chore(deps): bump loader-utils, favicons-webpack-plugin, html-webpack-plugin, vue-markdown-loader and webpack

[dependabot]

Bumps loader-utils to 1.4.2 and updates ancestor dependencies loader-utils, favicons-webpack-plugin, html-webpack-plugin, vue-markdown-loader and webpack. These dependencies need to be updated together.

Updates loader-utils from 1.1.0 to 1.4.2

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

• ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

• security problem (#220) (4504e34)

v1.4.0

1.4.0 (2020-02-19)

Features

• the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020-02-19)

Features

• support the [query] template for the interpolatedName method (#162) (469eeba)

v1.2.3

1.2.3 (2018-12-27)

Bug Fixes

• interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

v1.2.2

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

• ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

• security problem (#220) (4504e34)

1.4.0 (2020-02-19)

Features

• the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

Features

• support the [query] template for the interpolatedName method (#162) (469eeba)

1.2.3 (2018-12-27)

Bug Fixes

• interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Commits

• 331ad50 chore(release): 1.4.2
• 17cbf8f fix: ReDoS problem (#226)
• 8f082b3 chore(release): 1.4.1
• 4504e34 fix: security problem (#220)
• d95b8b5 chore(release): 1.4.0
• cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)
• 06d36cf chore(release): 1.3.0
• 469eeba feat: support the [query] template for the interpolatedName method (#162)
• 909c99d chore: funding.yml config and CI fix (#159)
• b5b74f0 Set up CI with Azure Pipelines
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.

Updates favicons-webpack-plugin from 0.0.7 to 6.0.0-alpha.2

Changelog

Sourced from favicons-webpack-plugin's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.0.0-alpha.1 (2022-10-02)

• Upgrage favicons to v7.0.1
• Upgrade all dependencies to their latest versions

5.0.2 (2021-02-23)

Bug Fixes

• ignore empty tags generated by favicons (5f94f54), closes #260

5.0.1 (2021-02-04)

Bug Fixes

• remove unused dependencies (f3c5b17)

5.0.0 (2021-02-03)

⚠ BREAKING CHANGES

• file based cache will only work if you configure webpacks filesystem cache
• favicons needs to be installed separately
• drop webpack@4 support

Features

• add manifest option (e2928c4)
• add support for webpack 5 publicPath 'auto' and relative favicons (7293186)
• generate custom manifest in light mode (db677fc)
• turn favicons into a peer dependency (8141094)
• use the processAssets webpack api to add assets (d15d92f)
• use webpack 5 cache system and remove child compilation (c1dc12c)

Bug Fixes

• add support for content hash for light and webapp mode (8d4cead)
• add support for webpack@5 'auto' publicPath (30c0d35)
• allow compiling multiple icon sets (03c3514)
• extract the cache (17721f0)
• prevent recompilations (af5897a)
• resolve correct result if filesnapshot is out of date (98e27b5)

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by andy128k, a new releaser for favicons-webpack-plugin since your current version.

Updates html-webpack-plugin from 2.30.1 to 5.5.0

Changelog

Sourced from html-webpack-plugin's changelog.

5.5.0 (2021-10-25)

Features

• Support type=module via scriptLoading option (1e42625), closes #1663

5.4.0 (2021-10-15)

Features

• update terser (9c7fba0

5.3.2 (2021-06-22)

Bug Fixes

• update lodash and pretty error (9c7fba0

5.3.1 (2021-03-09)

Bug Fixes

• remove loader-utils from plugin core (82d0ee8)

5.3.0 (2021-03-07)

Features

• allow to modify the interpolation options in webpack config (d654f5b)
• drop loader-utils dependency (41d7a50)

5.2.0 (2021-02-19)

Features

• improve ssr (73d2a66)

5.1.0 (2021-02-12)

Features

• omit html tag attribute with null/undefined/false value (aa6e78d), closes #1598

5.0.0 (2021-02-03)

... (truncated)

Commits

• 873d75b chore(release): 5.5.0
• ddeb774 chore: update examples
• 1e42625 feat: Support type=module via scriptLoading option
• 7d3645b Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807
• 79be779 [chore] changes actions to run on pull_requests
• b7e5859 [chore] fixes CI to avoid race conditions
• 48131d3 chore(release): 5.4.0
• 16a841a [chore] rebuild examples
• 3bb7c17 Update index.js
• e38ac97 Update index.js
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jantimon, a new releaser for html-webpack-plugin since your current version.

Updates vue-markdown-loader from 1.0.0 to 2.5.0

Release notes

Sourced from vue-markdown-loader's releases.

2.0.0

Breaking change

• Automatic extract script and style tags from html token content #26

# Test
<div class="test">test</div>
&lt;style scoped&gt;
  .test {
    background-color: green;
  }
&lt;/style&gt;
&lt;div class=&quot;test&quot;&gt;test&lt;/div&gt;
`` `
</code></pre>
<p>to be compiled</p>
<pre lang="html"><code>&lt;style&gt;
.test[v-xxxx] {
background-color: green;
}
&lt;/style&gt;
&lt;h1&gt;Test&lt;/h1&gt;
&lt;pre&gt;&lt;code&gt;
&lt;style scoped&gt;
.test {
background-color: green;
}
&lt;/style&gt;
&lt;div class=&quot;test&quot;&gt;test&lt;/div&gt;
&lt;/code&gt;&lt;/pre&gt;
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/85bbbf8efcdea1322b3f368d7258b2b431a13d57&quot;&gt;&lt;code&gt;85bbbf8&lt;/code&gt;&lt;/a> 2.5.0</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/30072a3684e7849992da69b4c572a23e6f6c06c8&quot;&gt;&lt;code&gt;30072a3&lt;/code&gt;&lt;/a> Update README.md</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/60eb5b2a20422f2856fcd770cf0fcd9d80a63aa8&quot;&gt;&lt;code&gt;60eb5b2&lt;/code&gt;&lt;/a> Fixed security vulnerabilities. (<a href="https://github-redirect.dependabot.com/QingWei-Li/vue-markdown-loader/issues/73&quot;&gt;#73&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/950418eac8c763d48abaf7bcb4957314394885ad&quot;&gt;&lt;code&gt;950418e&lt;/code&gt;&lt;/a> Update README.md</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/affbd773ce9b222ea89a111092426c1d297d2dc9&quot;&gt;&lt;code&gt;affbd77&lt;/code&gt;&lt;/a> Update README.md</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/b70d5ef29aeaa19b5cb145fc72ad7e4b11dce456&quot;&gt;&lt;code&gt;b70d5ef&lt;/code&gt;&lt;/a> Adds usage documentation for Vue CLI 3 (<a href="https://github-redirect.dependabot.com/QingWei-Li/vue-markdown-loader/issues/50&quot;&gt;#50&lt;/a&gt;)&lt;/li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/db0be4255397549aa4d5826e7ee30771055ac16a&quot;&gt;&lt;code&gt;db0be42&lt;/code&gt;&lt;/a> docs: fix config</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/50cd6bac4c14d7159686f3c2c8b9566e6618867a&quot;&gt;&lt;code&gt;50cd6ba&lt;/code&gt;&lt;/a> docs: update with vue-loader15</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/f7a874dc0b600d28cdf02bc552abb1cb86d59af7&quot;&gt;&lt;code&gt;f7a874d&lt;/code&gt;&lt;/a> docs: with vue-loader 15</li>
<li><a href="https://github.com/QingWei-Li/vue-markdown-loader/commit/94ba1f1c17fc643346cf66f8731239556e9333c4&quot;&gt;&lt;code&gt;94ba1f1&lt;/code&gt;&lt;/a> Release v2.4.1</li>
<li>Additional commits viewable in <a href="https://github.com/QingWei-Li/vue-markdown-loader/compare/v1.0.0...v2.5.0&quot;&gt;compare view</a></li>
</ul>
</details>
<br />

Updates webpack from 2.7.0 to 5.75.0

Release notes
Sourced from webpack's releases.

v5.75.0
Bugfixes

experiments.* normalize to false when opt-out
avoid NaN%
show the correct error when using a conflicting chunk name in code
HMR code tests existance of window before trying to access it
fix eval-nosources-* actually exclude sources
fix race condition where no module is returned from processing module
fix position of standalong semicolon in runtime code

Features

add support for @import to extenal CSS when using experimental CSS in node
add i64 support to the deprecated WASM implementation

Developer Experience

expose EnableWasmLoadingPlugin
add more typings
generate getters instead of readonly properties in typings to allow overriding them

v5.74.0
Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")


add support for ES2022 features like static blocks
add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive
make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules
remove left-over from debugging in TLA/async modules runtime code
remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed


fix shareScope option for ModuleFederationPlugin
set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance



Extensibility

export HarmonyImportDependency for plugins

v5.73.0


... (truncated)


Commits

8241da7 5.75.0
a91d923 Merge pull request #16458 from webpack/bugfix/semi
4608b11 Merge pull request #16457 from webpack/tooling/update
dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback
23b9a1c Merge pull request #16167 from exposir/fixts
6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose
f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64
761a542 fix semicolon position
2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources
c18203c update tooling
Additional commits viewable in compare view



Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
@dependabot use these labels will set the current labels as the default for future PRs for this repo and language
@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.