Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency vue-loader to v16 - autoclosed #28

Closed

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jun 23, 2022

This PR contains the following updates:

Package Type Update Change
vue-loader dependencies major ^13.0.5 -> ^16.0.0

By merging this PR, the issue #26 will be automatically resolved and closed:

Severity CVSS Score CVE
High High 9.8 CVE-2021-44906
High High 8.1 WS-2019-0063
High High 7.5 CVE-2021-23343
High High 7.5 WS-2019-0032
Medium Medium 5.6 CVE-2020-7598

Release Notes

vuejs/vue-loader

v16.0.0

Compare Source

Bug Fixes
Features
  • support for experimental sfc features (b85244b), closes #​1723
  • support for new script setup and css var injection (fd33cad)
Performance Improvements
  • avoid resolveScript call in main loader (e922648)

v15.10.1

Compare Source

Bug Fixes

v15.10.0

Compare Source

Features
  • apply js loaders to compiled template code when used with 2.7 (30464a8)
  • compat for vue 2.7, support <script setup> (308715a)
  • use script-analyzed bindings when compiling template (55de28c)
  • support css v-bind (requires 2.7.0-beta.3) (d653f3b)
Bug Fixes
  • cache descriptor with correct resource path (f6c83b5)
  • css v-bind in production mode (655e5f8)
  • always pass id to stylePostLoader when possible (364ad09)

v15.9.8

Compare Source

Bug Fixes

v15.9.7

Compare Source

Bug Fixes

v15.9.6

Compare Source

Bug Fixes

v15.9.5

Compare Source

Bug Fixes
  • ensure new webpack5 generator property in rules passes ruleset checks (#​1753) (f79bb08), closes #​1729
  • add rule plugins to keep up with webpack 5 new features (7ca8e2c)

v15.9.4

Compare Source

  • fix id inconsistency between different operating systems (#​1706) (afe8a0d)
  • fix mini-css-extract-plugin missing default export error (#​1748) (429a284)

v15.9.3

Compare Source

Bug Fixes
  • (webpack 5) skip matching rule with 'enforce' (e7b2b11)

v15.9.2

Compare Source

Bug Fixes
  • fix getting shadow root when component is functional (#​1560) (9a7357a)
Documentation

v15.9.1

Compare Source

Bug Fixes
  • ensure unique ident when cloning rules, fix webpack 5 compatibility (#​1653) (84c34a4)

v15.9.0

Compare Source

Bug Fixes
  • add vue-template-compiler as an optional peer dependency (56db1d7), closes #​1639
Features

v15.8.3

Compare Source

Bug Fixes
  • fix compatibility with webpack 3 (745d054)

Note: v15.8.3 is identical to v15.8.2. We had to run npm publish twice to make the new version available, due to an npm issue: https://github.com/npm/cli/issues/593

v15.8.2

Compare Source

v15.8.1

Compare Source

Just republish v15.8.0, to work around an npm issue.

v15.8.0

Compare Source

Bug Fixes
  • types: should import type definition from the dist folder (0751213)
Features

v15.7.2

Compare Source

vue-loader is now compatible with Yarn 2

Bug Fixes
  • add cache-loader to optional peer dependency (e9d8b71)
  • use require.resolve when referencing cache-loader (#​1585) (d3fa467)

v15.7.1

Compare Source

v15.7.0

Compare Source

v15.6.4

Compare Source

v15.6.3

Compare Source

v15.6.2

Compare Source

v15.6.1

Compare Source

v15.6.0

Compare Source

v15.5.1

Compare Source

v15.5.0

Compare Source

v15.4.2

Compare Source

v15.4.1

Compare Source

v15.4.0

Compare Source

v15.3.0

Compare Source

v15.2.7

Compare Source

v15.2.6

Compare Source

v15.2.5

Compare Source

v15.2.4

Compare Source

v15.2.3

Compare Source

v15.2.2

Compare Source

v15.2.1

Compare Source

v15.2.0

Compare Source

v15.1.0

Compare Source

v15.0.12

Compare Source

v15.0.11

Compare Source

v15.0.10

Compare Source

v15.0.9

Compare Source

v15.0.8

Compare Source

v15.0.7

Compare Source

v15.0.6

Compare Source

v15.0.5

Compare Source

v15.0.4

Compare Source

v15.0.3

Compare Source

v15.0.2

Compare Source

v15.0.1

Compare Source

v15.0.0

Compare Source

v15 is a major release with an improved loader inference mechanism that solves a number of long-standing problems related to loader configuration for language blocks. It also means the configuration is now different. Consult the Migration Guide before upgrading.

v14.2.4

Compare Source

v14.2.3

Compare Source

v14.2.2

Compare Source

Bug Fixes

v14.2.1

Compare Source

Bug Fixes

v14.2.0

Compare Source

Features
  • New option threadMode: set this to true enables fs-based options sharing. Only needed when using with HappyPack or thread-loader.
  • New option postcss.cascade: setting this to true allows using cascading postcss config files. (#​1147) (dddd911), closes #​1063
  • use more sensible default localIdentName for css modules (now [local]_[hash:base64:8]) (084bf3d)
Bug Fixes
  • Removed use of this._compilation, fixing #​1160 and compat with HappyPack / thread-loader
  • get transformToRequire from vueOptions instead of options for template-compiler (#​1175) (8b912ad)
  • removed module id for non-scoped component (#​1146) (0b36a2c), closes #​853
  • avoid adding index to css modules in first <style> tag (2c8d1fb), closes #​703 #​818

v14.1.1

Compare Source

v14.1.0

Compare Source

  • Adjust web component style injection strategy
  • Improve tree shaking

v14.0.3

Compare Source

v14.0.2

Compare Source

v14.0.1

Compare Source

v14.0.0

Compare Source

Features

  • Support for @vue/cli web component mode

Breaking

  • No longer works with webpack 1.
  • esModules option has been removed. Built module is now always exposed as an ES module.
  • Inject mode has been removed since it does not work with ES modules.

v13.7.3

Compare Source

v13.7.2

Compare Source

v13.7.1

Compare Source

v13.7.0

Compare Source

  • Template URL handling: static URLs that start with @ are now also transformed into module requests. The documentation has also been updated with more details on the transform rules.

v13.6.2

Compare Source

  • The source map cache busting feature is now removed, as it no longer makes any difference w/ webpack 3 and latest Chrome. The related option is also removed. To get correct source map after a hot-reload, you need to refresh your devtools by pressing cmd/ctrl + R when in devtools.

  • Fixed source map line being off by 1 line


  • If you want to rebase/retry this PR, click this checkbox.

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Jun 23, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency vue-loader to v16 Update dependency vue-loader to v16 - autoclosed Nov 12, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/vue-loader-16.x branch November 12, 2022 14:48
@mend-for-github-com mend-for-github-com bot changed the title Update dependency vue-loader to v16 - autoclosed Update dependency vue-loader to v16 Nov 13, 2022
@mend-for-github-com mend-for-github-com bot reopened this Nov 13, 2022
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/vue-loader-16.x branch November 13, 2022 19:50
@mend-for-github-com mend-for-github-com bot changed the title Update dependency vue-loader to v16 Update dependency vue-loader to v16 - autoclosed Nov 15, 2022
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/vue-loader-16.x branch November 15, 2022 05:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants