Skip to content

Bump json5, @svgr/webpack, babel-loader, eslint-loader, file-loader, html-webpack-plugin, mini-css-extract-plugin, sass-loader, style-loader, url-loader and webpack - #116

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2ff6719259
Open

Bump json5, @svgr/webpack, babel-loader, eslint-loader, file-loader, html-webpack-plugin, mini-css-extract-plugin, sass-loader, style-loader, url-loader and webpack#116
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/multi-2ff6719259

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026

Copy link
Copy Markdown
Contributor

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, @svgr/webpack, babel-loader, eslint-loader, file-loader, html-webpack-plugin, mini-css-extract-plugin, sass-loader, style-loader, url-loader and webpack. These dependencies need to be updated together.

Updates json5 from 2.2.0 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

  • Fix: json5@2.2.3 is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

  • Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Commits
  • c3a7524 2.2.3
  • 94fd06d docs: update CHANGELOG for v2.2.3
  • 3b8cebf docs(security): use GitHub security advisories
  • f0fd9e1 docs: publish a security policy
  • 6a91a05 docs(template): bug -> bug report
  • 14f8cb1 2.2.2
  • 10cc7ca docs: update CHANGELOG for v2.2.2
  • 7774c10 fix: add proto to objects and arrays
  • edde30a Readme: slight tweak to intro
  • 97286f8 Improve example in readme
  • Additional commits viewable in compare view

Updates @svgr/webpack from 4.1.0 to 8.1.0

Release notes

Sourced from @​svgr/webpack's releases.

v8.1.0

Bug Fixes

  • cli: fix default dimensions, prettier & svgo (571d5c8)
  • config: prefer cli config over rc config (#845) (8b97248)
  • react-native: fix duplicate import (#894) (e612b6a)

Features

  • esm: add support for svgo.config.cjs (#879) (ae91e2e)

v8.0.1

Bug Fixes

v8.0.0

Bug Fixes

  • parseObject error causes website broken (05f2946)

Features

  • types: change SVGProps from import to import type (#853) (095f021)
  • add snake_case filename option (#857) (428b0c7)
  • make index template more flexible (#861) (003009c)

BREAKING CHANGES

  • index template now receives an array of objects containing both the created component path (path) and the original SVG path (originalPath)

v7.0.0

Features

... (truncated)

Changelog

Sourced from @​svgr/webpack's changelog.

8.1.0 (2023-08-15)

Bug Fixes

  • cli: fix default dimensions, prettier & svgo (571d5c8)
  • config: prefer cli config over rc config (#845) (8b97248)
  • react-native: fix duplicate import (#894) (e612b6a)

Features

  • esm: add support for svgo.config.cjs (#879) (ae91e2e)

8.0.1 (2023-05-09)

Bug Fixes

8.0.0 (2023-05-09)

Bug Fixes

  • parseObject error causes website broken (05f2946)

Features

  • add snake_case filename option (#857) (428b0c7)
  • make index template more flexible (#861) (003009c)
  • types: change SVGProps from import to import type (#853) (095f021)

BREAKING CHANGES

  • index template now receives an array of objects containing both the created component path (path) and the original SVG path (originalPath)

... (truncated)

Commits

Updates babel-loader from 8.0.5 to 8.4.1

Release notes

Sourced from babel-loader's releases.

v8.4.1

What's Changed

Full Changelog: babel/babel-loader@v8.4.0...v8.4.1

v8.4.0

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v8.3.0...v8.4.0

v8.3.0

New features

Full Changelog: babel/babel-loader@v8.2.5...v8.3.0

v8.2.5

What's Changed

New Contributors

Full Changelog: babel/babel-loader@v8.2.4...v8.2.5

v8.2.4

What's Changed

Thanks @​loveDstyle, @​stianjensen and @​pathmapper for your first PRs!

8.2.3

This release fixes compatibility with Node.js 17

Thanks @​Reptarsrage!

8.2.1

8.2.0

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by nicolo-ribaudo, a new releaser for babel-loader since your current version.


Updates eslint-loader from 2.1.2 to 4.0.2

Release notes

Sourced from eslint-loader's releases.

v4.0.2

Bug Fixes

v4.0.1

Refactor

  • new cache implementation (#320) (6bb1fa6)

v4.0.0

Breaking Changes

  • drop support for Node < 10.13.0
  • minimum supported eslint version is 6

v3.0.4

Bug Fixes

v3.0.3

Bug Fixes

v3.0.2

Bug Fixes

v3.0.1

Bug Fixes

  • module build failed error at Linter.parseResults (#294) (360e69c)

v3.0.0

Bugfix

  • fix corrupted filenames if cwd == "/"
  • cannot use string formatter in outputReport
  • no Output Report in File when build fails under webpack 4
  • add posibility to use absolute file path in outputReport.filePath
  • it should be possible to use absolute file path in outputReport.filePath
  • try load official formatter (#285) (997cce5)
  • emit warning/error if no config was found/given (#286) (4204560)

... (truncated)

Changelog

Sourced from eslint-loader's changelog.

4.0.2 (2020-04-24)

Bug Fixes

4.0.1 (2020-04-24)

Refactor

4.0.0 (2020-04-03)

Breaking Changes

  • drop support for Node < 10.13.0
  • minimum supported eslint version is 6

3.0.4 (2020-04-02)

Bug Fixes

3.0.3 (2019-12-06)

Bug Fixes

3.0.2 (2019-09-27)

Bug Fixes

3.0.1 (2019-09-25)

Bug Fixes

  • module build failed error at Linter.parseResults (#294) (360e69c)

... (truncated)

Commits

Updates file-loader from 3.0.1 to 6.2.0

Release notes

Sourced from file-loader's releases.

v6.2.0

6.2.0 (2020-10-27)

Features

  • added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

  • immutable flag when the name option have hash in query string (#392) (381d8bd)

v6.1.1

6.1.1 (2020-10-09)

Chore

  • update schema-utils

v6.1.0

6.1.0 (2020-08-31)

Features

v6.0.0

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

v5.1.0

5.1.0 (2020-02-19)

Features

  • support the query template for the name option (#366) (cd8698b)

v5.0.2

5.0.2 (2019-11-25)

Chore

... (truncated)

Changelog

Sourced from file-loader's changelog.

6.2.0 (2020-10-27)

Features

  • added the sourceFilename property to asset info with original filename (#393) (654e0d6)

Bug Fixes

  • immutable flag when the name option have hash in query string (#392) (381d8bd)

6.1.1 (2020-10-09)

Chore

  • update schema-utils

6.1.0 (2020-08-31)

Features

6.0.0 (2020-03-17)

⚠ BREAKING CHANGES

5.1.0 (2020-02-19)

Features

  • support the query template for the name option (#366) (cd8698b)

5.0.2 (2019-11-25)

Chore

  • add the funding field in package.json

5.0.1 (2019-11-25)

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates html-webpack-plugin from 4.0.0-beta.5 to 5.6.8

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.8 (2026-07-25)

Bug Fixes

  • extend @​rspack/core peer dependency range (#1893) (8057b14)

5.6.7 (2026-04-17)

Bug Fixes

5.6.6 (2026-01-16)

Bug Fixes

5.6.5 (2025-11-18)

Bug Fixes

5.6.4 (2025-08-14)

Bug Fixes

  • compilation.errors should contain Error objects (#1877) (b733b1a)

5.6.3 (2024-10-23)

Bug Fixes

5.6.2 (2024-10-17)

Bug Fixes

5.6.1 (2024-10-17)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates mini-css-extract-plugin from 0.5.0 to 2.10.2

Release notes

Sourced from mini-css-extract-plugin's releases.

v2.10.2

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.10.2 (2026-03-26)

Bug Fixes

  • use matchResource for importModule when available (#1162) (143693e)

v2.10.1

2.10.1 (2026-03-10)

Bug Fixes

  • handle null module.layer in renderContentAsset (#1159) (0233180)

v2.10.0

2.10.0 (2026-01-16)

Features

  • respect output.cssFilename and output.cssChunkFilename (#1151) (54f775d)

Bug Fixes

  • prevent generation of a contentHash for a chunk when the set of css modules is of size 0 (#1154) (4e4a95d)

v2.9.4

2.9.4 (2025-08-11)

Bug Fixes

v2.9.3

2.9.3 (2025-08-04)

Bug Fixes

  • should update initial chunks correctly with filename (dab023f)

v2.9.2

2.9.2 (2024-11-01)

... (truncated)

Changelog

Sourced from mini-css-extract-plugin's changelog.

2.10.2 (2026-03-26)

Bug Fixes

  • use matchResource for importModule when available (#1162) (143693e)

2.10.1 (2026-03-10)

Bug Fixes

  • handle null module.layer in renderContentAsset (#1159) (0233180)

2.10.0 (2026-01-16)

Features

  • respect output.cssFilename and output.cssChunkFilename (#1151) (54f775d)

Bug Fixes

  • prevent generation of a contentHash for a chunk when the set of css modules is of size 0 (#1154) (4e4a95d)

2.9.4 (2025-08-11)

Bug Fixes

2.9.3 (2025-08-04)

Bug Fixes

  • should update initial chunks correctly with filename (dab023f)

2.9.2 (2024-11-01)

Bug Fixes

2.9.1 (2024-08-19)

... (truncated)

Commits
Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates sass-loader from 7.1.0 to 17.0.0

Release notes

Sourced from sass-loader's releases.

v17.0.0

Major Changes

  • Add "auto" to the api option and make it the default. When the Sass implementation supports the modern compiler, "auto" enables it and reuses a single long-running compiler across files, which significantly improves build performance; otherwise it falls back to the modern API. (by @​alexander-akait in #1319)

  • Remove node-sass support. (by @​alexander-akait in #1316)

  • Minimum supported NodeJS version is 22.11.0. (by @​alexander-akait in #1318)

  • Convert source to native ECMAScript modules. The package now declares "type": "module" and exposes both an ESM and a CommonJS build via the exports field. CommonJS consumers continue to work via require, and ESM consumers can now import the loader directly. (by @​alexander-akait in #1322)

  • Remove legacy Sass JS API support. (by @​alexander-akait in #1316)

Minor Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

v16.0.8

16.0.8 (2026-05-08)

Bug Fixes

v16.0.7

16.0.7 (2026-02-05)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1291) (24d12ec)

v16.0.6

Bug Fixes

  • cache fs calls for modern API

v16.0.5

16.0.5 (2025-02-14)

Bug Fixes

  • allow to import CSS using @use with css extension (#1254) (3352e49)

v16.0.4

16.0.4 (2024-12-04)

... (truncated)

Changelog

Sourced from sass-loader's changelog.

17.0.0

Major Changes

  • Add "auto" to the api option and make it the default. When the Sass implementation supports the modern compiler, "auto" enables it and reuses a single long-running compiler across files, which significantly improves build performance; otherwise it falls back to the modern API. (by @​alexander-akait in #1319)

  • Remove node-sass support. (by @​alexander-akait in #1316)

  • Minimum supported NodeJS version is 22.11.0. (by @​alexander-akait in #1318)

  • Convert source to native ECMAScript modules. The package now declares "type": "module" and exposes both an ESM and a CommonJS build via the exports field. CommonJS consumers continue to work via require, and ESM consumers can now import the loader directly. (by @​alexander-akait in #1322)

  • Remove legacy Sass JS API support. (by @​alexander-akait in #1316)

Minor Changes

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

16.0.8 (2026-05-08)

Bug Fixes

16.0.7 (2026-02-05)

Bug Fixes

  • update peer dependency for @​rspack/core v2 (#1291) (24d12ec)

16.0.6 (2025-10-23)

Bug Fixes

  • cache fs calls for modern API

16.0.5 (2025-02-14)

Bug Fixes

  • allow to import CSS using @use with css extension (#1254) (3352e49)

16.0.4 (2024-12-04)

Bug Fixes

  • include sources map сontent for modern api by default (#1250) (70a10ff)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for sass-loader since your current version.

Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.


Updates style-loader from 0.23.1 to 4.0.0

Release notes

Sourced from style-loader's releases.

v4.0.0

4.0.0 (2024-04-08)

⚠ BREAKING CHANGES

  • minimum supported webpack version is 5.27.0
  • minimum support Node.js version is 18.12.0
  • the insert option can only be a selector or the path to the module

Migration:

Before:

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              injectType: "styleTag",
              styleTagTransform: function (css, style) {
                // Do something ...
                style.innerHTML = `${css}.modify{}\n`;
            document.head.appendChild(style);
          },
        },
      },
      &quot;css-loader&quot;,
    ],
  },
],

},
};

After:

insert-function.js

function insert(css, style) {
  var parent = options.target || document.head;
</tr></table> 

... (truncated)

Changelog

Sourced from style-loader's changelog.

4.0.0 (2024-04-08)

⚠ BREAKING CHANGES

  • minimum supported webpack version is 5.27.0
  • minimum support Node.js version is 18.12.0
  • the insert option can only be a selector or the path to the module

Migration:

Before:

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              injectType: "styleTag",
              styleTagTransform (css, style) {
                // Do something ...
                style.innerHTML = `${css}.modify{}\n`;
            document.head.appendChild(style);
          },
        },
      },
      &quot;css-loader&quot;,
    ],
  },
],

},
};

After:

insert-function.js

function insert(css, style) {
  const parent = options.target || document.head;
</tr></table>

... (truncated)

Commits

…html-webpack-plugin, mini-css-extract-plugin, sass-loader, style-loader, url-loader and webpack

Bumps [json5](https://github.com/json5/json5) to 2.2.3 and updates ancestor dependencies [json5](https://github.com/json5/json5), [@svgr/webpack](https://github.com/gregberge/svgr), [babel-loader](https://github.com/babel/babel-loader), [eslint-loader](https://github.com/webpack-contrib/eslint-loader), [file-loader](https://github.com/webpack-contrib/file-loader), [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin), [mini-css-extract-plugin](https://github.com/webpack/mini-css-extract-plugin), [sass-loader](https://github.com/webpack/sass-loader), [style-loader](https://github.com/webpack-contrib/style-loader), [url-loader](https://github.com/webpack-contrib/url-loader) and [webpack](https://github.com/webpack/webpack). These dependencies need to be updated together.


Updates `json5` from 2.2.0 to 2.2.3
- [Release notes](https://github.com/json5/json5/releases)
- [Changelog](https://github.com/json5/json5/blob/main/CHANGELOG.md)
- [Commits](json5/json5@v2.2.0...v2.2.3)

Updates `@svgr/webpack` from 4.1.0 to 8.1.0
- [Release notes](https://github.com/gregberge/svgr/releases)
- [Changelog](https://github.com/gregberge/svgr/blob/main/CHANGELOG.md)
- [Commits](gregberge/svgr@v4.1.0...v8.1.0)

Updates `babel-loader` from 8.0.5 to 8.4.1
- [Release notes](https://github.com/babel/babel-loader/releases)
- [Changelog](https://github.com/babel/babel-loader/blob/main/CHANGELOG.md)
- [Commits](babel/babel-loader@v8.0.5...v8.4.1)

Updates `eslint-loader` from 2.1.2 to 4.0.2
- [Release notes](https://github.com/webpack-contrib/eslint-loader/releases)
- [Changelog](https://github.com/webpack-contrib/eslint-loader/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/eslint-loader@2.1.2...v4.0.2)

Updates `file-loader` from 3.0.1 to 6.2.0
- [Release notes](https://github.com/webpack-contrib/file-loader/releases)
- [Changelog](https://github.com/webpack-contrib/file-loader/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/file-loader@v3.0.1...v6.2.0)

Updates `html-webpack-plugin` from 4.0.0-beta.5 to 5.6.8
- [Release notes](https://github.com/jantimon/html-webpack-plugin/releases)
- [Changelog](https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md)
- [Commits](https://github.com/jantimon/html-webpack-plugin/commits/v5.6.8)

Updates `mini-css-extract-plugin` from 0.5.0 to 2.10.2
- [Release notes](https://github.com/webpack/mini-css-extract-plugin/releases)
- [Changelog](https://github.com/webpack/mini-css-extract-plugin/blob/main/CHANGELOG.md)
- [Commits](webpack/mini-css-extract-plugin@v0.5.0...v2.10.2)

Updates `sass-loader` from 7.1.0 to 17.0.0
- [Release notes](https://github.com/webpack/sass-loader/releases)
- [Changelog](https://github.com/webpack/sass-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/sass-loader@v7.1.0...v17.0.0)

Updates `style-loader` from 0.23.1 to 4.0.0
- [Release notes](https://github.com/webpack-contrib/style-loader/releases)
- [Changelog](https://github.com/webpack/style-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/style-loader@v0.23.1...v4.0.0)

Updates `url-loader` from 1.1.2 to 4.1.1
- [Release notes](https://github.com/webpack-contrib/url-loader/releases)
- [Changelog](https://github.com/webpack-contrib/url-loader/blob/master/CHANGELOG.md)
- [Commits](webpack-contrib/url-loader@v1.1.2...v4.1.1)

Updates `webpack` from 4.29.6 to 5.109.1
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v4.29.6...v5.109.1)

---
updated-dependencies:
- dependency-name: json5
  dependency-version: 2.2.3
  dependency-type: indirect
- dependency-name: "@svgr/webpack"
  dependency-version: 8.1.0
  dependency-type: direct:production
- dependency-name: babel-loader
  dependency-version: 8.4.1
  dependency-type: direct:production
- dependency-name: eslint-loader
  dependency-version: 4.0.2
  dependency-type: direct:production
- dependency-name: file-loader
  dependency-version: 6.2.0
  dependency-type: direct:production
- dependency-name: html-webpack-plugin
  dependency-version: 5.6.8
  dependency-type: direct:production
- dependency-name: mini-css-extract-plugin
  dependency-version: 2.10.2
  dependency-type: direct:production
- dependency-name: sass-loader
  dependency-version: 17.0.0
  dependency-type: direct:production
- dependency-name: style-loader
  dependency-version: 4.0.0
  dependency-type: direct:production
- dependency-name: url-loader
  dependency-version: 4.1.1
  dependency-type: direct:production
- dependency-name: webpack
  dependency-version: 5.109.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants