[Snyk] Upgrade css-loader from 5.2.7 to 6.8.1

[leonardoadame]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade css-loader from 5.2.7 to 6.8.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released 8 months ago, on 2023-05-28.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Improper Input Validation SNYK-JS-FOLLOWREDIRECTS-6141137	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept
	Improper Input Validation SNYK-JS-POSTCSS-5926692	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	No Known Exploit
	Cross-site Scripting (XSS) SNYK-JS-SERIALIZEJAVASCRIPT-6147607	544/1000 Why? Proof of Concept exploit, Recently disclosed, CVSS 7.3	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: css-loader

• 6.8.1 - 2023-05-28
  

  6.8.1 (2023-05-28)

  Bug Fixes

  • use cause for original errors and warnings (#1526) (ae3d8ae)
• 6.8.0 - 2023-05-27
  

  6.8.0 (2023-05-27)

  Features

  • use template literal when it possible to prevent Maximum call stack size exceeded (#1525) (6eb5661)

  Bug Fixes

  • warning and error serialization (#1523) (3e52969)
• 6.7.4 - 2023-05-19
  

  6.7.4 (2023-05-19)

  Bug Fixes

  • bugs in css modules (c3099fb)
  • output warning when built-in CSS support enabled (#1520) (0700ce8)
• 6.7.3 - 2022-12-14
  

  6.7.3 (2022-12-14)

  Bug Fixes

  • remove sourceURL from emitted CSS (#1487) (962924c)
• 6.7.2 - 2022-11-13
  

  6.7.2 (2022-11-13)

  Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)
• 6.7.1 - 2022-03-08
  

  6.7.1 (2022-03-08)

  Bug Fixes

  • defaultGetLocalIdent export (#1427) (74dac1e)
• 6.7.0 - 2022-03-04
  

  6.7.0 (2022-03-04)

  Features

  • re-export defaultGetLocalIdent (#1423) (207cf36)
• 6.6.0 - 2022-02-02
  

  6.6.0 (2022-02-02)

  Features

  • added the hashStrategy option (ca4abce)
• 6.5.1 - 2021-11-03
  

  6.5.1 (2021-11-03)

  Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)
• 6.5.0 - 2021-10-26
  

  6.5.0 (2021-10-26)

  Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

  Bug Fixes

  • respect nosources in the devtool option (c60eff2)
• 6.4.0 - 2021-10-09
• 6.3.0 - 2021-09-18
• 6.2.0 - 2021-07-19
• 6.1.0 - 2021-07-17
• 6.0.0 - 2021-07-15
• 5.2.7 - 2021-07-13

from css-loader GitHub release notes

Commit messages

Package name: css-loader

• 4673caa chore(release): 6.8.1
• ae3d8ae fix: use `cause` for original errors and warnings (#1526)
• c0ce599 chore(release): 6.8.0
• 6eb5661 feat: use template literal when it possible to prevent `Maximum call stack size exceeded` (#1525)
• 0a2a596 chore(deps): update (#1524)
• 3e52969 fix: warning and error serialization (#1523)
• ed77720 chore(release): 6.7.4
• c3099fb fix: bugs in css modules
• f1ba0db docs: fix (#1521)
• 0700ce8 fix: output warning when built-in CSS support enabled (#1520)
• 730f043 docs: add GitHub discussion badge (#1517)
• 038e01e chore: add scripts to fix lint (#1516)
• 0308067 ci: add node v20 (#1513)
• 93bcbb1 chore: update dependencies to the latest version (#1508)
• ac8e820 docs: update webpack v5 note in README (#1506)
• 175729a test: more (#1504)
• badb782 chore(deps-dev): bump webpack from 5.75.0 to 5.76.0 (#1502)
• 92bbea3 chore: update dependencies to the latest version (#1501)
• 4a67a3b ci: use LTS node version in lint job (#1498)
• 0ba14f9 chore: update dependencies to the latest version (#1497)
• 4b2ea0f ci: use concurrency in github workflows (#1495)
• 0c12ac6 chore: update ignorePaths in .cspell.json (#1494)
• 2b59cc9 chore(deps): bump json5 from 1.0.1 to 1.0.2 (#1492)
• fd00e15 chore: update dependency review action (#1491)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.