Bump loader-utils, html-webpack-plugin and vuepress

Open dependabot[bot] opened this issue 3 years ago • 0 comments

Bumps loader-utils to 1.4.2 and updates ancestor dependencies loader-utils, html-webpack-plugin and vuepress. These dependencies need to be updated together.

Updates loader-utils from 1.4.0 to 1.4.2

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

Commits

331ad50 chore(release): 1.4.2
17cbf8f fix: ReDoS problem (#226)
8f082b3 chore(release): 1.4.1
4504e34 fix: security problem (#220)
See full diff in compare view

Updates html-webpack-plugin from 3.2.0 to 5.5.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.0 (2021-10-25)

Features

Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

update terser (9c7fba0

5.3.2 (2021-06-22)

Bug Fixes

update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

allow to modify the interpolation options in webpack config (d654f5b)

drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

improve ssr (73d2a66)

5.1.0 (2021-02-12)

Features

omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598

5.0.0 (2021-02-03)

... (truncated)

Commits

873d75b chore(release): 5.5.0
ddeb774 chore: update examples
1e42625 feat: Support type=module via scriptLoading option
7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
79be779 [chore] changes actions to run on pull_requests
b7e5859 [chore] fixes CI to avoid race conditions
48131d3 chore(release): 5.4.0
16a841a [chore] rebuild examples
3bb7c17 Update index.js
e38ac97 Update index.js
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.

Updates vuepress from 0.14.11 to 1.9.7

Release notes

Sourced from vuepress's releases.

v1.9.2

TS Support for VuePress Plugin and Theme.

Motivation

We've announced VuePress 1.9 that takes full TypeScript Support for Config File, while VuePress 1.9.2 ships with TS Support for VuePress Plugin and Theme:

Quick Start

In order to make the plugin developer not dependent on VuePress for development, we provide a completely independent type package @vuepress/types:
npm i @vuepress/types -D
@vuepress/types exports four functions:

defineConfig

defineConfig4CustomTheme

defineTheme

definePlugin

Note that using @vuepress/types is equivalent to using vuepress/config.

Plugin Type

If you already have some VuePress plugins written in JS, you can leverage your IDE's intellisense with jsdoc type hints:
/**
 * @type {import('@vuepress/types').Plugin}
 */
module.exports = {
  ready() {
    // ...
  }
};
Alternatively, you can use the defineConfig helper which should provide intellisense without the need for jsdoc annotations:
import { definePlugin } from "@vuepress/types";
</tr></table>

... (truncated)

Changelog

Sourced from vuepress's changelog.

1.9.7 (2022-01-18)

Bug Fixes

types: missing ariaLabel at default theme config (a7b12bf) @chenhaoli

1.9.6 (2022-01-17)

Bug Fixes

core: compatibility with node 10 (close: #2981) (#2992) (f59598a) @ULIVZ

types: missing sidebarDepth at default theme config (5c6a16c) @chenhaoli

Features

add build concurrency control (close: #1819) (#2953) (2f9a394) @Troy Eagle

theme-default: set home footer with markdown slot (close: #2993) (#2994) (753df05) @ULIVZ

1.9.5 (2021-12-25)

Features

types: ctx.getLibFilePath (17c8fe4) @chenhaoli

types: ctx.getSiteData (332dac7) @chenhaoli

types: ctx.themeAPI (4269714) @chenhaoli

types: definePlugin supports declare theme config type (5f1e3b0) @chenhaoli

1.9.4 (2021-12-24)

Bug Fixes

types: '_filePath' implicitly has an 'any' type (66a6c27) @chenhaoli

types: add missing default theme config activeHeaderLinks (075ec62) @chenhaoli

types: cannot find module '../../shared-utils/src/datatypes' (e919d14) @chenhaoli

Features

types: expose all plugin types (7aeff34) @chenhaoli

... (truncated)

Commits

2f2357a build: release version 1.9.7
5699216 build: release version 1.9.6
2f9a394 feat: add build concurrency control (close: #1819) (#2953)
ef6f87a build: release version 1.9.5
e4a28db build: release version 1.9.4
accfe87 build: release version 1.9.3
ed3cce6 build: release version 1.9.2
2f707a6 refactor(types): move helpers to @vuepress/types
84250cc feat(types): defineThemeEntry helper to infer type for theme entry
7ac6aa8 feat(types): init @vuepress/types
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

Nov 18 '22 11:11 dependabot[bot]