Bump json5, sass-resources-loader, nuxt, frontmatter-markdown-loader, responsive-loader and sass-loader

[dependabot]

Bumps json5 to 2.2.3 and updates ancestor dependencies json5, sass-resources-loader, nuxt, frontmatter-markdown-loader, responsive-loader and sass-loader. These dependencies need to be updated together.

Updates json5 from 2.1.1 to 2.2.3

Release notes

Sourced from json5's releases.

v2.2.3

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

• Fix: Bump minimist to v1.2.5. (#222)

Changelog

Sourced from json5's changelog.

v2.2.3 [code, diff]

• Fix: [email protected] is now the 'latest' release according to npm instead of v1.0.2. (#299)

v2.2.2 [code, diff]

• Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

• Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

• New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

• Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

• Fix: Bump minimist to v1.2.5. (#222)

Commits

• c3a7524 2.2.3
• 94fd06d docs: update CHANGELOG for v2.2.3
• 3b8cebf docs(security): use GitHub security advisories
• f0fd9e1 docs: publish a security policy
• 6a91a05 docs(template): bug -> bug report
• 14f8cb1 2.2.2
• 10cc7ca docs: update CHANGELOG for v2.2.2
• 7774c10 fix: add proto to objects and arrays
• edde30a Readme: slight tweak to intro
• 97286f8 Improve example in readme
• Additional commits viewable in compare view

Updates sass-resources-loader from 2.0.1 to 2.2.5

Changelog

Sourced from sass-resources-loader's changelog.

[2.2.5] - 2022-04-14

• Update async to v3.2.3. #154 by Ian Hutchinson.

[2.2.4] - 2021-08-05

• Support double quoted imports of built-ins. #145 by Jan Amann.

[2.2.3] - 2021-06-21

• Fix regression introduced in 2.2.2 for "causes TypeError: Cannot read property 'indexOf' of undefined". #145 by Juan Antonio Gómez.

[2.2.2] - 2021-06-16

• De-duplicate hoisted imports and avoid rewriting imports of built-ins. #142 by Jan Amann.

[2.2.1] - 2021-04-14

• Support multi-line imports with @​use syntax. Fixes: #135. #140 by Toms Burgmanis.

[2.2.0] - 2020-09-19

• Add verbose error message when any of the specified resource globs don't return any files. Fixes: #38. #134 by Toms Burgmanis.

[2.1.1] - 2020-09-19

• Package cleanup: reduce published files and dependencies (#126, #127) #128 by Thibaud Colas.

[2.1.0] - 2020-07-22

• Supports the new Sass module system released with Dart Sass 1.23.0. The use of @​use is recommended instead of @​import. #117 by Toms Burgmanis.

[2.0.3] - 2020-04-13

• Dependency updates

[2.0.2] - 2020-04-12

• Dependency updates

Commits

• 7b8b8eb Bump version to 2.2.5
• bcde145 Update async to v3.2.3 (#154)
• b6c03f1 Update CHANGELOG.md
• bdd0ce2 Bump version to 2.2.4
• 723a8cd Update CHANGELOG.md
• c391d6b Supported double quoted use imports from built-ins (#147)
• a5bca05 Bump version to 2.2.3
• aeae47c Update CHANGELOG for 2.2.3
• ac79607 Check single before using it (#145)
• 230c4a1 De-duplicate hoisted imports and avoid rewriting imports of built-ins (#142)
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by shakacode, a new releaser for sass-resources-loader since your current version.

Updates nuxt from 2.11.0 to 3.0.0

Release notes

Sourced from nuxt's releases.

Nuxt 3.0 stable

✨ Official Release Announcenment

💬 Release Discussion

📝 Changelog

Check out v3.0.0-rc.14 for other recent changes.

🩹 Fixes

• nuxt: Removed auto imports (#9045)
• schema: Initialise runtimeConfig.public with empty object (#9050)
• cli: Upgrade with latest tag (#9060)
• nuxt: Allow union type arguments for useAsyncData (#9061)

📖 Documentation

• New website design (#9007)
• Update website theme version (819deb89)
• Minor style improvements (9ab069b2)
• Update website-theme (780b17b1)
• Add warning about definePageMeta issues with transitions and NuxtLoadingIndicator (#9055)
• Add missing agencies (#9059)

🏡 Chore

• Update readme design (#9048)
• Ignore parse5 for renovate update (#9046)

❤️ Contributors

• Toby Faux
• Clément Ollivier (@​clemcode)
• Pooya Parsa (@​pi0)
• Conner (@​Intevel)
• Sébastien Chopin (@​Atinux)
• Daniel Roe [email protected]

v3.0.0-rc.14

Note This is the last release candidate for Nuxt v3! Are you ready? 👀

👉 Release Discussion

Changelog

compare changes

... (truncated)

Commits

• See full diff in compare view

Updates frontmatter-markdown-loader from 3.1.0 to 3.7.0

Release notes

Sourced from frontmatter-markdown-loader's releases.

v3.7.0: Requires markdown-it 12+

• Update markdown-it to use 12+
• Update devDependencies

This release will be the last version which supports Webpack 4 and Vue 2

hmsk/frontmatter-markdown-loader@v3.6.3...v3.7.0

v3.6.3

• Show an original error message by failing with unmatched Vue and its compiler's version
  • Declared Vue 3 isn't supported yet #238
• Update devDependencies

hmsk/frontmatter-markdown-loader@v3.6.2...v3.6.3

v3.6.2

• Add /example which runs with the latest Webpack 5
• Include only essential files in npm package
• Update devDependencies

hmsk/frontmatter-markdown-loader@v3.6.1...v3.6.2

v3.6.2-0

• Include only essential files in npm package
• Add /example which runs with the latest Webpack 5
• Update devDependencies

hmsk/frontmatter-markdown-loader@v3.6.1...v3.6.2-0

v3.6.1

• Update devDependencies
• Fix a bug that React importing crashes with an unescaped backtick or backslash in a code block 1f6cf386376becbdb02fb08993371013c39b8386
  • Thanks @​KoharaKazuya for reporting!

hmsk/frontmatter-markdown-loader@v3.6.0...v3.6.1

v3.6.1-1

• Escape backslashes and backticks for dangerouslySetInnerHTML
• Update devDependencies

hmsk/frontmatter-markdown-loader@v3.6.1-0...v3.6.1-1

v3.6.1-0

• Update devDependencies
• Fix a crashing problem by unescaped backtick hmsk/frontmatter-markdown-loader#197
  • Thanks @​KoharaKazuya for your contribution ✨

hmsk/frontmatter-markdown-loader@v3.6.0...v3.6.1-0

v3.6.0: A couple of bugfixes

... (truncated)

Commits

• e54cdfb 3.7.0
• 7ddc2d7 run npm audit fix in /example
• b62cdde Merge pull request #236 from hmsk/renovate/major-jest-monorepo
• 714230d Use @​vue/vue2-jest instead of vue-jest
• 2c8884d Update dependency jest to v27
• 0b289eb run npm audit fix
• 336a772 Update dependency markdown-it to 12.3.2 [SECURITY]
• 9560da0 Update react monorepo to v18
• 05dd314 Update dependency webpack to v5.72.0
• afed048 Update dependency @​vue/component-compiler-utils to v3.3.0
• Additional commits viewable in compare view

Updates responsive-loader from 1.2.0 to 3.1.2

Release notes

Sourced from responsive-loader's releases.

v3.1.1

• allows public path to be set as a URL bf9bfe3

dazuaz/responsive-loader@v3.1.0...v3.1.1

v3.1.0

• use webpack loader utils package 977fd3a
• use webpack loader utils package e025ed8
• Update README.md 711a604
• Bump d5de94f
• Update README.md ac26601
• Update README.md 1791b6f
• Update README.md 628fa5e
• readme update 8c48494
• cleanup 264abc5

dazuaz/responsive-loader@v3.0.4...v3.1.0

v3.0.4

• play nice with html-loader 7f78335
• play nice with html-loader bc0ac24
• bump a83d24f
• Merge branch 'master' of https://github.com/dazuaz/responsive-loader 7cfc188
• Merge pull request #155 from matpen/missing-makedir 95be264
• Update package.json f101018
• Replace depretiated subtr with slice efc3f2f
• Adding missing dependency on make-dir. 4fdd18e

dazuaz/responsive-loader@v3.0.3...v3.0.4

v3.0.3

• fixes bug on selecting defaut image a702faa

dazuaz/responsive-loader@v3.0.2...v3.0.3

v3.0.2

• changes default adapter to sharp 9e30f4b

dazuaz/responsive-loader@v3.0.1...v3.0.2

v3.0.1

• support for webpack 5 607521a

dazuaz/responsive-loader@v3.0.0...v3.0.1

v3.0.0

• support for webpack 5
• Merge branch 'master' of github.com:dazuaz/responsive-loader 45c35bb
• min nodejs version b28593e
• Create codeql-analysis.yml 68181da

... (truncated)

Changelog

Sourced from responsive-loader's changelog.

Change Log

v1.1.0

• Added min and max options to automatically generate a number of images, and steps option to say how many images (#31).

v1.0.0

New

• 🚀 Added support for sharp (#19)

Breaking

Webpack 2 support

Removed support for webpack 1! Please upgrade to webpack >= 2.

The syntax to import images has changed. The query part now comes after the resource (the image) instead of the loader.

- require('responsive-loader?size=100!some-image.jpg')
+ require('responsive-loader!some-image.jpg?size=100')

That means if responsive-loader is configured in your webpack-config, it's possible to specify image-specific options without having to add the loader part to the import path. For example:

// webpack.config.js
module.exports = {
  // ...
  module: {
    rules: [
      {
        test: /\.jpg$/,
        loader: 'responsive-loader',
        options: {
          size: 1000
          //...
        }
      }
    ]
  },
}
// some-file.js
const image1000 = require('some-image.jpg') // will have size 1000 from the config
const image500 = require('some-image.jpg?size=500')

... (truncated)

Commits

• See full diff in compare view

Maintainer changes

This version was pushed to npm by dazuaz, a new releaser for responsive-loader since your current version.

Updates sass-loader from 8.0.0 to 13.2.0

Release notes

Sourced from sass-loader's releases.

v13.2.0

13.2.0 (2022-11-09)

Features

• add support for node-sass v8 (#1100) (e5581b7)

v13.1.0

13.1.0 (2022-10-06)

Features

• allow to extend conditionNames (#1092) (6e02c64)

v13.0.2

13.0.2 (2022-06-27)

Bug Fixes

• hide error stacktrace on Sass errors (#1069) (5e6a61b)

v13.0.1

13.0.1 (2022-06-24)

Bug Fixes

• optimize debug message formatting, #1065 (#1066) (49a578a)

v13.0.0

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0 (#1048)
• emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

• do not crash on importers for modern API (#1052) (095814e)
• do not store original sass error in webpack error(#1053) (06d7533)

v12.6.0

12.6.0 (2022-02-15)

... (truncated)

Changelog

Sourced from sass-loader's changelog.

13.2.0 (2022-11-09)

Features

• add support for node-sass v8 (#1100) (e5581b7)

13.1.0 (2022-10-06)

Features

• allow to extend conditionNames (#1092) (6e02c64)

13.0.2 (2022-06-27)

Bug Fixes

• hide error stacktrace on Sass errors (#1069) (5e6a61b)

13.0.1 (2022-06-24)

Bug Fixes

• optimize debug message formatting, #1065 (#1066) (49a578a)

13.0.0 (2022-05-18)

⚠ BREAKING CHANGES

• minimum supported Node.js version is 14.15.0 (#1048)
• emit @warn at-rules as webpack warnings by default, if you want to revert behavior please use the warnRuleAsWarning option (#1054) (58ffb68)

Bug Fixes

• do not crash on importers for modern API (#1052) (095814e)
• do not store original sass error in webpack error(#1053) (06d7533)

12.6.0 (2022-02-15)

Features

• added support for automatic loading of sass-embedded (#1025) (c8dae87)

12.5.0 (2022-02-14)

... (truncated)

Commits

• e8fbc79 chore(release): 13.2.0
• e5581b7 feat: add support for node-sass v8 (#1100)
• acb3ce0 chore(deps): bump loader-utils from 2.0.2 to 2.0.3 (#1099)
• 1cdea4e chore: update dependencies to the latest version (#1098)
• 094a303 docs: update cla link (#1096)
• c32f63a ci: add dependency review action (#1094)
• b31751d chore(release): 13.1.0
• 6e02c64 feat: allow to extend conditionNames (#1092)
• edab08f chore: update dependencies to the latest version (#1093)
• 3a34fef chore: update commitlint action (#1091)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.