Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency html-loader to v1 #284

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 21, 2022

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
html-loader 0.5.5 -> 1.0.0 age adoption passing confidence

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
Critical 9.8 CVE-2022-37598 #283

Release Notes

webpack-contrib/html-loader (html-loader)

v1.0.0

Compare Source

⚠ BREAKING CHANGES
  • for parsing HTML now we use htmlparser2 package
  • the attrs option was renamed to the attributes option
  • the interpolate option was removed, please consider migration on the preprocessor
  • the minimize option is true by default in production mode. You need to list all options for html-minifier if you use object notation.
  • uppercase tags and uppercase attributes are handled by default
  • the root option was moved under the attributes option, please look at the documentation
  • emit an error on broken HTML syntax when minimization is enabled
  • By default, now we process the following tags with attributes:
    • the src attribute of the audio tag
    • the src attribute of the embed tag
    • the src attribute of the img tag
    • the srcset attribute of the img tag
    • the src attribute of the input tag
    • the href attribute of the link tag (only for stylesheets)
    • the data attribute of the object tag
    • the src attribute of the script tag
    • the src attribute of the source tag
    • the srcset attribute of the source tag
    • the src attribute of the track tag
    • the poster attribute of the video tag
    • the src attribute of the video tag
  • the attributes option should be Boolean or Object, please look at the documentation
  • the exportAsDefault option were removed in favor the esModules option
  • the exportAsEs6Default option were removed in favor the esModules option
Features
  • handle more tags and attributes
  • added the preprocessor option
  • added the esModule option
  • add the rulFilter option for filtering some of urls, please look at the documentation
  • allow to setup how to handle and filter tags and attributes, please look at the documentation
  • improve error reporting
Bug Fixes
  • adding quotes when necessary for unquoted sources
  • do not handle empty attributes
  • escape \u2028 and \u2029 characters
  • handle only valid srcset tags
  • parser tags and attributes according spec
  • reduce import/require count
  • reduce size of generated modules
  • respect #hash in sources
  • support ES6 syntax in script tags when minimize
  • support ES6 import of urls

  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by WhiteSource label Oct 21, 2022
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 Update dependency html-loader to v1 - autoclosed Mar 27, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/html-loader-1.x branch March 27, 2023 04:30
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 - autoclosed Update dependency html-loader to v1 Mar 31, 2023
@mend-for-github-com mend-for-github-com bot reopened this Mar 31, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/html-loader-1.x branch March 31, 2023 01:37
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 Update dependency html-loader to v1 - autoclosed Jun 16, 2023
@mend-for-github-com mend-for-github-com bot deleted the whitesource-remediate/html-loader-1.x branch June 16, 2023 12:14
@mend-for-github-com mend-for-github-com bot changed the title Update dependency html-loader to v1 - autoclosed Update dependency html-loader to v1 Jun 20, 2023
@mend-for-github-com mend-for-github-com bot reopened this Jun 20, 2023
@mend-for-github-com mend-for-github-com bot restored the whitesource-remediate/html-loader-1.x branch June 20, 2023 00:09
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/html-loader-1.x branch from b493587 to 96ddae4 Compare June 20, 2023 00:13
@mend-for-github-com
Copy link
Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: nifi-registry/nifi-registry-core/nifi-registry-web-ui/src/main/package-lock.json

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by WhiteSource
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants