chore(deps): update dependency css-loader to v2

[mend-for-github-com]

This PR contains the following updates:

Package	Type	Update	Change
css-loader	devDependencies	major	^0.28.11 -> ^2.0.0

By merging this PR, the below vulnerabilities will be automatically resolved:

Severity	CVSS Score	CVE
High	8.1	WS-2019-0063
High	7.5	CVE-2021-23382
High	7.5	CVE-2021-28092
High	7.5	CVE-2021-29059
High	7.5	WS-2019-0032
High	7.5	WS-2021-0152

---

Release Notes

webpack-contrib/css-loader (css-loader)

v2.0.0

Compare Source

Bug Fixes

• broken unucode characters (#​850) (f599c70)
• correctly processing urls() with ?#hash (#​803) (417d105)
• don't break loader on invalid or not exists url or import token (#​827) (9e52d26)
• don't duplicate import with same media in different case (#​819) (9f66e33)
• emit warnings on broken import at-rules (#​806) (4bdf08b)
• handle uppercase URL in import at-rules (#​818) (3ebdcd5)
• inconsistent generate class names for css modules on difference os (#​812) (0bdf9b7)
• reduce number of require for urls() (#​854) (3338656)
• support deduplication of string module ids (optimization.namedModules) (#​789) (e3bb83a)
• support module resolution in composes (#​845) (453248f)
• same urls() resolving logic for modules (local and global) and without modules (#​843) (fdcf687)

Features

• allow to disable css modules and disable their by default (#​842) (889dc7f)
• disable import option doesn't affect on composes (#​822) (f9aa73c)
• allow to filter urls (#​856) (5e702e7)
• allow to filter import at-rules (#​857) (5e6034c)
• emit warning on invalid urls() (#​832) (da95db8)
• added exportOnlyLocals option (#​824) (e9327c0)
• reuse postcss ast from other loaders (i.e postcss-loader) (#​840) (1dad1fb)
• schema options (b97d997)

BREAKING CHANGES

• resolving logic for url() and import at-rules works the same everywhere, it does not matter whether css modules are enabled (with global and local module) or not. Examples - url('image.png') as require('./image.png'), url('./image.png') as require('./image.png'), url('~module/image.png') as require('module/image.png').
• by default css modules are disabled (now modules: false disable all css modules features), you can return old behaviour change this on modules: 'global'
• css-loader/locals was dropped in favor exportOnlyLocals option
• import option only affect on import at-rules and doesn't affect on composes declarations
• invalid @import at rules now emit warnings
• use postcss@7

1.0.1 (2018-10-29)

Bug Fixes

• loader: trim unquoted import urls (#​783) (21fcddf)

v1.0.1

Compare Source

Bug Fixes

• loader: trim unquoted import urls (#​783) (21fcddf)

v1.0.0

Compare Source

BREAKING CHANGES

• remove minimize option, use postcss-loader with cssnano or use optimize-cssnano-plugin plugin
• remove module option, use modules option instead
• remove camelcase option, use camelCase option instead
• remove root option, use postcss-loader with postcss-url plugin
• remove alias option, use resolve.alias feature or use postcss-loader with postcss-url plugin
• update postcss to 6 version
• minimum require nodejs version is 6.9
• minimum require webpack version is 4

0.28.11 (2018-03-16)

Bug Fixes

• lib/processCss: don't check mode for url handling (options.modules) (#​698) (c788450)

0.28.10 (2018-02-22)

Bug Fixes

• getLocalIdent: add rootContext support (webpack >= v4.0.0) (#​681) (9f876d2)

0.28.9 (2018-01-17)

Bug Fixes

• ignore invalid URLs (url()) (#​663) (d1d8221)

0.28.8 (2018-01-05)

Bug Fixes

• loader: correctly check if source map is undefined (#​641) (0dccfa9)
• proper URL escaping and wrapping (url()) (#​627) (8897d44)

0.28.7 (2017-08-30)

Bug Fixes

• pass resolver to localsLoader (options.alias) (#​601) (8f1b57c)

0.28.6 (2017-08-30)

Bug Fixes

• add support for aliases starting with / (options.alias) (#​597) (63567f2)

0.28.5 (2017-08-17)

Bug Fixes

• match mutliple dashes (options.camelCase) (#​556) (1fee601)
• stricter [@import](https://togithub.com/import) tolerance (#​593) (2e4ec09)

0.28.4 (2017-05-30)

Bug Fixes

• preserve leading underscore in class names (#​543) (f6673c8)

0.28.3 (2017-05-25)

Bug Fixes

• correct plugin order for CSS Modules (#​534) (b90f492)

0.28.2 (2017-05-22)

Bug Fixes

• source maps path on windows (#​532) (c3d0d91)

0.28.1 (2017-05-02)

Bug Fixes

• allow to specify a full hostname as a root URL (#​521) (06d27a1)
• case insensitivity of @​import (#​514) (de4356b)
• don't handle empty @​import and url() (#​513) (868fc94)
• imported variables are replaced in exports if followed by a comma (#​504) (956bad7)
• loader now correctly handles url with space(s) (#​495) (534ea55)
• url with a trailing space is now handled correctly (#​494) (e1ec4f2)
• use btoa instead Buffer (#​501) (fbb0714)

Performance Improvements

• generate source maps only when explicitly set (#​478) (b8f5c8f)

---

• If you want to rebase/retry this PR, check this box

[mend-for-github-com]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm WARN old lockfile 
npm WARN old lockfile The package-lock.json file was created with an old version of npm,
npm WARN old lockfile so supplemental metadata must be fetched from the registry.
npm WARN old lockfile 
npm WARN old lockfile This is a one-time fix-up, please be patient...
npm WARN old lockfile 
npm ERR! code ERESOLVE
npm ERR! ERESOLVE unable to resolve dependency tree
npm ERR! 
npm ERR! While resolving: [email protected]
npm ERR! Found: [email protected]
npm ERR! node_modules/webpack
npm ERR!   dev webpack@"^2.2.1" from the root project
npm ERR! 
npm ERR! Could not resolve dependency:
npm ERR! peer webpack@"^4.0.0" from [email protected]
npm ERR! node_modules/css-loader
npm ERR!   dev css-loader@"^2.0.0" from the root project
npm ERR! 
npm ERR! Fix the upstream dependency conflict, or retry
npm ERR! this command with --force or --legacy-peer-deps
npm ERR! to accept an incorrect (and potentially broken) dependency resolution.
npm ERR! 
npm ERR! 
npm ERR! For a full report see:
npm ERR! /tmp/renovate/cache/others/npm/_logs/2024-04-04T08_10_18_507Z-eresolve-report.txt

npm ERR! A complete log of this run can be found in: /tmp/renovate/cache/others/npm/_logs/2024-04-04T08_10_18_507Z-debug-0.log