[Snyk] Upgrade css-loader from 6.3.0 to 6.7.3

[bcopy]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade css-loader from 6.3.0 to 6.7.3.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released 2 months ago, on 2022-12-14.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-NANOID-2332193	307/1000 Why? Proof of Concept exploit, CVSS 4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: css-loader

• 6.7.3 - 2022-12-14
  

  6.7.3 (2022-12-14)

  Bug Fixes

  • remove sourceURL from emitted CSS (#1487) (962924c)
• 6.7.2 - 2022-11-13
  

  6.7.2 (2022-11-13)

  Bug Fixes

  • css modules generation with inline syntax (#1480) (2f4c273)
• 6.7.1 - 2022-03-08
  

  6.7.1 (2022-03-08)

  Bug Fixes

  • defaultGetLocalIdent export (#1427) (74dac1e)
• 6.7.0 - 2022-03-04
  

  6.7.0 (2022-03-04)

  Features

  • re-export defaultGetLocalIdent (#1423) (207cf36)
• 6.6.0 - 2022-02-02
  

  6.6.0 (2022-02-02)

  Features

  • added the hashStrategy option (ca4abce)
• 6.5.1 - 2021-11-03
  

  6.5.1 (2021-11-03)

  Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)
• 6.5.0 - 2021-10-26
  

  6.5.0 (2021-10-26)

  Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

  Bug Fixes

  • respect nosources in the devtool option (c60eff2)
• 6.4.0 - 2021-10-09
  

  6.4.0 (2021-10-09)

  Features

  • generate more collision resistant for locals (c7db752)

  Bug Fixes

  • classes generation for client and server bundling (303a3a1)
• 6.3.0 - 2021-09-18
  

  6.3.0 (2021-09-18)

  Features

  • added [folder] placeholder (a0dee4f)
  • added the exportType option with 'array', 'string' and 'css-style-sheet' values (c6d2066)
    • 'array' - the default export is Array with API for style-loader and other
    • 'string' - the default export is String you don't need to-string-loader loader anymore
    • 'css-style-sheet' - the default export is a constructable stylesheet, you can use import sheet from './styles.css' assert { type: 'css' }; like in a browser, more information you can find here
  • supported supports() and layer() functions in @ import at-rules (#1377) (bce2c17)
  • fix multiple merging multiple @ media at-rules (#1377) (bce2c17)

  Bug Fixes

  • reduce runtime (#1378) (cf3a3a7)

from css-loader GitHub release notes

Commit messages

Package name: css-loader

• ef749f2 chore(release): 6.7.3
• 36fb945 chore: fix cspell
• 962924c fix: remove `sourceURL` from emitted CSS (#1487)
• 3f3f302 chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)
• 04ca713 chore: update dependencies to the latest version (#1485)
• 9449827 chore: update styfle/cancel-workflow-action (#1484)
• 6c67af8 chore: add cSpell to check spelling issues (#1482)
• 239b9ac chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)
• 394d200 chore(release): 6.7.2
• 2f4c273 fix: css modules generation with inline syntax (#1480)
• 7c5cdcc chore(deps): bump loader-utils from 2.0.2 to 2.0.3 (#1479)
• d5bc6ea chore: update dependencies to the latest version (#1478)
• 85b6bf7 ci: add node v19 (#1477)
• 0f85c5b chore: update dependencies to the latest version (#1474)
• 560c05f ci: add dependency review action (#1476)
• cc4e08f chore: update commitlint action (#1473)
• 9846913 chore: run cancel workflow on pull request (#1472)
• 845718c chore: update jest to the latest version (#1471)
• cd22aee ci: add minimum GitHub token permissions for workflows (#1470)
• 57ebc7a chore: upgrade dependencies to the latest version (#1466)
• 3cbad30 ci: add job to cancel previous runs (#1464)
• 441a5ed chore(deps): bump terser from 5.10.0 to 5.14.2 (#1462)
• 3e7294c ci: add GitHub token permissions for workflow (#1463)
• 00c8320 chore: update dependencies to the latest version (#1461)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs