[PR #389] [CLOSED] Bump css-loader from 3.6.0 to 5.0.0 #440

Closed
opened 2026-02-26 06:30:48 +03:00 by kerem · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/nextcloud/twofactor_gateway/pull/389
Author: @dependabot-preview[bot]
Created: 10/18/2020
Status: Closed

Base: masterHead: dependabot/npm_and_yarn/css-loader-5.0.0


📝 Commits (1)

  • 4fa7078 Bump css-loader from 3.6.0 to 5.0.0

📊 Changes

2 files changed (+125 additions, -94 deletions)

View changed files

📝 package-lock.json (+124 -93)
📝 package.json (+1 -1)

📄 Description

Bumps css-loader from 3.6.0 to 5.0.0.

Release notes

Sourced from css-loader's releases.

v5.0.0

⚠ BREAKING CHANGES

  • migrate on PostCSS 8
  • runtime doesn't contain source maps code without sourceMap: true
  • returned value from the getLocalIdent escapes by default, the exportName value is always unescaped
  • Auto enable icss modules for all files for which /\.icss\.\w+$/i is true (the modules.compileType option is icss)
  • [emoji] placeholder was deprecated
  • the icss option was removed (it was deprecated previously)

Features

  • allowed named exports to have underscores in names (#1209) (747d62b)
  • no warnings when you don't need handle url()/@import (#1195) (dd52931)
  • improved error message (52412f6)
  • reduced runtime (9f974be)
  • added fallback if custom getLocalIdent returns null/undefined (#1193) (0f95841)

v4.3.0

4.3.0 (2020-09-08)

Features

Bug Fixes

  • line breaks in the url function (88b8ddc)

v4.2.2

4.2.2 (2020-08-24)

Bug Fixes

  • source maps generation, source from source maps are now relative to compiler.context and use webpack:// protocol (#1169) (fb5c53d)

v4.2.1

4.2.1 (2020-08-06)

Bug Fixes

  • regression with the exportOnlyLocals option, now locals are not exported under the locals name, it was big regression, we apologize for that (24c0a12)

v4.2.0

4.2.0 (2020-07-31)

Changelog

Sourced from css-loader's changelog.

5.0.0 (2020-10-13)

⚠ BREAKING CHANGES

  • migrate on PostCSS 8
  • runtime doesn't contain source maps code without sourceMap: true
  • returned value from the getLocalIdent escapes by default, the exportName value is always unescaped
  • Auto enable icss modules for all files for which /\.icss\.\w+$/i (the modules.compileType option is icss)
  • [emoji] placeholder was deprecated
  • icss option was removed (it was deprecated previously)

Features

  • allow named exports to have underscores in names (#1209) (747d62b)
  • hide warning when you don't need handle url()/@import (#1195) (dd52931)
  • improve error message (52412f6)
  • reduce runtime (9f974be)
  • add fallback if custom getLocalIdent returns null/undefined (#1193) (0f95841)

4.3.0 (2020-09-08)

Features

Bug Fixes

  • line breaks in url function (88b8ddc)

4.2.2 (2020-08-24)

Bug Fixes

  • source maps generation, source from source maps are now relative to compiler.context and use webpack:// protocol (#1169) (fb5c53d)

4.2.1 (2020-08-06)

Bug Fixes

  • regression with the exportOnlyLocals option, now locals are not exported under the locals name, it was big regression, we apologize for that (24c0a12)

4.2.0 (2020-07-31)

Features

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes a major update to a production dependency.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Automerge options (never/patch/minor, and dev/runtime dependencies)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/nextcloud/twofactor_gateway/pull/389 **Author:** [@dependabot-preview[bot]](https://github.com/apps/dependabot-preview) **Created:** 10/18/2020 **Status:** ❌ Closed **Base:** `master` ← **Head:** `dependabot/npm_and_yarn/css-loader-5.0.0` --- ### 📝 Commits (1) - [`4fa7078`](https://github.com/nextcloud/twofactor_gateway/commit/4fa70784d8928c2ad37f8a039888917ef28c8dcd) Bump css-loader from 3.6.0 to 5.0.0 ### 📊 Changes **2 files changed** (+125 additions, -94 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+124 -93) 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 3.6.0 to 5.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/releases">css-loader's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li>migrate on PostCSS 8</li> <li>runtime doesn't contain source maps code without <code>sourceMap: true</code></li> <li>returned value from the <code>getLocalIdent</code> escapes by default, the <code>exportName</code> value is always unescaped</li> <li>Auto enable icss modules for all files for which <code>/\.icss\.\w+$/i</code> is <code>true</code> (the <code>modules.compileType</code> option is <code>icss</code>)</li> <li><code>[emoji]</code> placeholder was deprecated</li> <li>the <code>icss</code> option was removed (it was deprecated previously)</li> </ul> <h3>Features</h3> <ul> <li>allowed named exports to have underscores in names (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1209">#1209</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/747d62b75a878d8881f4819b96297667dc689b8f">747d62b</a>)</li> <li>no warnings when you don't need handle <code>url()</code>/<code>@import</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1195">#1195</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/dd52931150ed42f122d9017642437c26cc1b2422">dd52931</a>)</li> <li>improved error message (<a href="https://github.com/webpack-contrib/css-loader/commit/52412f6d5a54745ee37a4a67f038455c26ba5772">52412f6</a>)</li> <li>reduced runtime (<a href="https://github.com/webpack-contrib/css-loader/commit/9f974be81f5942d3afaf783529677bd541952fa3">9f974be</a>)</li> <li>added fallback if custom getLocalIdent returns <code>null</code>/<code>undefined</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1193">#1193</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/0f9584135e63f9f354043e7f414e0c1aad0edc6e">0f95841</a>)</li> </ul> <h2>v4.3.0</h2> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v4.2.2...v4.3.0">4.3.0</a> (2020-09-08)</h2> <h3>Features</h3> <ul> <li>the <code>importLoaders</code> option can be <code>string</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1178">#1178</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/ec58a7cfda46443e35539d66b86685195fa5db03">ec58a7c</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>line breaks in the <code>url</code> function (<a href="https://github.com/webpack-contrib/css-loader/commit/88b8ddc1d78a2b6a917ed2dfe2f2a37cf6a84190">88b8ddc</a>)</li> </ul> <h2>v4.2.2</h2> <h3><a href="https://github.com/webpack-contrib/css-loader/compare/v4.2.1...v4.2.2">4.2.2</a> (2020-08-24)</h3> <h3>Bug Fixes</h3> <ul> <li>source maps generation, source from source maps are now relative to <code>compiler.context</code> and use <code>webpack://</code> protocol (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1169">#1169</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/fb5c53d80b10ee698762238bb7b122aec8c5048d">fb5c53d</a>)</li> </ul> <h2>v4.2.1</h2> <h3><a href="https://github.com/webpack-contrib/css-loader/compare/v4.2.0...v4.2.1">4.2.1</a> (2020-08-06)</h3> <h3>Bug Fixes</h3> <ul> <li>regression with the <code>exportOnlyLocals</code> option, now <code>locals</code> are not exported under the <code>locals</code> name, it was big regression, we apologize for that (<a href="https://github.com/webpack-contrib/css-loader/commit/24c0a122d1396c08326a24f6184f5da09cf52ccc">24c0a12</a>)</li> </ul> <h2>v4.2.0</h2> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v4.1.1...v4.2.0">4.2.0</a> (2020-07-31)</h2> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md">css-loader's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v4.3.0...v5.0.0">5.0.0</a> (2020-10-13)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li>migrate on PostCSS 8</li> <li>runtime doesn't contain source maps code without <code>sourceMap: true</code></li> <li>returned value from the <code>getLocalIdent</code> escapes by default, the <code>exportName</code> value is always unescaped</li> <li>Auto enable icss modules for all files for which <code>/\.icss\.\w+$/i</code> (the <code>modules.compileType</code> option is <code>icss</code>)</li> <li><code>[emoji]</code> placeholder was deprecated</li> <li><code>icss</code> option was removed (it was deprecated previously)</li> </ul> <h3>Features</h3> <ul> <li>allow named exports to have underscores in names (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1209">#1209</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/747d62b75a878d8881f4819b96297667dc689b8f">747d62b</a>)</li> <li>hide warning when you don't need handle <code>url()</code>/<code>@import</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1195">#1195</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/dd52931150ed42f122d9017642437c26cc1b2422">dd52931</a>)</li> <li>improve error message (<a href="https://github.com/webpack-contrib/css-loader/commit/52412f6d5a54745ee37a4a67f038455c26ba5772">52412f6</a>)</li> <li>reduce runtime (<a href="https://github.com/webpack-contrib/css-loader/commit/9f974be81f5942d3afaf783529677bd541952fa3">9f974be</a>)</li> <li>add fallback if custom getLocalIdent returns <code>null</code>/<code>undefined</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1193">#1193</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/0f9584135e63f9f354043e7f414e0c1aad0edc6e">0f95841</a>)</li> </ul> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v4.2.2...v4.3.0">4.3.0</a> (2020-09-08)</h2> <h3>Features</h3> <ul> <li>the <code>importLoaders</code> can be <code>string</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1178">#1178</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/ec58a7cfda46443e35539d66b86685195fa5db03">ec58a7c</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li>line breaks in <code>url</code> function (<a href="https://github.com/webpack-contrib/css-loader/commit/88b8ddc1d78a2b6a917ed2dfe2f2a37cf6a84190">88b8ddc</a>)</li> </ul> <h3><a href="https://github.com/webpack-contrib/css-loader/compare/v4.2.1...v4.2.2">4.2.2</a> (2020-08-24)</h3> <h3>Bug Fixes</h3> <ul> <li>source maps generation, source from source maps are now relative to <code>compiler.context</code> and use <code>webpack://</code> protocol (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1169">#1169</a>) (<a href="https://github.com/webpack-contrib/css-loader/commit/fb5c53d80b10ee698762238bb7b122aec8c5048d">fb5c53d</a>)</li> </ul> <h3><a href="https://github.com/webpack-contrib/css-loader/compare/v4.2.0...v4.2.1">4.2.1</a> (2020-08-06)</h3> <h3>Bug Fixes</h3> <ul> <li>regression with the <code>exportOnlyLocals</code> option, now <code>locals</code> are not exported under the <code>locals</code> name, it was big regression, we apologize for that (<a href="https://github.com/webpack-contrib/css-loader/commit/24c0a122d1396c08326a24f6184f5da09cf52ccc">24c0a12</a>)</li> </ul> <h2><a href="https://github.com/webpack-contrib/css-loader/compare/v4.1.1...v4.2.0">4.2.0</a> (2020-07-31)</h2> <h3>Features</h3> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack-contrib/css-loader/commit/1351e3a2a4b05fefb9b522b6be8abb60e4f8cda4"><code>1351e3a</code></a> chore(release): 5.0.0</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/747d62b75a878d8881f4819b96297667dc689b8f"><code>747d62b</code></a> feat: allow named exports to have underscores in names (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1209">#1209</a>)</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/7bfe85d3ee652684175188a4788e9743ff97c652"><code>7bfe85d</code></a> chore(deps): update (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1208">#1208</a>)</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/b5c93798e0b714a40ee3722ef0e5daa6c1c5ef41"><code>b5c9379</code></a> feat: postcss@8 (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1204">#1204</a>)</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/92fe10341a429f0e3c46c284cfda0a5a192cd5f3"><code>92fe103</code></a> docs: context is localIdentContext in README (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1202">#1202</a>)</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/e5a9272c3c2e0d3c5ddfc4b8fcb2b8148f49c9ed"><code>e5a9272</code></a> chore(deps): update (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1203">#1203</a>)</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/63b41beed479aa67b453d352c60b6e91fa54c99f"><code>63b41be</code></a> refactor: emoji deprecate</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/9f974be81f5942d3afaf783529677bd541952fa3"><code>9f974be</code></a> feat: reduce runtime</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/d779eb1982b9feb27c37cda0f7874df02ab5e507"><code>d779eb1</code></a> feat: escape getLocalIdent by default (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1196">#1196</a>)</li> <li><a href="https://github.com/webpack-contrib/css-loader/commit/dd52931150ed42f122d9017642437c26cc1b2422"><code>dd52931</code></a> feat: hide warning on no plugins (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1195">#1195</a>)</li> <li>Additional commits viewable in <a href="https://github.com/webpack-contrib/css-loader/compare/v3.6.0...v5.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=css-loader&package-manager=npm_and_yarn&previous-version=3.6.0&new-version=5.0.0)](https://dependabot.com/compatibility-score/?dependency-name=css-loader&package-manager=npm_and_yarn&previous-version=3.6.0&new-version=5.0.0) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) Dependabot will **not** automatically merge this PR because it includes a major update to a production dependency. [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
kerem 2026-02-26 06:30:48 +03:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/twofactor_gateway-nextcloud#440
No description provided.