[Snyk] Upgrade ts-loader from 5.4.5 to 9.3.1

[MarcelRaschke]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade ts-loader from 5.4.5 to 9.3.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 58 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-06-22.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-Y18N-1021887	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TMPL-1583443	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579155	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579152	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-TAR-1579147	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536531	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Overwrite SNYK-JS-TAR-1536528	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SSRI-1246392	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NTHCHECK-1586032	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Arbitrary File Write SNYK-JS-NPMCLIARBORIST-1579181	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Arbitrary File Write SNYK-JS-NPMCLIARBORIST-1579165	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-NORMALIZEURL-1296539	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-LODASH-567746	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Command Injection SNYK-JS-LODASH-1040724	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-JSONSCHEMA-1920922	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-INI-1048974	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-AJV-584908	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-WS-1296835	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PROMPTS-1729737	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-PATHVAL-596926	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-PATHPARSE-1077067	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Denial of Service (DoS) SNYK-JS-NWSAPI-2841516	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Command Injection SNYK-JS-NPMCLIGIT-1536784	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Command Injection SNYK-JS-NODENOTIFIER-1035794	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LODASH-1018905	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Reverse Tabnabbing SNYK-JS-ISTANBULREPORTS-2328088	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-HOSTEDGITINFO-1088355	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Open Redirect SNYK-JS-GOT-2932019	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2332181	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Prototype Pollution SNYK-JS-FLAT-596927	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Cryptographic Issues SNYK-JS-ELLIPTIC-1064899	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TAR-1536758	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-2429795	472/1000 Why? Proof of Concept exploit, CVSS 7.3	Proof of Concept
	Information Exposure SNYK-JS-FOLLOWREDIRECTS-2396346	472/1000 Why? Proof of Concept exploit, CVSS 7.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ts-loader

• 9.3.1 - 2022-06-22
  
  • Bug fix: Generate declaration files for js files if allowJs is set to true [#1260] - thanks @ hediet and @ mvilliger
• 9.3.0 - 2022-04-30
  
  • simplify configuration for fork-ts-checker-webpack-plugin - thanks @ piotr-oles
• 9.2.9 - 2022-04-26
  
  • make v9 latest following v8 release - thanks @ johnnyreilly
• 9.2.8 - 2022-03-11
  
  • Bug fix: support webpack 5 in ts-loader [#1438] - thanks @ einatbar
• 9.2.7 - 2022-03-01
  
  • cater for change in resolveTypeReferenceDirective API in TypeScript 4.7 [#1421] - thanks @ johnnyreilly and @ cspotcode for inspiration in ts-node work here: TypeStrong/ts-node#1648
• 9.2.6 - 2021-09-20
  
  • Docs fix for thread-loader / history - thanks @ johnnyreilly
• 9.2.5 - 2021-08-03
  
  • Add function to get the latest program - thanks @ Zn4rK
• 9.2.4 - 2021-07-24
  
  • Fix undefined configPath now falls back to default - thanks @ johnnyreilly
• 9.2.3 - 2021-06-06
  
  • Fix error message for invalid getCustomTransformers modules - thanks @ blaky
• 9.2.2 - 2021-05-22
• 9.2.1 - 2021-05-19
• 9.2.0 - 2021-05-18
• 9.1.2 - 2021-05-05
• 9.1.1 - 2021-04-24
• 9.1.0 - 2021-04-22
• 9.0.2 - 2021-04-20
• 9.0.1 - 2021-04-20
• 9.0.0 - 2021-04-18
• 8.4.0 - 2022-04-26
  

  v8.4.0

  • fix: cater for change in resolveTypeReferenceDirective API in 4.7 - thanks @ dragomirtitian
  • This is a backport from v9.2.7 for webpack 4 compatibility
• 8.3.0 - 2021-05-19
• 8.2.0 - 2021-04-23
• 8.1.0 - 2021-03-28
• 8.0.18 - 2021-03-11
• 8.0.17 - 2021-02-10
• 8.0.16 - 2021-02-08
• 8.0.15 - 2021-02-04
• 8.0.14 - 2021-01-05
• 8.0.13 - 2020-12-31
• 8.0.12 - 2020-12-11
• 8.0.11 - 2020-11-09
• 8.0.10 - 2020-11-07
• 8.0.9 - 2020-11-04
• 8.0.8 - 2020-11-04
• 8.0.7 - 2020-10-24
• 8.0.6 - 2020-10-20
• 8.0.5 - 2020-10-13
• 8.0.4 - 2020-09-19
• 8.0.3 - 2020-08-24
• 8.0.2 - 2020-08-01
• 8.0.1 - 2020-07-15
• 8.0.0 - 2020-07-08
• 7.0.5 - 2020-05-24
• 7.0.4 - 2020-05-11
• 7.0.3 - 2020-05-07
• 7.0.2 - 2020-04-30
• 7.0.1 - 2020-04-20
• 7.0.0 - 2020-04-15
• 6.2.2 - 2020-03-22
• 6.2.1 - 2019-10-23
• 6.2.0 - 2019-09-29
• 6.1.2 - 2019-09-21
• 6.1.1 - 2019-09-20
• 6.1.0 - 2019-09-10
• 6.0.4 - 2019-06-21
• 6.0.3 - 2019-06-17
• 6.0.2 - 2019-05-31
• 6.0.1 - 2019-05-19
• 6.0.0 - 2019-05-06
• 5.4.5 - 2019-05-01

from ts-loader GitHub release notes

Commit messages

Package name: ts-loader

• b4b0363 Generate declaration files for js files if allowJs is set to true (clojure-lsp snippet support  BetterThanTomorrow/calva#1483)
• 914cdae Bump follow-redirects in /examples/project-references-example (Autoload test tree after clojure-lsp end the init process BetterThanTomorrow/calva#1467)
• 50793de Bump follow-redirects from 1.14.1 to 1.15.1 in /examples/vanilla (Bump follow-redirects from 1.14.4 to 1.14.7 BetterThanTomorrow/calva#1469)
• 3a3c629 stub 4.7.3 output (Some calva commands become unresponsive after long-running use, until a reboot (MacOS) BetterThanTomorrow/calva#1482)
• dccef46 Bump eventsource in /examples/project-references-example (Erroneous result window focus shortcut in welcome message BetterThanTomorrow/calva#1480)
• c26c251 Bump url-parse in /examples/project-references-example (Filenames of evaluated forms are incorrect BetterThanTomorrow/calva#1425)
• 06d8045 Bump follow-redirects in /examples/fork-ts-checker-webpack-plugin (Show code eval in repl option BetterThanTomorrow/calva#1470)
• b9430ae Bump async from 2.6.3 to 2.6.4 in /examples/vanilla (Fix extraneous newlines in test results BetterThanTomorrow/calva#1449)
• 1027e9d Update package.json ([LSP] Exclude repl output from lsp BetterThanTomorrow/calva#1479)
• d954b03 docs: misc update (VS Code highlights characters in the output/REPL window prompt BetterThanTomorrow/calva#1475)
• 8e389d9 chore: add vscode extension settings (Fix typo wse -> use BetterThanTomorrow/calva#1477)
• 3f8e3a4 Bump eventsource from 1.1.0 to 1.1.1 in /examples/vanilla (Fix currentTopLevelFunction function for metadata skipping BetterThanTomorrow/calva#1466)
• 6b9e913 Bump karma from 6.3.1 to 6.3.16 (Calva randomly edits file while in Live Share BetterThanTomorrow/calva#1434)
• e2ceb95 Bump async from 2.6.3 to 2.6.4 in /examples/project-references-example (Empty lines in output.calva-repl when running tests BetterThanTomorrow/calva#1448)
• b943237 feat: add zero-config support for fork-ts-checker-webpack-plugin (Add support for nREPL sideloading BetterThanTomorrow/calva#1451)
• 4e00201 Bump tar in /examples/fork-ts-checker-webpack-plugin (Formatting form with comma whitespace inserts 0 and places the cursor wrong BetterThanTomorrow/calva#1370)
• fc835fb Make v9 latest following v8 release (Fix security alerts BetterThanTomorrow/calva#1447)
• 69576a6 Bump minimist from 1.2.5 to 1.2.6 in /examples/vanilla (Fix link BetterThanTomorrow/calva#1443)
• 12f4ffe Bug fix: support webpack 5 in ts-loader (Setting repl type for cloned cljs session Fixes BetterThanTomorrow/calva#1386  BetterThanTomorrow/calva#1439)
• 65bb27c Bump lodash from 4.17.4 to 4.17.21 in /test/execution-tests/babel-es2015 (Clojure extension dragons BetterThanTomorrow/calva#1428)
• e7a2ba6 Bump url-parse from 1.5.1 to 1.5.10 in /examples/vanilla (Use test-var-query for all test commands BetterThanTomorrow/calva#1424)
• 96ddcc5 Bump url-parse in /examples/fork-ts-checker-webpack-plugin (Fix CircleCI Sign-In warning BetterThanTomorrow/calva#1423)
• ecdc9c1 Bump ajv in /examples/fork-ts-checker-webpack-plugin (Revert parinfer experiment BetterThanTomorrow/calva#1412)
• 5858b55 feat/4.6 (dialog with two definitions for one function on Go To Definition (F12) BetterThanTomorrow/calva#1426)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs