[Snyk] Upgrade css-loader from 0.9.1 to 5.0.1

[snyk-bot]

Snyk has created this PR to upgrade css-loader from 0.9.1 to 5.0.1.

:sparkles: Snyk has automatically assigned this pull request, [set who gets assigned](https://app.snyk.io/org/sonder/project/d05211fc-ad8f-4d1d-8fed-0f1c0fcca33b/settings/integration?utm_source=github&utm_medium=upgrade-pr/settings/integration).

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 86 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-11-04.

Release notes

Package name: css-loader

• 5.0.1 - 2020-11-04
  

  5.0.1 (2020-11-04)

  Bug Fixes

  • sources in source maps have relative paths (#1219) (3229b3c)
• 5.0.0 - 2020-10-13
  

  ⚠ BREAKING CHANGES

  • migrate on PostCSS 8
  • runtime doesn't contain source maps code without sourceMap: true
  • returned value from the getLocalIdent escapes by default, the exportName value is always unescaped
  • Auto enable icss modules for all files for which /\.icss\.\w+$/i is true (the modules.compileType option is icss)
  • [emoji] placeholder was deprecated
  • the icss option was removed (it was deprecated previously)

  Features

  • allowed named exports to have underscores in names (#1209) (747d62b)
  • no warnings when you don't need handle url()/@ import (#1195) (dd52931)
  • improved error message (52412f6)
  • reduced runtime (9f974be)
  • added fallback if custom getLocalIdent returns null/undefined (#1193) (0f95841)
• 4.3.0 - 2020-09-08
  

  4.3.0 (2020-09-08)

  Features

  • the importLoaders option can be string (#1178) (ec58a7c)

  Bug Fixes

  • line breaks in the url function (88b8ddc)
• 4.2.2 - 2020-08-24
  

  4.2.2 (2020-08-24)

  Bug Fixes

  • source maps generation, source from source maps are now relative to compiler.context and use webpack:// protocol (#1169) (fb5c53d)
• 4.2.1 - 2020-08-06
  

  4.2.1 (2020-08-06)

  Bug Fixes

  • regression with the exportOnlyLocals option, now locals are not exported under the locals name, it was big regression, we apologize for that (24c0a12)
• 4.2.0 - 2020-07-31
  

  4.2.0 (2020-07-31)

  Features

  • add module.type option, the icss option is deprecated (#1150) (68f72af)
• 4.1.1 - 2020-07-30
  

  4.1.1 (2020-07-30)

  Bug Fixes

  • remove unnecessary console call (#1148) (b1b90ca)
• 4.1.0 - 2020-07-29
  

  4.1.0 (2020-07-29)

  Features

  • add icss option (#1140) (a8ec7da)
  • support absolute paths (f9ba0ce)

  Bug Fixes

  • do not crash with data URLs (#1142) (91bc64b)
  • performance (#1144) (4f1baa2)
• 4.0.0 - 2020-07-25
  

  ⚠ BREAKING CHANGES

  • minimum required Node.js version is 10.13.0
  • minimum required webpack version is 4.27.0
  • the esModule option is true by default
  • default value of the sourceMap option depends on the devtool option
  • icss plugin disable by default, you need to setup the modules option to enable it
  • the modules option is true by default for all files matching /\.module\.\w+$/i.test(filename) regular expression, module.auto is true by default
  • the modules.context option was renamed to the modules.localIdentContext option
  • default the modules.localIdentContext value is compiler.context for the module.getLocalIdent option
  • the modules.hashPrefix option was renamed to the modules.localIdentHashPrefix option
  • the localsConvention option was moved and renamed to the modules.exportLocalsConvention option
  • the getLocalIndent option should be always Function and should always return String value
  • the onlyLocals option was moved and renamed to the modules.exportOnlyLocals option
  • function arguments of the import option were changed, it is now funciton(url, media, resourcePath) {}
  • inline syntax was changed, please write ~ before the file request, i.e. rewrite url(~!!loader!package/img.png) to url(!!loader!~package/img.png)

  Features

  • @ value supports importing url() (#1126) (7f49a0a)
  • improve url() resolving algorithm (bc19ddd)
  • named export for locals (#1108) (d139ec1)
  • respected the style field from package.json (#1099) (edf5347)
  • support file: protocol (5604205)
  • support server relative URLs

  Bug Fixes

  • resolution algorithm, you don't need ~ inside packages in node_modules (76f1480)
• 3.6.0 - 2020-06-13
  

  3.6.0 (2020-06-13)

  Features

  • allow modules.auto to be a filter function (#1086) (0902353)
• 3.5.3 - 2020-04-24
• 3.5.2 - 2020-04-10
• 3.5.1 - 2020-04-07
• 3.5.0 - 2020-04-06
• 3.4.2 - 2020-01-10
• 3.4.1 - 2020-01-03
• 3.4.0 - 2019-12-17
• 3.3.2 - 2019-12-12
• 3.3.1 - 2019-12-12
• 3.3.0 - 2019-12-09
• 3.2.1 - 2019-12-02
• 3.2.0 - 2019-08-06
• 3.1.0 - 2019-07-18
• 3.0.0 - 2019-06-11
• 2.1.1 - 2019-03-07
• 2.1.0 - 2018-12-25
• 2.0.2 - 2018-12-21
• 2.0.1 - 2018-12-14
• 2.0.0 - 2018-12-07
• 1.0.1 - 2018-10-29
• 1.0.0 - 2018-07-06
• 0.28.11 - 2018-03-16
• 0.28.10 - 2018-02-22
• 0.28.9 - 2018-01-17
• 0.28.8 - 2018-01-05
• 0.28.7 - 2017-08-30
• 0.28.6 - 2017-08-30
• 0.28.5 - 2017-08-17
• 0.28.4 - 2017-05-30
• 0.28.3 - 2017-05-25
• 0.28.2 - 2017-05-22
• 0.28.1 - 2017-05-02
• 0.28.0 - 2017-03-30
• 0.27.3 - 2017-03-13
• 0.27.2 - 2017-03-12
• 0.27.1 - 2017-03-10
• 0.27.0 - 2017-03-10
• 0.26.4 - 2017-03-08
• 0.26.2 - 2017-02-24
• 0.26.1 - 2016-12-02
• 0.26.0 - 2016-11-17
• 0.25.0 - 2016-09-05
• 0.24.0 - 2016-08-24
• 0.23.1 - 2015-12-22
• 0.23.0 - 2015-11-14
• 0.22.0 - 2015-11-04
• 0.21.0 - 2015-10-21
• 0.20.2 - 2015-10-19
• 0.20.1 - 2015-10-18
• 0.20.0 - 2015-10-18
• 0.19.0 - 2015-09-22
• 0.18.0 - 2015-09-10
• 0.17.0 - 2015-09-02
• 0.16.0 - 2015-08-12
• 0.15.6 - 2015-07-26
• 0.15.5 - 2015-07-18
• 0.15.4 - 2015-07-14
• 0.15.3 - 2015-07-13
• 0.15.2 - 2015-07-07
• 0.15.1 - 2015-06-18
• 0.15.0 - 2015-06-18
• 0.14.5 - 2015-06-09
• 0.14.4 - 2015-05-27
• 0.14.3 - 2015-05-25
• 0.14.2 - 2015-05-24
• 0.14.1 - 2015-05-24
• 0.14.0 - 2015-05-23
• 0.13.1 - 2015-05-20
• 0.13.0 - 2015-05-20
• 0.12.1 - 2015-05-14
• 0.12.0 - 2015-04-25
• 0.11.2 - 2015-04-24
• 0.11.1 - 2015-04-24
• 0.11.0 - 2015-04-21
• 0.10.1 - 2015-04-09
• 0.10.0 - 2015-04-09
• 0.9.1 - 2015-01-11

from css-loader GitHub release notes

Commit messages

Package name: css-loader

• 6412dd5 chore(release): 5.0.1
• c1d52ba test: fix
• 3229b3c fix: sources in source maps have relative paths (#1219)
• 98950ef chore(deps): update (#1220)
• 1351e3a chore(release): 5.0.0
• 747d62b feat: allow named exports to have underscores in names (#1209)
• 7bfe85d chore(deps): update (#1208)
• b5c9379 feat: postcss@8 (#1204)
• 92fe103 docs: context is localIdentContext in README (#1202)
• e5a9272 chore(deps): update (#1203)
• 63b41be refactor: emoji deprecate
• 9f974be feat: reduce runtime
• d779eb1 feat: escape getLocalIdent by default (#1196)
• dd52931 feat: hide warning on no plugins (#1195)
• 52412f6 feat: improve error message
• 0f95841 feat: add fallback if custom getLocalIdent returns null (#1193)
• 2f1573f feat: auto enable icss modules
• df111b8 test: import with file protocol
• cfe669f refactor: remove icss option (#1189)
• 57eb505 chore(release): 4.3.0
• 3ddcc7b chore(deps): update deps (#1186)
• 88b8ddc fix: line breaks in `url` function
• 8b865fe test: source map (#1180)
• ec58a7c feat: the `importLoaders` can be `string` (#1178)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

👩‍💻 Set who automatically gets assigned

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs