[Snyk] Upgrade css-loader from 3.0.0 to 3.5.3

[snyk-bot]

Snyk has created this PR to upgrade css-loader from 3.0.0 to 3.5.3.

✨What is Merge Advice?

We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. 🙏

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 13 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-04-24.

Release notes

Package name: css-loader

• 3.5.3 - 2020-04-24
  

  3.5.3 (2020-04-24)

  Bug Fixes

  • add file from an error to file dependencies (841423f)
  • avoid query string in source maps (#1082) (f64de13)
• 3.5.2 - 2020-04-10
  

  3.5.2 (2020-04-10)

  Bug Fixes

  • schema for the modules.auto option (#1075) (8c9ffe7)
• 3.5.1 - 2020-04-07
  

  3.5.1 (2020-04-07)

  Bug Fixes

  • don't generate an invalid code for locals (#1072) (866b84a)
• 3.5.0 - 2020-04-06
  

  3.5.0 (2020-04-06)

  Features

  • accept semver compatible postcss AST (#1049) (14c4faa)
  • allow to determinate css modules using the modules.auto option, please look at an example of how you can simplify the configuration. (#1067) (c673cf4)
  • the modules.exportGlobals option for export global classes and ids (#1069) (519e5f4)
  • the modules.mode option may be a function (#1065) (0d8ac3b)
• 3.4.2 - 2020-01-10
  

  3.4.2 (2020-01-10)

  Bug Fixes

  • do not duplicate css on composes (#1040) (df79602)
• 3.4.1 - 2020-01-03
  

  3.4.1 (2020-01-03)

  Bug Fixes

  • do not output undefined when sourceRoot is unavailable (#1036) (ded2a79)
  • don't output invalid es5 code when locals do not exists (#1035) (b60e62a)
• 3.4.0 - 2019-12-17
  

  3.4.0 (2019-12-17)

  Features

  • esModule option (#1026) (d358cdb)

  Bug Fixes

  • logic for order and media queries for imports (#1018) (65450d9)
• 3.3.2 - 2019-12-12
  

  3.3.2 (2019-12-12)

  Bug Fixes

  • logic for order and media queries for imports (1fb5134)
• 3.3.1 - 2019-12-12
  

  3.3.1 (2019-12-12)

  Bug Fixes

  • better handling url functions and an url in @import at-rules
  • reduce count of require (#1014) (e091d27)
• 3.3.0 - 2019-12-09
  

  3.3.0 (2019-12-09)

  Features

  • support pure css modules (#1008) (6177af5)

  Bug Fixes

  • do not crash when an assert return null or undefined (#1006) (6769783)
  • reduce count of require (#1004) (80e9662)
• 3.2.1 - 2019-12-02
• 3.2.0 - 2019-08-06
• 3.1.0 - 2019-07-18
• 3.0.0 - 2019-06-11

from css-loader GitHub release notes

Commit messages

Package name: css-loader

• 3a1f1f2 chore(release): 3.5.3
• f64de13 fix: avoid query string in source maps (#1082)
• 841423f fix: add file from an error to file dependencies
• b04641c ci: node@14 (#1081)
• 175c820 ci: migrate on github actions (#1077)
• a748f37 chore(release): 3.5.2
• 8c9ffe7 fix: schema for the `modules.auto` option (#1075)
• 239e43d chore(release): 3.5.1
• 866b84a fix: don't generate an invalid code for `locals` (#1072)
• aeeacb8 chore(release): 3.5.0
• fcec43b docs: improve
• c673cf4 feat: allow to determinate css modules using the `modules.auto` option (#1067)
• 519e5f4 feat: the `exportGlobals` option for export global classes and ids (#1069)
• 4f158cd chore(deps): update
• 0d8ac3b feat: the `modules.mode` option may be a function (#1065)
• 431f620 refactor: code (#1059)
• 1b29b28 refactor: code
• 3bc3a41 chore(deps): update
• fe0e6c9 perf: improve parse performance for `url()` functions
• f5f21ea perf: improve parse performance for `@import` at-rules
• bc63911 chore(deps): update
• 14c4faa feat: accept semver compatible postcss AST (#1049)
• 229d36a chore(release): 3.4.2
• df79602 fix: do not duplicate css on `composes` (#1040)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs