fix(deps): update js dependencies

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
@hot-loader/react-dom	16.10.2 → 16.14.0
dotenv	^8.0.0 → ^8.1.0
filesize (source)	4.1.2 → 4.2.1
js-yaml	3.13.1 → 3.14.2
react (source)	16.8.6 → 16.14.0
react-dom (source)	16.8.6 → 16.14.0
searchkit (source)	2.3.0 → 2.4.4
webpack	^4 → ^4.41.0
webpack-cli (source)	^3 → ^3.3.9
webpack-dev-server	^3 → ^3.8.2

---

Release Notes

motdotla/dotenv (dotenv)

v8.6.0

Compare Source

Added

• define package.json in exports

v8.5.1

Compare Source

Changed

• updated dev dependencies via npm audit

v8.5.0

Compare Source

Added

• allow for import "dotenv/config"

v8.4.0

Compare Source

Changed

• point to exact types file to work with VS Code

v8.3.0

Compare Source

Changed

• Breaking: drop support for Node v8 (mistake to be released as minor bump. later bumped to 9.0.0. see above.)

v8.2.0

Compare Source

Added

• TypeScript types

avoidwork/filesize.js (filesize)

v4.2.1

Compare Source

25 September 2019

• Fixing case where rounding results in the wrong exponent, fixes #​103 #103
• Updating travis-ci.org config 5b362af

v4.2.0

Compare Source

11 September 2019

• Add support for localeOptions option: allow customization of i18n output #102
• Bump mixin-deep from 1.3.1 to 1.3.2 #101
• Bump eslint-utils from 1.3.1 to 1.4.2 #99
• Updating dependencies, version bump to release #​102 ab80f87
• add support for localeOptions 6505945
• build b9f7fb4

nodeca/js-yaml (js-yaml)

v3.14.2

Compare Source

Security

• Backported v4.1.1 fix to v3

v3.14.1

Compare Source

Security

• Fix possible code execution in (already unsafe) .load() (in &anchor).

v3.14.0

Compare Source

Changed

• Support safe/loadAll(input, options) variant of call.
• CI: drop outdated nodejs versions.
• Dev deps bump.

Fixed

• Quote = in plain scalars #​519.
• Check the node type for !<?> tag in case user manually specifies it.
• Verify that there are no null-bytes in input.
• Fix wrong quote position when writing condensed flow, #​526.

facebook/react (react)

v16.14.0

Compare Source

React

• Add support for the new JSX transform. (@​lunaruan in #​18299)

v16.13.1

Compare Source

React DOM

• Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (@​acdlite in #​18238)
• Revert warning for cross-component updates that happen inside class render lifecycles (componentWillReceiveProps, shouldComponentUpdate, and so on). (@​gaearon in #​18330)

v16.13.0

Compare Source

React

• Warn when a string ref is used in a manner that's not amenable to a future codemod (@​lunaruan in #​17864)
• Deprecate React.createFactory() (@​trueadm in #​17878)

React DOM

• Warn when changes in style may cause an unexpected collision (@​sophiebits in #​14181, #​18002)
• Warn when a function component is updated during another component's render phase (@​acdlite in #​17099)
• Deprecate unstable_createPortal (@​trueadm in #​17880)
• Fix onMouseEnter being fired on disabled buttons (@​AlfredoGJ in #​17675)
• Call shouldComponentUpdate twice when developing in StrictMode (@​bvaughn in #​17942)
• Add version property to ReactDOM (@​ealush in #​15780)
• Don't call toString() of dangerouslySetInnerHTML (@​sebmarkbage in #​17773)
• Show component stacks in more warnings (@​gaearon in #​17922, #​17586)

Concurrent Mode (Experimental)

• Warn for problematic usages of ReactDOM.createRoot() (@​trueadm in #​17937)
• Remove ReactDOM.createRoot() callback params and added warnings on usage (@​bvaughn in #​17916)
• Don't group Idle/Offscreen work with other work (@​sebmarkbage in #​17456)
• Adjust SuspenseList CPU bound heuristic (@​sebmarkbage in #​17455)
• Add missing event plugin priorities (@​trueadm in #​17914)
• Fix isPending only being true when transitioning from inside an input event (@​acdlite in #​17382)
• Fix React.memo components dropping updates when interrupted by a higher priority update (@​acdlite in #​18091)
• Don't warn when suspending at the wrong priority (@​gaearon in #​17971)
• Fix a bug with rebasing updates (@​acdlite and @​sebmarkbage in #​17560, #​17510, #​17483, #​17480)

v16.12.0

Compare Source

React DOM

• Fix passive effects (useEffect) not being fired in a multi-root app. (@​acdlite in #​17347)

React Is

• Fix lazy and memo types considered elements instead of components (@​bvaughn in #​17278)

v16.11.0

Compare Source

React DOM

• Fix mouseenter handlers from firing twice inside nested React containers. @​yuanoook in #​16928
• Remove unstable_createRoot and unstable_createSyncRoot experimental APIs. (These are available in the Experimental channel as createRoot and createSyncRoot.) (@​acdlite in #​17088)

v16.10.2

Compare Source

React DOM

• Fix regression in react-native-web by restoring order of arguments in event plugin extractors (@​necolas in #​16978)

v16.10.1

Compare Source

React DOM

• Fix regression in Next.js apps by allowing Suspense mismatch during hydration to silently proceed (@​sebmarkbage in #​16943)

v16.10.0

Compare Source

React DOM

• Fix edge case where a hook update wasn't being memoized. (@​sebmarkbage in #​16359)
• Fix heuristic for determining when to hydrate, so we don't incorrectly hydrate during an update. (@​sebmarkbage in #​16739)
• Clear additional fiber fields during unmount to save memory. (@​trueadm in #​16807)
• Fix bug with required text fields in Firefox. (@​halvves in #​16578)
• Prefer Object.is instead of inline polyfill, when available. (@​ku8ar in #​16212)
• Fix bug when mixing Suspense and error handling. (@​acdlite in #​16801)

Scheduler (Experimental)

• Improve queue performance by switching its internal data structure to a min binary heap. (@​acdlite in #​16245)
• Use postMessage loop with short intervals instead of attempting to align to frame boundaries with requestAnimationFrame. (@​acdlite in #​16214)

useSubscription

• Avoid tearing issue when a mutation happens and the previous update is still in progress. (@​bvaughn in #​16623)

v16.9.0

Compare Source

React

• Add <React.Profiler> API for gathering performance measurements programmatically. (@​bvaughn in #​15172)
• Remove unstable_ConcurrentMode in favor of unstable_createRoot. (@​acdlite in #​15532)

React DOM

• Deprecate old names for the UNSAFE_* lifecycle methods. (@​bvaughn in #​15186 and @​threepointone in #​16103)
• Deprecate javascript: URLs as a common attack surface. (@​sebmarkbage in #​15047)
• Deprecate uncommon "module pattern" (factory) components. (@​sebmarkbage in #​15145)
• Add support for the disablePictureInPicture attribute on <video>. (@​eek in #​15334)
• Add support for onLoad event for <embed>. (@​cherniavskii in #​15614)
• Add support for editing useState state from DevTools. (@​bvaughn in #​14906)
• Add support for toggling Suspense from DevTools. (@​gaearon in #​15232)
• Warn when setState is called from useEffect, creating a loop. (@​gaearon in #​15180)
• Fix a memory leak. (@​paulshen in #​16115)
• Fix a crash inside findDOMNode for components wrapped in <Suspense>. (@​acdlite in #​15312)
• Fix pending effects from being flushed too late. (@​acdlite in #​15650)
• Fix incorrect argument order in a warning message. (@​brickspert in #​15345)
• Fix hiding Suspense fallback nodes when there is an !important style. (@​acdlite in #​15861 and #​15882)
• Slightly improve hydration performance. (@​bmeurer in #​15998)

React DOM Server

• Fix incorrect output for camelCase custom CSS property names. (@​bedakb in #​16167)

React Test Utilities and Test Renderer

• Add act(async () => ...) for testing asynchronous state updates. (@​threepointone in #​14853)
• Add support for nesting act from different renderers. (@​threepointone in #​16039 and #​16042)
• Warn in Strict Mode if effects are scheduled outside an act() call. (@​threepointone in #​15763 and #​16041)
• Warn when using act from the wrong renderer. (@​threepointone in #​15756)

ESLint Plugin: React Hooks

• Report Hook calls at the top level as a violation. (gaearon in #​16455)

searchkit/searchkit (searchkit)

v2.4.4

Compare Source

v2.4.3

Compare Source

v2.4.1

Compare Source

v2.4.0

Compare Source

v2.3.2

Compare Source

webpack/webpack (webpack)

v4.47.0

Compare Source

New Features

• [Security] - Add support for md4 in Node >=18. by @​iclanton in #​17628

New Contributors

• @​iclanton made their first contribution in #​17628

Full Changelog: webpack/webpack@v4.46.0...v4.47.0

v4.46.0

Compare Source

Bugfixes

• fix behavior of defaults for resolve.roots to be backward-compatible

v4.45.0

Compare Source

Features

• resolve server-relative requests relative to project context by default

Bugfixes

• fix a bug where splitChunk minSize is not handled correctly
• fix a bug where the order of splitChunk cacheGroups is not handled correctly

v4.44.2

Compare Source

Bugfixes

• make sure to generate correct chunk connection for blocks that are only connected in some runtimes
  • fixes a bug where filename contains undefined hash at runtime

v4.44.1

Compare Source

Bugfixes

• fix bug in sideEffects optimization when using export * from "non-esm" and a default export.
• add missing optional peerDependencies for webpack-cli and webpack-command to support Yarn 2

v4.44.0

Compare Source

Features

• Improve sideEffects flag behavior when dynamic modules are part of the tree
  • Fixes a bug which causes empty modules (or type-only modules) to "break" Tree Shaking
• add splitChunks.enforceSizeThreshold to allow enfore splitting larger chunks unrelated from other limiations
  • Not set by default to avoid breaking change
  • It will be set by default to 50k in webpack 5
  • It's recommended to set it in webpack 4 too
• add support for resolve.roots and default resolve.roots: [context]
  • This allows to resolve server-relative urls (e.g. /src/abc) to the project root (or other locations when configured)
  • This allows to use loaders that rely on that behavior

Bugfixes

• fix bug where splitChunks produced non-optimal results when minSize is set to 0
  • This lead to NaNs in some places which breaks ordering
• Fix bug which lead to HMR not working for splitChunks in entrypoints
• force update watchpack and chokidar for chokidar bugfix which causes files to stop being watched

v4.43.0

Compare Source

Features

• add module.hot.invalidate() to HMR API

Dependencies

• push versions for forced security updates

v4.42.1

Compare Source

Bugfixes

• update webassemblyjs dependencies for instruction update
• update mkdirp dependency for security reasons

v4.42.0

Compare Source

Bugfixes

• Disable constant replacements in "use asm" scope
• Update schema to disallow functions for output.hotUpdateChunkFilename as this doesn't work
• Hoist exports in concatenated module to handle circular references with non-concatenated modules correctly
• Flag all modules as used in DLLs to fix missing exports

v4.41.6

Compare Source

Bugfixes

• Windows network paths are considered as absolute paths
• fix hanging of FlagDependencyExportsPlugin when using export * in a circular matter

v4.41.5

Compare Source

Bugfixes

• handle relative paths with webpack:// prefix in SourceMaps correctly
• fixes a non-determinism about providedExports with export * which caused changing module hashes and unnecessary HMR invalidation

v4.41.4

Compare Source

Bugfixes

• fix case where __webpack_require__.e is not a function when using module concatenation
• fix incorrect imported module when using sideEffects in a certain constellation of export names

Performance

• lazy-require Webassembly related modules for improved startup performance

v4.41.3

Compare Source

Security

• force upgrade terser-webpack-plugin dependency for security fix (not affecting webpack)

Funding

• add npm funding field to package.json

v4.41.2

Compare Source

Bugfixes

• fix issue with invalide timezone

v4.41.1

Compare Source

Bugfixes

• fix incorrect request shortening when directory looks similar to parent directory
• fix crash when timezone is unknown

webpack/webpack-cli (webpack-cli)

v3.3.12

Compare Source

Full Changelog

v3.3.11

Compare Source

Full Changelog

v3.3.10

Compare Source

Full Changelog

webpack/webpack-dev-server (webpack-dev-server)

v3.11.3

Compare Source

3.11.3 (2021-11-08)

Bug Fixes

• replace ansi-html with ansi-html-community (#​4011) (4fef67b)

v3.11.2

Compare Source

3.11.2 (2021-01-13)

Bug Fixes

• cli arguments for serve command (a5fe337)

v3.11.1

Compare Source

3.11.1 (2020-12-29)

Bug Fixes

• the open option works using webpack serve without value (#​2948) (4837dc9)
• vulnerable deps (#​2949) (78dde50)

v3.11.0

Compare Source

Features

• add icons for directory viewer (#​2441) (e953d01)
• allow multiple contentBasePublicPath paths (#​2489) (c6bdfe4)
• emit progress-update (#​2498) (4808abd), closes #​1666
• add invalidate endpoint (#​2493) (89ffb86)
• allow open option to accept an object (#​2492) (adeb92e)

Bug Fixes

• do not swallow errors from server (#​2512) (06583f2)
• security vulnerability in yargs-parser (#​2566) (41d1d0c)
• don't crash on setupExitSignals(undefined) (#​2507) (0d5c681)
• support entry descriptor (closes #​2453) (#​2465) (8bbef6a)
• update jquery (#​2516) (99ccfd8)

3.10.3 (2020-02-05)

Bug Fixes

• forward error requests to the proxy (#​2425) (e291cd4)

3.10.2 (2020-01-31)

Bug Fixes

• fallthrough non GET and HEAD request to routes (#​2374) (ebe8eca)
• add an optional peer dependency on webpack-cli (#​2396) (aa365df)
• add heartbeat for the websocket server (#​2404) (1a7c827)

3.10.1 (2019-12-19)

Bug Fixes

• ie11 compatibility (1306abe)

v3.10.3

Compare Source

Features

• add icons for directory viewer (#​2441) (e953d01)
• allow multiple contentBasePublicPath paths (#​2489) (c6bdfe4)
• emit progress-update (#​2498) (4808abd), closes #​1666
• add invalidate endpoint (#​2493) (89ffb86)
• allow open option to accept an object (#​2492) (adeb92e)

Bug Fixes

• do not swallow errors from server (#​2512) (06583f2)
• security vulnerability in yargs-parser (#​2566) (41d1d0c)
• don't crash on setupExitSignals(undefined) (#​2507) (0d5c681)
• support entry descriptor (closes #​2453) (#​2465) (8bbef6a)
• update jquery (#​2516) (99ccfd8)

3.10.3 (2020-02-05)

Bug Fixes

• forward error requests to the proxy (#​2425) (e291cd4)

3.10.2 (2020-01-31)

Bug Fixes

• fallthrough non GET and HEAD request to routes (#​2374) (ebe8eca)
• add an optional peer dependency on webpack-cli (#​2396) (aa365df)
• add heartbeat for the websocket server (#​2404) (1a7c827)

3.10.1 (2019-12-19)

Bug Fixes

• ie11 compatibility (1306abe)

v3.10.2

Compare Source

Features

• add icons for directory viewer (#​2441) (e953d01)
• allow multiple contentBasePublicPath paths (#​2489) (c6bdfe4)
• emit progress-update (#​2498) (4808abd), closes #​1666
• add invalidate endpoint (#​2493) (89ffb86)
• allow open option to accept an object (#​2492) (adeb92e)

Bug Fixes

• do not swallow errors from server (#​2512) (06583f2)
• security vulnerability in yargs-parser (#​2566) (41d1d0c)
• don't crash on setupExitSignals(undefined) (#​2507) (0d5c681)
• support entry descriptor (closes #​2453) (#​2465) (8bbef6a)
• update jquery (#​2516) (99ccfd8)

3.10.3 (2020-02-05)

Bug Fixes

• forward error requests to the proxy (#​2425) (e291cd4)

3.10.2 (2020-01-31)

Bug Fixes

• fallthrough non GET and HEAD request to routes (#​2374) (ebe8eca)
• add an optional peer dependency on webpack-cli (#​2396) (aa365df)
• add heartbeat for the websocket server (#​2404) (1a7c827)

3.10.1 (2019-12-19)

Bug Fixes

• ie11 compatibility (1306abe)

v3.10.1

Compare Source

Features

• add icons for directory viewer (#​2441) (e953d01)
• allow multiple contentBasePublicPath paths (#​2489) (c6bdfe4)
• emit progress-update (#​2498) (4808abd), closes #​1666
• add invalidate endpoint (#​2493) (89ffb86)
• allow open option to accept an object (#​2492) (adeb92e)

Bug Fixes

• do not swallow errors from server (#​2512) (06583f2)
• security vulnerability in yargs-parser (#​2566) (41d1d0c)
• don't crash on setupExitSignals(undefined) (#​2507) (0d5c681)
• support entry descriptor (closes #​2453) (#​2465) (8bbef6a)
• update jquery (#​2516) (99ccfd8)

3.10.3 (2020-02-05)

Bug Fixes

• forward error requests to the proxy (#​2425) (e291cd4)

3.10.2 (2020-01-31)

Bug Fixes

• fallthrough non GET and HEAD request to routes (#​2374) (ebe8eca)
• add an optional peer dependency on webpack-cli (#​2396) (aa365df)
• add heartbeat for the websocket server (#​2404) (1a7c827)

3.10.1 (2019-12-19)

Bug Fixes

• ie11 compatibility (1306abe)

v3.10.0

Compare Source

Features

• add icons for directory viewer (#​2441) (e953d01)
• allow multiple contentBasePublicPath paths (#​2489) (c6bdfe4)
• emit progress-update (#​2498) (4808abd), closes #​1666
• add invalidate endpoint (#​2493) (89ffb86)
• allow open option to accept an object (#​2492) (adeb92e)

Bug Fixes

• do not swallow errors from server (#​2512) (06583f2)
• security vulnerability in yargs-parser (#​2566) (41d1d0c)
• don't crash on setupExitSignals(undefined) (#​2507) (0d5c681)
• support entry descriptor (closes #​2453) (#​2465) (8bbef6a)
• update jquery (#​2516) (99ccfd8)

3.10.3 (2020-02-05)

Bug Fixes

• forward error requests to the proxy (#​2425) (e291cd4)

3.10.2 (2020-01-31)

Bug Fixes

• fallthrough non GET and HEAD request to routes (#​2374) (ebe8eca)
• add an optional peer dependency on webpack-cli (#​2396) (aa365df)
• add heartbeat for the websocket server (#​2404) (1a7c827)

3.10.1 (2019-12-19)

Bug Fixes

• ie11 compatibility (1306abe)

v3.9.0

Compare Source

Bug Fixes

• add hostname and port to bonjour name to prevent name collisions (#​2276) (d8af2d9)
• add extKeyUsage to self-signed cert (#​2274) (a4dbc3b)

Features

• add multiple openPage support (#​2266) (c9e9178)

3.8.2 (2019-10-02)

Security

• update selfsigned package

3.8.1 (2019-09-16)

Bug Fixes

• add null check for connection.headers (#​2200) (7964997)
• false positive for an absolute path in the ContentBase option on windows (#​2202) (68ecf78)
• add status in quiet log level ([#​2235](https://redirect.github.com/webpack/webpack-dev

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 06:59 AM, only on Thursday ( * 0-6 * * 4 ) in timezone UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.