[Snyk] Upgrade ts-loader from 9.1.2 to 9.4.2

[MaxMood96]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade ts-loader from 9.1.2 to 9.4.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 15 versions ahead of your current version.
• The recommended version was released 5 months ago, on 2022-12-01.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Sandbox Bypass SNYK-JS-WEBPACK-3358798	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-MINIMATCH-3050818	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: ts-loader

• 9.4.2 - 2022-12-01
  
  • Bug fix: Use custom transformer when building solution references [#1025] - thanks @ feosuna1
• 9.4.1 - 2022-09-20
  
  • Hotfix: Disable enhanced-resolve - thanks @ manuth
• 9.4.0 - 2022-09-19
  
  • Add Support for Resolving .cjs, .mjs, .cts and .mts Files [#1503] - thanks @ manuth
• 9.3.1 - 2022-06-22
  
  • Bug fix: Generate declaration files for js files if allowJs is set to true [#1260] - thanks @ hediet and @ mvilliger
• 9.3.0 - 2022-04-30
  
  • simplify configuration for fork-ts-checker-webpack-plugin - thanks @ piotr-oles
• 9.2.9 - 2022-04-26
  
  • make v9 latest following v8 release - thanks @ johnnyreilly
• 9.2.8 - 2022-03-11
  
  • Bug fix: support webpack 5 in ts-loader [#1438] - thanks @ einatbar
• 9.2.7 - 2022-03-01
  
  • cater for change in resolveTypeReferenceDirective API in TypeScript 4.7 [#1421] - thanks @ johnnyreilly and @ cspotcode for inspiration in ts-node work here: TypeStrong/ts-node#1648
• 9.2.6 - 2021-09-20
  
  • Docs fix for thread-loader / history - thanks @ johnnyreilly
• 9.2.5 - 2021-08-03
• 9.2.4 - 2021-07-24
• 9.2.3 - 2021-06-06
• 9.2.2 - 2021-05-22
• 9.2.1 - 2021-05-19
• 9.2.0 - 2021-05-18
• 9.1.2 - 2021-05-05

from ts-loader GitHub release notes

Commit messages

Package name: ts-loader

• 5e7220b Use custom transformer when building solution references (Official c api build dll and lib do not include function of OrtGetDimensions microsoft/onnxruntime#1550)
• 87a9fff add missing comma in README.md (roll back model test update for ngraph provider. microsoft/onnxruntime#1551)
• 620ee79 Typescript 4 9 (checking execution provider logic updated. microsoft/onnxruntime#1547)
• 3319b91 chore(deps): bump minimatch in /examples/project-references-example (Jignparm/fix nuget signing microsoft/onnxruntime#1530)
• 60e5784 Fix anchor jumping in README.md (Fix inclusion of ARM binary in the release pkg (#1513) microsoft/onnxruntime#1521)
• 5c66d2b Update outdated LICENSE year (Fix inclusion of ARM binary in the release pkg microsoft/onnxruntime#1513)
• 64a4136 Bump terser from 4.8.0 to 4.8.1 in /examples/project-references-example (Fix android build microsoft/onnxruntime#1489)
• cf1d227 Bump lodash in /test/execution-tests/babel-codeSplitting (flatten conv2d when input_width==kernel_width microsoft/onnxruntime#1435)
• e76abb0 Add Tests and Remarks Concerning the New `.cts` And `.mts` File Extensions (Fix regression with empty quote microsoft/onnxruntime#1508)
• d9fcbfd Hotfix: Disable `enhanced-resolve` (Enable float16 MatMul+Add -> GEMM fusion for performance boost microsoft/onnxruntime#1506)
• a810470 Add Support for Resolving `.cjs`, `.mjs`, `.cts` and `.mts` Files (Profiler-IsEnabled microsoft/onnxruntime#1503)
• 69a9c23 feat: 4.8 tests upgrade (Squeeze requires axes attribute bug microsoft/onnxruntime#1496)
• 48e399f docs: clarify Declarations (.d.ts) section in the README (Update release branch directly to remove special casing of "None" as a dim_param microsoft/onnxruntime#1495)
• b4b0363 Generate declaration files for js files if allowJs is set to true (NNAPI EP Update microsoft/onnxruntime#1483)
• 914cdae Bump follow-redirects in /examples/project-references-example (Reason for Stable Performance of Nuphar EP with increasing batch size of onnx model  microsoft/onnxruntime#1467)
• 50793de Bump follow-redirects from 1.14.1 to 1.15.1 in /examples/vanilla (Upgrade mklml and set march with official option. microsoft/onnxruntime#1469)
• 3a3c629 stub 4.7.3 output (Remove special casing of "None" as a dim_param microsoft/onnxruntime#1482)
• dccef46 Bump eventsource in /examples/project-references-example (Enable mklml openmp microsoft/onnxruntime#1480)
• c26c251 Bump url-parse in /examples/project-references-example (Added helper script to call vcvarsall.bat found using vswhere.exe. microsoft/onnxruntime#1425)
• 06d8045 Bump follow-redirects in /examples/fork-ts-checker-webpack-plugin (Serialize optimized onnx model microsoft/onnxruntime#1470)
• b9430ae Bump async from 2.6.3 to 2.6.4 in /examples/vanilla (add float support for equal op. microsoft/onnxruntime#1449)
• 1027e9d Update package.json (Add docs for the fns candy demo microsoft/onnxruntime#1479)
• d954b03 docs: misc update (docker updated to support openvino R1.1 microsoft/onnxruntime#1475)
• 8e389d9 chore: add vscode extension settings (Reduce artifacts size microsoft/onnxruntime#1477)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[stale]

This issue has been automatically marked as stale due to inactivity and will be closed in 7 days if no further activity occurs. If further support is needed, please provide an update and/or more details.

[stale]

This issue has been automatically closed due to inactivity. Please reactivate if further support is needed.