules (#843) (fdcf687)

Features

allow to disable css modules and disable their by default (#842) (889dc7f)
disable import option doesn't affect on composes (#822) (f9aa73c)
allow to filter urls (#856) (5e702e7)
allow to filter import at-rules (#857) (5e6034c)
emit warning on invalid urls() (#832) (da95db8)
added exportOnlyLocals option (#824) (e9327c0)
reuse postcss ast from other loaders (i.e postcss-loader) (#840) (1dad1fb)
schema options (b97d997)

BREAKING CHANGES

resolving logic for url() and import at-rules works the same everywhere, it does not matter whether css modules are enabled (with global and local module) or not. Examples - url('image.png') as require('./image.png'), url('./image.png') as require('./image.png'), url('~module/image.png') as require('module/image.png').
by default css modules are disabled (now modules: false disable all css modules features), you can return old behaviour change this on modules: 'global'
css-loader/locals was dropped in favor exportOnlyLocals option
import option only affect on import at-rules and doesn't affect on composes declarations
invalid @import at rules now emit warnings
use postcss@7

1.0.1 (2018-10-29)

Bug Fixes

loader: trim unquoted import urls (#783) (21fcddf)

`v1.0.1`

Compare Source

Bug Fixes

loader: trim unquoted import urls (#783) (21fcddf)

`v1.0.0`

Compare Source

BREAKING CHANGES

remove minimize option, use postcss-loader with cssnano or use optimize-cssnano-plugin plugin
remove module option, use modules option instead
remove camelcase option, use camelCase option instead
remove root option, use postcss-loader with postcss-url plugin
remove alias option, use resolve.alias feature or use postcss-loader with postcss-url plugin
update postcss to 6 version
minimum require nodejs version is 6.9
minimum require webpack version is 4

0.28.11 (2018-03-16)

Bug Fixes

lib/processCss: don't check mode for url handling (options.modules) (#698) (c788450)

0.28.10 (2018-02-22)

Bug Fixes

getLocalIdent: add rootContext support (webpack >= v4.0.0) (#681) (9f876d2)

0.28.9 (2018-01-17)

Bug Fixes

ignore invalid URLs (url()) (#663) (d1d8221)

0.28.8 (2018-01-05)

Bug Fixes

loader: correctly check if source map is undefined (#641) (0dccfa9)
proper URL escaping and wrapping (url()) (#627) (8897d44)

0.28.7 (2017-08-30)

Bug Fixes

pass resolver to localsLoader (options.alias) (#601) (8f1b57c)

0.28.6 (2017-08-30)

Bug Fixes

add support for aliases starting with / (options.alias) (#597) (63567f2)

0.28.5 (2017-08-17)

Bug Fixes

match mutliple dashes (options.camelCase) (#556) (1fee601)
stricter [@import](https://togithub.com/import) tolerance (#593) (2e4ec09)

0.28.4 (2017-05-30)

Bug Fixes

preserve leading underscore in class names (#543) (f6673c8)

0.28.3 (2017-05-25)

Bug Fixes

correct plugin order for CSS Modules (#534) (b90f492)

0.28.2 (2017-05-22)

Bug Fixes

source maps path on windows (#532) (c3d0d91)

0.28.1 (2017-05-02)

Bug Fixes

allow to specify a full hostname as a root URL (#521) (06d27a1)
case insensitivity of @import (#514) (de4356b)
don't handle empty @import and url() (#513) (868fc94)
imported variables are replaced in exports if followed by a comma (#504) (956bad7)
loader now correctly handles url with space(s) (#495) (534ea55)
url with a trailing space is now handled correctly (#494) (e1ec4f2)
use btoa instead Buffer (#501) (fbb0714)