Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency less-loader to v6 #96

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github.aaakk.us.kg[bot]
Copy link

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot commented Apr 23, 2023

This PR contains the following updates:

Package Type Update Change
less-loader devDependencies major ^5.0.0 -> ^6.0.0

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Critical 9.8 CVE-2022-37601 #64
High 7.5 CVE-2022-37603 #75
High 7.1 CVE-2022-46175 #76

Release Notes

webpack-contrib/less-loader (less-loader)

v6.0.0

Compare Source

⚠ BREAKING CHANGES
  • minimum supported Node.js version is 10.13,
  • minimum support webpack version is 4
  • 2 version of less is not supported anymore
  • using 3 versin of less by default, so you don't need to have less in your package.json, we already supply it
  • move less-specific options to the lessOptions option, please look at README
Features
  • the paths options now works with webpack resolver (3931470)
  • allow a function to be used for lessOptions (#​325) (a6be94a)
  • added the appendData option (#​336) (fb94605)
  • added the prependData option (#​327) (9df8755)
  • support less and style fields in package.json
  • support index.less file for packages
Bug Fixes
  • support import aliases without tilde (#​335) (24021cd)
  • do not crash on remotely imports (#​333) (8e020e9)
  • add webpack v5 support (#​317) (f0b42b4)
  • first resolve an import using less resolver, then using webpack resolver (#​340) (443bd5a)
  • fix a resolution for @import 'package/file.ess'; and @import './package/file.ess';

  • If you want to rebase/retry this PR, check this box

@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot added the security fix Security fix generated by WhiteSource label Apr 23, 2023
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot changed the title Update dependency less-loader to v6 Update dependency less-loader to v6 - autoclosed Jun 14, 2023
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot deleted the whitesource-remediate/less-loader-6.x branch June 14, 2023 19:51
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot changed the title Update dependency less-loader to v6 - autoclosed Update dependency less-loader to v6 Jun 19, 2023
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot restored the whitesource-remediate/less-loader-6.x branch June 19, 2023 13:52
@mend-for-github.aaakk.us.kg mend-for-github.aaakk.us.kg bot force-pushed the whitesource-remediate/less-loader-6.x branch from 57c624a to 10cfc38 Compare June 19, 2023 13:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants