[Snyk] Upgrade: , babel-loader, case-sensitive-paths-webpack-plugin, css-loader, dotenv, eslint-loader, eslint-plugin-flowtype, eslint-plugin-import, eslint-plugin-jsx-a11y, eslint-plugin-react, html-webpack-plugin, mini-css-extract-plugin, optimize-css-assets-webpack-plugin, pnp-webpack-plugin, postcss-flexbugs-fixes, postcss-preset-env, postcss-safe-parser, resolve, resolve-url-loader, semver, terser-webpack-plugin, ts-pnp, webpack, webpack-dev-server #2
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade:
- @babel/core from 7.9.0 to 7.25.2.
See this package in npm: https://www.npmjs.com/package/@babel/core
- babel-loader from 8.1.0 to 8.3.0.
See this package in npm: https://www.npmjs.com/package/babel-loader
- case-sensitive-paths-webpack-plugin from 2.3.0 to 2.4.0.
See this package in npm: https://www.npmjs.com/package/case-sensitive-paths-webpack-plugin
- css-loader from 3.4.2 to 3.6.0.
See this package in npm: https://www.npmjs.com/package/css-loader
- dotenv from 8.2.0 to 8.6.0.
See this package in npm: https://www.npmjs.com/package/dotenv
- eslint-loader from 3.0.3 to 3.0.4.
See this package in npm: https://www.npmjs.com/package/eslint-loader
- eslint-plugin-flowtype from 4.6.0 to 4.7.0.
See this package in npm: https://www.npmjs.com/package/eslint-plugin-flowtype
- eslint-plugin-import from 2.20.1 to 2.29.1.
See this package in npm: https://www.npmjs.com/package/eslint-plugin-import
- eslint-plugin-jsx-a11y from 6.2.3 to 6.9.0.
See this package in npm: https://www.npmjs.com/package/eslint-plugin-jsx-a11y
- eslint-plugin-react from 7.19.0 to 7.35.0.
See this package in npm: https://www.npmjs.com/package/eslint-plugin-react
- html-webpack-plugin from 4.0.0-beta.11 to 4.5.2.
See this package in npm: https://www.npmjs.com/package/html-webpack-plugin
- mini-css-extract-plugin from 0.9.0 to 0.12.0.
See this package in npm: https://www.npmjs.com/package/mini-css-extract-plugin
- optimize-css-assets-webpack-plugin from 5.0.3 to 5.0.8.
See this package in npm: https://www.npmjs.com/package/optimize-css-assets-webpack-plugin
- pnp-webpack-plugin from 1.6.4 to 1.7.0.
See this package in npm: https://www.npmjs.com/package/pnp-webpack-plugin
- postcss-flexbugs-fixes from 4.1.0 to 4.2.1.
See this package in npm: https://www.npmjs.com/package/postcss-flexbugs-fixes
- postcss-preset-env from 6.7.0 to 6.7.2.
See this package in npm: https://www.npmjs.com/package/postcss-preset-env
- postcss-safe-parser from 4.0.1 to 4.0.2.
See this package in npm: https://www.npmjs.com/package/postcss-safe-parser
- resolve from 1.15.0 to 1.22.8.
See this package in npm: https://www.npmjs.com/package/resolve
- resolve-url-loader from 3.1.1 to 3.1.5.
See this package in npm: https://www.npmjs.com/package/resolve-url-loader
- semver from 6.3.0 to 6.3.1.
See this package in npm: https://www.npmjs.com/package/semver
- terser-webpack-plugin from 2.3.5 to 2.3.8.
See this package in npm: https://www.npmjs.com/package/terser-webpack-plugin
- ts-pnp from 1.1.6 to 1.2.0.
See this package in npm: https://www.npmjs.com/package/ts-pnp
- webpack from 4.42.0 to 4.47.0.
See this package in npm: https://www.npmjs.com/package/webpack
- webpack-dev-server from 3.10.3 to 3.11.3.
See this package in npm: https://www.npmjs.com/package/webpack-dev-server
See this project in Snyk:
https://app.snyk.io/org/johnnykiyashko/project/6c55df5a-394e-4808-8b72-6df6d593a11b?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade multiple dependencies.
👯 The following dependencies are linked and will therefore be updated together.ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
@babel/core
from 7.9.0 to 7.25.2 | 111 versions ahead of your current version | 2 months ago
on 2024-07-30
babel-loader
from 8.1.0 to 8.3.0 | 7 versions ahead of your current version | 2 years ago
on 2022-11-03
case-sensitive-paths-webpack-plugin
from 2.3.0 to 2.4.0 | 1 version ahead of your current version | 4 years ago
on 2021-02-22
css-loader
from 3.4.2 to 3.6.0 | 5 versions ahead of your current version | 4 years ago
on 2020-06-13
dotenv
from 8.2.0 to 8.6.0 | 5 versions ahead of your current version | 3 years ago
on 2021-05-05
eslint-loader
from 3.0.3 to 3.0.4 | 1 version ahead of your current version | 4 years ago
on 2020-04-02
eslint-plugin-flowtype
from 4.6.0 to 4.7.0 | 1 version ahead of your current version | 4 years ago
on 2020-03-24
eslint-plugin-import
from 2.20.1 to 2.29.1 | 30 versions ahead of your current version | 9 months ago
on 2023-12-14
eslint-plugin-jsx-a11y
from 6.2.3 to 6.9.0 | 12 versions ahead of your current version | 3 months ago
on 2024-06-20
eslint-plugin-react
from 7.19.0 to 7.35.0 | 59 versions ahead of your current version | 2 months ago
on 2024-07-20
html-webpack-plugin
from 4.0.0-beta.11 to 4.5.2 | 18 versions ahead of your current version | 4 years ago
on 2021-02-18
mini-css-extract-plugin
from 0.9.0 to 0.12.0 | 7 versions ahead of your current version | 4 years ago
on 2020-10-07
optimize-css-assets-webpack-plugin
from 5.0.3 to 5.0.8 | 5 versions ahead of your current version | 3 years ago
on 2021-06-23
pnp-webpack-plugin
from 1.6.4 to 1.7.0 | 1 version ahead of your current version | 3 years ago
on 2021-07-21
postcss-flexbugs-fixes
from 4.1.0 to 4.2.1 | 2 versions ahead of your current version | 4 years ago
on 2020-04-27
postcss-preset-env
from 6.7.0 to 6.7.2 | 2 versions ahead of your current version | a year ago
on 2023-10-24
postcss-safe-parser
from 4.0.1 to 4.0.2 | 1 version ahead of your current version | 5 years ago
on 2020-02-08
resolve
from 1.15.0 to 1.22.8 | 19 versions ahead of your current version | a year ago
on 2023-10-10
resolve-url-loader
from 3.1.1 to 3.1.5 | 4 versions ahead of your current version | 2 years ago
on 2022-12-02
semver
from 6.3.0 to 6.3.1 | 1 version ahead of your current version | a year ago
on 2023-07-10
terser-webpack-plugin
from 2.3.5 to 2.3.8 | 3 versions ahead of your current version | 4 years ago
on 2020-08-12
ts-pnp
from 1.1.6 to 1.2.0 | 1 version ahead of your current version | 4 years ago
on 2020-03-26
webpack
from 4.42.0 to 4.47.0 | 8 versions ahead of your current version | a year ago
on 2023-09-06
webpack-dev-server
from 3.10.3 to 3.11.3 | 4 versions ahead of your current version | 3 years ago
on 2021-11-08
Issues fixed by the recommended upgrade:
SNYK-JS-OBJECTPATH-1017036
SNYK-JS-OBJECTPATH-1585658
SNYK-JS-SEMVER-3247795
SNYK-JS-SERIALIZEJAVASCRIPT-570062
SNYK-JS-ANSIHTML-1296849
SNYK-JS-OBJECTPATH-1569453
SNYK-JS-SOCKJS-575261
SNYK-JS-YARGSPARSER-560381
SNYK-JS-POSTCSS-1090595
SNYK-JS-POSTCSS-1255640
Release notes
Package name: @babel/core
-
7.25.2 - 2024-07-30
- #16695 Ensure that
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
-
7.24.9 - 2024-07-15
- #16639 Avoid
- #16638 fix: provide legacy typings for TS < 4.1 (@ JLHwung)
- #16617 Avoid extra parens in TS
- #16629 Lazy top-level initializations for module transforms (@ guybedford)
- Babel Bot (@ babel-bot)
- Guy Bedford (@ guybedford)
- Huáng Jùnliàng (@ JLHwung)
- Nicolò Ribaudo (@ nicolo-ribaudo)
- @ liuxingbaoyu
-
7.24.8 - 2024-07-11
-
7.24.7 - 2024-06-05
-
7.24.6 - 2024-05-24
-
7.24.5 - 2024-04-29
-
7.24.4 - 2024-04-03
-
7.24.3 - 2024-03-20
-
7.24.1 - 2024-03-19
-
7.24.0 - 2024-02-28
-
7.23.9 - 2024-01-25
-
7.23.7 - 2023-12-29
-
7.23.6 - 2023-12-11
-
7.23.5 - 2023-11-29
-
7.23.3 - 2023-11-09
-
7.23.2 - 2023-10-12
-
7.23.0 - 2023-09-25
-
7.22.20 - 2023-09-16
-
7.22.19 - 2023-09-14
-
7.22.18 - 2023-09-14
-
7.22.17 - 2023-09-08
-
7.22.15 - 2023-09-04
-
7.22.11 - 2023-08-24
-
7.22.10 - 2023-08-07
-
7.22.9 - 2023-07-12
-
7.22.8 - 2023-07-06
-
7.22.7 - 2023-07-06
-
7.22.6 - 2023-07-04
-
7.22.5 - 2023-06-08
-
7.22.1 - 2023-05-26
-
7.22.0 - 2023-05-26
-
7.21.8 - 2023-05-02
-
7.21.5 - 2023-04-28
-
7.21.4 - 2023-03-31
-
7.21.4-esm.4 - 2023-04-04
-
7.21.4-esm.3 - 2023-04-04
-
7.21.4-esm.2 - 2023-04-04
-
7.21.4-esm.1 - 2023-04-04
-
7.21.4-esm - 2023-04-04
-
7.21.3 - 2023-03-14
-
7.21.0 - 2023-02-20
-
7.20.12 - 2023-01-04
-
7.20.7 - 2022-12-22
-
7.20.5 - 2022-11-28
-
7.20.2 - 2022-11-04
-
7.19.6 - 2022-10-20
-
7.19.3 - 2022-09-27
-
7.19.1 - 2022-09-14
-
7.19.0 - 2022-09-05
-
7.18.13 - 2022-08-22
-
7.18.10 - 2022-08-01
-
7.18.9 - 2022-07-18
-
7.18.6 - 2022-06-27
-
7.18.5 - 2022-06-13
-
7.18.2 - 2022-05-25
-
7.18.0 - 2022-05-19
-
7.17.12 - 2022-05-16
-
7.17.10 - 2022-04-29
-
7.17.9 - 2022-04-06
-
7.17.8 - 2022-03-18
-
7.17.7 - 2022-03-14
-
7.17.5 - 2022-02-17
-
7.17.4 - 2022-02-15
-
7.17.3 - 2022-02-15
-
7.17.2 - 2022-02-08
-
7.17.0 - 2022-02-02
-
7.16.12 - 2022-01-22
-
7.16.10 - 2022-01-19
-
7.16.7 - 2021-12-31
-
7.16.5 - 2021-12-13
-
7.16.0 - 2021-10-29
-
7.15.8 - 2021-10-06
-
7.15.5 - 2021-09-04
-
7.15.4 - 2021-09-02
-
7.15.0 - 2021-08-04
-
7.14.8 - 2021-07-20
-
7.14.6 - 2021-06-14
-
7.14.5 - 2021-06-09
-
7.14.3 - 2021-05-17
-
7.14.2 - 2021-05-12
-
7.14.0 - 2021-04-29
-
7.13.16 - 2021-04-20
-
7.13.15 - 2021-04-08
-
7.13.14 - 2021-03-29
-
7.13.13 - 2021-03-26
-
7.13.10 - 2021-03-08
-
7.13.8 - 2021-02-26
-
7.13.1 - 2021-02-23
-
7.13.0 - 2021-02-22
-
7.12.17 - 2021-02-18
-
7.12.16 - 2021-02-11
-
7.12.13 - 2021-02-03
-
7.12.10 - 2020-12-09
-
7.12.9 - 2020-11-24
-
7.12.8 - 2020-11-23
-
7.12.7 - 2020-11-20
-
7.12.3 - 2020-10-16
-
7.12.1 - 2020-10-15
-
7.12.0 - 2020-10-14
-
7.11.6 - 2020-09-03
-
7.11.5 - 2020-08-31
-
7.11.4 - 2020-08-20
-
7.11.1 - 2020-08-04
-
7.11.0 - 2020-07-30
-
7.10.5 - 2020-07-14
-
7.10.4 - 2020-06-30
-
7.10.3 - 2020-06-19
-
7.10.2 - 2020-05-30
-
7.10.1 - 2020-05-27
-
7.10.0 - 2020-05-26
-
7.9.6 - 2020-04-29
-
7.9.0 - 2020-03-20
from @babel/core GitHub release notesv7.25.2 (2024-07-30)
🐛 Bug Fix
babel-core,babel-traverserequeueComputedKeyAndDecoratorsis available (@ nicolo-ribaudo)Committers: 2
v7.24.9 (2024-07-15)
🐛 Bug Fix
babel-core,babel-standalonerequire()call in@ babel/standalonebundle (@ nicolo-ribaudo)babel-types💅 Polish
babel-generator,babel-plugin-transform-optional-chainingas/satisfies(@ nicolo-ribaudo)🏠 Internal
babel-helper-module-transformsCommitters: 5
Package name: babel-loader
-
8.3.0 - 2022-11-03
- Pass external dependencies from Babel to Webpack by @ nicolo-ribaudo in #971
-
8.2.5 - 2022-04-19
- fix: respect
- @ alan-agius4 made their first contribution in #896
-
8.2.4 - 2022-03-22
- doc(README.md): fix a broken markdown link by @ loveDstyle in #919
- Bump loader-utils to 2.x by @ stianjensen in #931
- Use md5 hashing for OpenSSL 3 by @ pathmapper in #924
-
8.2.3 - 2021-10-20
- Use md5 hash for caching on node v17 (#918)
-
8.2.2 - 2020-11-26
-
8.2.1 - 2020-11-10
- Move
-
8.2.0 - 2020-11-10
- Replace
- Use async config loading when available d8cff97 (@ the-spyke)
-
8.1.0 - 2020-03-20
from babel-loader GitHub release notesNew features
Full Changelog: v8.2.5...v8.3.0
What's Changed
inputSourceMaploader option by @ alan-agius4 in #896New Contributors
Full Changelog: v8.2.4...v8.2.5
What's Changed
Thanks @ loveDstyle, @ stianjensen and @ pathmapper for your first PRs!
This release fixes compatibility with Node.js 17
Thanks @ Reptarsrage!
8.2.2
@ ava/babeltodevDependencies#881 (@ jvasseur)mkdirpwithmake-dir47958ca (@ JLHwung)Package name: case-sensitive-paths-webpack-plugin
-
2.4.0 - 2021-02-22
-
2.3.0 - 2020-01-15
from case-sensitive-paths-webpack-plugin GitHub release notesPackage name: css-loader
-
3.6.0 - 2020-06-13
- allow
-
3.5.3 - 2020-04-24
- add file from an error to file dependencies (841423f)
- avoid query string in source maps (#1082) (f64de13)
-
3.5.2 - 2020-04-10
- schema for the
-
3.5.1 - 2020-04-07
- don't generate an invalid code for
-
3.5.0 - 2020-04-06
- accept semver compatible postcss AST (#1049) (14c4faa)
- allow to determinate css modules using the
- the
- the
-
3.4.2 - 2020-01-10
- do not duplicate css on
from css-loader GitHub release notes3.6.0 (2020-06-13)
Features
modules.autoto be a filter function (#1086) (0902353)3.5.3 (2020-04-24)
Bug Fixes
3.5.2 (2020-04-10)
Bug Fixes
modules.autooption (#1075) (8c9ffe7)3.5.1 (2020-04-07)
Bug Fixes
locals(#1072) (866b84a)3.5.0 (2020-04-06)
Features
modules.autooption, please look at an example of how you can simplify the configuration. (#1067) (c673cf4)modules.exportGlobalsoption for export global classes and ids (#1069) (519e5f4)modules.modeoption may be a function (#1065) (0d8ac3b)3.4.2 (2020-01-10)
Bug Fixes
composes(#1040) (df79602)Package name: dotenv
-
8.6.0 - 2021-05-05
-
8.5.1 - 2021-05-05
-
8.5.0 - 2021-05-05
-
8.4.0 - 2021-05-05
-
8.3.0 - 2021-05-05
-
8.2.0 - 2019-10-16
from dotenv GitHub release notesShow as 'added' in changelog
Bump version 8.5.1
Bump version 8.5.0
Point to types file for VS Code. Bump 8.4.0
Drop node 8 support
chore(release): 8.2.0
Package name: eslint-loader
-
3.0.4 - 2020-04-02
- #316 updating loader-fs-cache min version (#317) (796e3d1)
-
3.0.3 - 2019-12-06
- check result object (#311) (6bb1fa6)
- support webpack 5 (#312) (c0a9d0c)
from eslint-loader GitHub release notesBug Fixes
Bug Fixes
Package name: eslint-plugin-flowtype
-
4.7.0 - 2020-03-24
- require-exact-type detects nested objects (#441) (463b74e)
-
4.6.0 - 2020-01-11
- add fixer to invalid file annotation style message (#440) (97a230b)
from eslint-plugin-flowtype GitHub release notes4.7.0 (2020-03-24)
Features
4.6.0 (2020-01-11)
Features
Package name: eslint-plugin-import
-
2.29.1 - 2023-12-14
-
2.29.0 - 2023-10-23
-
2.28.1 - 2023-08-18
-
2.28.0 - 2023-07-28
-
2.27.5 - 2023-01-16
-
2.27.4 - 2023-01-12
-
2.27.3 - 2023-01-12
-
2.27.2 - 2023-01-12
-
2.27.1 - 2023-01-12
-
2.27.0 - 2023-01-11
-
2.26.0 - 2022-04-05
-
2.25.4 - 2022-01-02
-
2.25.3 - 2021-11-10
-
2.25.2 - 2021-10-12
-
2.25.1 - 2021-10-12
-
2.25.0 - 2021-10-12
-
2.24.2 - 2021-08-24
-
2.24.1 - 2021-08-19
-
2.24.0 - 2021-08-08
-
2.23.4 - 2021-05-29
-
2.23.3 - 2021-05-21
-
2.23.2 - 2021-05-15
-
2.23.1 - 2021-05-15
-
2.23.0 - 2021-05-14
-
2.22.1 - 2020-09-27
-
2.22.0 - 2020-06-27
-
2.21.2 - 2020-06-10
-
2.21.1 - 2020-06-08
-
2.21.0 - 2020-06-08
-
2.20.2 - 2020-03-29
-
2.20.1 - 2020-02-02
from eslint-plugin-import GitHub release notesFull Changelog: v2.29.0...v2.29.1
Full Changelog: v2.28.1...v2.29.0
Full Changelog: v2.28.0...v2.28.1
Package name: eslint-plugin-jsx-a11y
Added
6b5f096no-noninteractive-element-to-interactive-role: allowmenuitemradioandmenuitemcheckboxon <li>c0733f9Fixed
img-redundant-alt: fixed multibyte character support#969isNonInteractiveElement: Upgrade aria-query to 5.3.0 and axobject-query to 3.2.1"75d5dd7summaryremains non-interactive6a048daChanged
#960safe-regex-test4c7e78151a1ca7aria-queryandaxobject-query, addls-enginestest to CI32fd82c@ babel/runtime0a98ad8axe-coreb3559cfobject.entriesto dev deps1be7b70Full Changelog: v6.8.0...v6.9.0
Full Changelog: v6.7.1...v6.8.0
Full Changelog: v6.7.0...v6.7.1
Full Changelog: v6.6.1...v6.7.0
Full Changelog: v6.6.0...v6.6.1
Full Changelog: v6.5.1...v6.6.0
Full Changelog: v6.5.0...v6.5.1
What's Changed
label-has-associated-control: Add glob support by @ hallzac2 in #749no-redundant-roles: Adds missing closing square bracket by @ mikeriley131 in #775anchor-is-valid: general cleanup by @ Anima-t3d in #728scope: replace duplicate scope word by @ rafaelss95 in #799@ babel/eslint-parserinstead ofbabel-eslintby @ MichaelDeBoey in #811export defaultsyntax for exporting rules by @ bmish in #819eslint-plugin-eslint-pluginby @ bmish in #818New Contributors