Update all

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@types/node	14.17.21 -> 14.17.32
@types/sinon	10.0.4 -> 10.0.6
husky (source)	7.0.2 -> 7.0.4
lint-staged	11.2.3 -> 11.2.4
mini-css-extract-plugin	2.4.2 -> 2.4.3
node	14.18.0 -> 14.18.1
preact (source)	10.5.14 -> 10.5.15
rollup (source)	2.58.0 -> 2.58.3
sirv	1.0.17 -> 1.0.18
style-loader	3.3.0 -> 3.3.1
typescript (source)	4.4.3 -> 4.4.4
webpack	5.58.1 -> 5.60.0
webpack-cli	4.9.0 -> 4.9.1
yarn	1.22.15 -> 1.22.17

---

Release Notes

typicode/husky

v7.0.4

Compare Source

No changes. Husky v7.0.3 was reverted, this version is the same as v7.0.2.

v7.0.3

Compare Source

okonet/lint-staged

v11.2.4

Compare Source

Performance Improvements

• replace cosmiconfig with lilconfig (#​981) (04529e2)

webpack-contrib/mini-css-extract-plugin

v2.4.3

Compare Source

nodejs/node

v14.18.1

Compare Source

This is a security release.

Notable changes

• CVE-2021-22959: HTTP Request Smuggling due to spaced in headers (Medium)
  • The http parser accepts requests with a space (SP) right after the header name before the colon. This can lead to HTTP Request Smuggling (HRS). More details will be available at CVE-2021-22959 after publication.
• CVE-2021-22960: HTTP Request Smuggling when parsing the body (Medium)
  • The parse ignores chunk extensions when parsing the body of chunked requests. This leads to HTTP Request Smuggling (HRS) under certain conditions. More details will be available at CVE-2021-22960 after publication.

Commits

• [8c254ca7e4] - deps: update llhttp to 2.1.4 (Fedor Indutny) nodejs-private/node-private#​285
• [9b92ae2499] - http: add regression test for smuggling content length (Matteo Collina) nodejs-private/node-private#​285
• [f467539719] - http: add regression test for chunked smuggling (Matteo Collina) nodejs-private/node-private#​285

preactjs/preact

v10.5.15

Compare Source

Fixes

• Skip rendering contents on the client in compat (#​3238, thanks @​developit)
• Nested Suspended trees may be missing _children (#​3260, thanks @​developit)
• Manage camel-cased dominant-baseline attribute in preact/compat (#​2859, thanks @​nmondon)
• Restrict camelCase prop renaming to non-custom elements (#​3259, thanks @​jramanat-oracle)
• Fix bug in chrome where select values continuously rerender (#​3226, thanks @​JoviDeCroock)
• Avoid leaking internal vnodes (#​3106, thanks @​developit)

Types

• Fix ref typing of forwardRef (#​3214, thanks @​itkrt2y)
• Add focusin & focusout to type definitions (#​3257, thanks @​boarwell)
• Add onBeforeInput attribute to type definitions (#​3256, thanks @​boarwell)
• Add missed HTML attributes in the TS typings (#​3246, thanks @​rschristian)

Maintenance

• Update babel.config.js (#​3265, thanks @​RRDAWLX)
• Delete redundant previousComponent in hooks (#​3271, thanks @​RRDAWLX)
• Update test dependencies (#​3255, thanks @​marvinhagemeister)

rollup/rollup

v2.58.3

Compare Source

2021-10-25

Bug Fixes

• Republish 2.58.1 with npm 6 as files were missing

v2.58.2

Compare Source

2021-10-25

Bug Fixes

• Republish 2.58.1 as files were missing

v2.58.1

Compare Source

2021-10-25

Bug Fixes

• Fix an issue with the CommonJS plugin when module.exports is falsy (#​4247)

Pull Requests

• #​4247: Handle falsy synthetic namespaces (@​lukastaegert)

lukeed/sirv

v1.0.18

Compare Source

Patches

• (sirv): Append charset=utf-8 to HTML content-type (#​106, #​122): d1b8ba6
  Thank you @​aleclarson~!

---

Full Changelog: lukeed/sirv@v1.0.17...v1.0.18

webpack-contrib/style-loader

v3.3.1

Compare Source

Microsoft/TypeScript

v4.4.4

Compare Source

This patch release contains fixes for a performance regression in --build mode by only calling realpath on package.json files only when those files are known to exist on disk, and to only perform this work under --watch mode.

---

For release notes, check out the release announcement.

For the complete list of fixed issues, check out the

• fixed issues query for Typescript 4.4.0 (Beta).
• fixed issues query for Typescript 4.4.1 (RC).
• fixed issues query for Typescript 4.4.2.
• fixed issues query for Typescript 4.4.3.
• fixed issues query for Typescript 4.4.4.

Downloads are available on:

• npm
• Visual Studio 2017/2019 (Select new version in project options)
• NuGet package

webpack/webpack

v5.60.0

Compare Source

Features

• Allow to pass more options to experiments.lazyCompilation. e. g. port, https stuff

Bugfixes

• fix output.hashFunction used to persistent caching too
• Initialize buildDependencies Set correctly when loaders are added in beforeLoaders hook

v5.59.1

Compare Source

Bugfixes

• fix regexp in managedPaths
• fix hanging when trying to write lockfile for experiments.buildHttp

v5.59.0

Compare Source

Features

• add /*#__PURE__*/ for Object() in generated code
• add RegExp and function support for managed/immutablePaths
• add hooks for multiple phases in module build
• improvements to experiments.buildHttp
  • allow to share cache
  • add allowlist
• add splitChunks.minSizeReduction option

Bugfixes

• fix memory caching for Data URLs
• fix crash in waitFor when modules are unsafe cached
• fix bug in build cycle detection

v5.58.2

Compare Source

Bugfixes

• fix serialization context passed
• fix a bug which caused module duplication when using persistent caching, unsafe cache and memory cache with GC
• fix validation of snapshots of non-existing directories

Performance

• store a hash in first bits of bigint to workaround v8 hashing: https://github.com/v8/v8/blob/b704bc0958e2e26305a68e89d215af1aee011148/src/objects/bigint.h#L192-L195

webpack/webpack-cli

v4.9.1

Compare Source

Bug Fixes

• compatibility with dynamic import (#​3006) (6a9aac9)

yarnpkg/yarn

v1.22.17

Compare Source

v1.22.16

Compare Source

---

Configuration

📅 Schedule: "before 3am on Monday" (UTC).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.