Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency postcss-loader to v4 - autoclosed #1437

Closed

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Jun 2, 2022

This PR contains the following updates:

Package Type Update Change
postcss-loader dependencies major 3.0.0 -> 4.0.0

By merging this PR, the issue #1432 will be automatically resolved and closed:

Severity CVSS Score CVE Reachability
Critical Critical 9.8 CVE-2021-44906
High High 8.8 CVE-2022-46175

Release Notes

webpack-contrib/postcss-loader (postcss-loader)

v4.0.0

Compare Source

⚠ BREAKING CHANGES
  • minimum supported Node.js version is 10.13
  • minimum supported webpack version is 4
  • postcss was moved to peerDependencies, you need to install postcss
  • PostCSS (plugins/syntax/parser/stringifier) options was moved to the postcssOptions option, please look at docs
  • sourceMap default value depends on the compiler.devtool option
  • the inline value was removed for the sourceMap option, please use { map: { inline: true, annotation: false } } to achieve this
  • source maps contain absolute paths in sources
  • loader output only CSS, so you need to use css-loader/file-loader/raw-loader to inject code inside bundle
  • exec option was renamed to the execute option
  • the config option doesn't support Object type anymore, config.path and config.ctx options were removed
  • argument in the config for Function notation (previously config.ctx) was changed, now it contains { file, mode, webpackLoaderContext }
  • loader context in the config was renamed from webpack to webpackLoaderContext
Features
  • message API for emit assets (#​443) (e966ab9)
  • reuse AST from other loaders (#​468) (9b75888)
  • allows to use config and loader options together, options from the loader takes precedence over the config, the plugins option from the config and options are merged (0eb5aaf)
  • postcssOptions options can be Function
Bug Fixes
Notes
  • you don't need ident option for loader
  • Object syntax for the plugin option is soft deprecated, please migrate on Array syntax (plugins: ['postcss-preset-env', ['cssnano', options]])

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jun 2, 2022
@mend-for-github-com
Copy link
Author

mend-for-github-com bot commented Jun 2, 2022

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: yarn.lock
error @1.1.0: The engine "node" is incompatible with this module. Expected version ">= 12.0.0 < 15". Got "16.15.1"
error Found incompatible module.

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/postcss-loader-4.x branch 2 times, most recently from 353da0e to 09a94be Compare June 20, 2022 11:24
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/postcss-loader-4.x branch from 09a94be to 24e0bd9 Compare July 12, 2022 17:04
@mend-for-github-com mend-for-github-com bot changed the title Update dependency postcss-loader to v4 chore(deps): update dependency postcss-loader to v4 Sep 29, 2022
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency postcss-loader to v4 Update dependency postcss-loader to v4 Oct 24, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency postcss-loader to v4 Update dependency postcss-loader to v4 - autoclosed Apr 29, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/postcss-loader-4.x branch April 29, 2024 18:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants