Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency html-loader to v1 #37

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 22, 2022

This PR contains the following updates:

Package Type Update Change
html-loader devDependencies major ^0.5.5 -> ^1.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2022-37598

Release Notes

webpack-contrib/html-loader (html-loader)

v1.0.0

Compare Source

⚠ BREAKING CHANGES
  • for parsing HTML now we use htmlparser2 package
  • the attrs option was renamed to the attributes option
  • the interpolate option was removed, please consider migration on the preprocessor
  • the minimize option is true by default in production mode. You need to list all options for html-minifier if you use object notation.
  • uppercase tags and uppercase attributes are handled by default
  • the root option was moved under the attributes option, please look at the documentation
  • emit an error on broken HTML syntax when minimization is enabled
  • By default, now we process the following tags with attributes:
    • the src attribute of the audio tag
    • the src attribute of the embed tag
    • the src attribute of the img tag
    • the srcset attribute of the img tag
    • the src attribute of the input tag
    • the href attribute of the link tag (only for stylesheets)
    • the data attribute of the object tag
    • the src attribute of the script tag
    • the src attribute of the source tag
    • the srcset attribute of the source tag
    • the src attribute of the track tag
    • the poster attribute of the video tag
    • the src attribute of the video tag
  • the attributes option should be Boolean or Object, please look at the documentation
  • the exportAsDefault option were removed in favor the esModules option
  • the exportAsEs6Default option were removed in favor the esModules option
Features
  • handle more tags and attributes
  • added the preprocessor option
  • added the esModule option
  • add the rulFilter option for filtering some of urls, please look at the documentation
  • allow to setup how to handle and filter tags and attributes, please look at the documentation
  • improve error reporting
Bug Fixes
  • adding quotes when necessary for unquoted sources
  • do not handle empty attributes
  • escape \u2028 and \u2029 characters
  • handle only valid srcset tags
  • parser tags and attributes according spec
  • reduce import/require count
  • reduce size of generated modules
  • respect #hash in sources
  • support ES6 syntax in script tags when minimize
  • support ES6 import of urls

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Oct 22, 2022
@mend-for-github-com
Copy link
Author

mend-for-github-com bot commented Oct 22, 2022

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm WARN old lockfile 
npm WARN old lockfile The package-lock.json file was created with an old version of npm,
npm WARN old lockfile so supplemental metadata must be fetched from the registry.
npm WARN old lockfile 
npm WARN old lockfile This is a one-time fix-up, please be patient...
npm WARN old lockfile 
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/webpack
npm ERR!   dev webpack@"^2.2.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer webpack@"^4.0.0 || ^5.0.0" from [email protected]
npm ERR! node_modules/html-loader
npm ERR!   dev html-loader@"^1.0.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! 
npm ERR! For a full report see:
npm ERR! /tmp/renovate/cache/others/npm/_logs/2024-04-04T08_10_53_276Z-eresolve-report.txt

npm ERR! A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-04-04T08_10_53_276Z-debug-0.log

@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/html-loader-1.x branch from d9784c1 to bdc9d06 Compare December 4, 2022 10:55
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/html-loader-1.x branch from bdc9d06 to 4e9d59a Compare January 5, 2023 01:45
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 chore(deps): update dependency html-loader to v1 Jan 30, 2023
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency html-loader to v1 chore(deps): update dependency html-loader to v1 - autoclosed Mar 27, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/html-loader-1.x branch March 27, 2023 16:47
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency html-loader to v1 - autoclosed chore(deps): update dependency html-loader to v1 Mar 31, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/html-loader-1.x branch March 31, 2023 03:30
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency html-loader to v1 chore(deps): update dependency html-loader to v1 - autoclosed Jun 16, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/html-loader-1.x branch June 16, 2023 09:17
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency html-loader to v1 - autoclosed chore(deps): update dependency html-loader to v1 Jun 19, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 19, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/html-loader-1.x branch June 19, 2023 17:50
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/html-loader-1.x branch from 4e9d59a to 2746a61 Compare June 19, 2023 17:53
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency html-loader to v1 chore(deps): update dependency html-loader to v1 - autoclosed Apr 3, 2024
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/html-loader-1.x branch April 3, 2024 06:46
@mend-for-github-com mend-for-github-com bot changed the title chore(deps): update dependency html-loader to v1 - autoclosed chore(deps): update dependency html-loader to v1 Apr 4, 2024
@mend-for-github-com mend-for-github-com bot reopened this Apr 4, 2024
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/html-loader-1.x branch April 4, 2024 08:07
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/html-loader-1.x branch from 2746a61 to 537c908 Compare April 4, 2024 08:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants