[Snyk] Upgrade css-loader from 6.3.0 to 6.7.1

[snyk-bot]

Snyk has created this PR to upgrade css-loader from 6.3.0 to 6.7.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 7 months ago, on 2022-03-08.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Information Exposure SNYK-JS-NANOID-2332193	307/1000 Why? Proof of Concept exploit, CVSS 4	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: css-loader

• 6.7.1 - 2022-03-08
  

  6.7.1 (2022-03-08)

  Bug Fixes

  • defaultGetLocalIdent export (#1427) (74dac1e)
• 6.7.0 - 2022-03-04
  

  6.7.0 (2022-03-04)

  Features

  • re-export defaultGetLocalIdent (#1423) (207cf36)
• 6.6.0 - 2022-02-02
  

  6.6.0 (2022-02-02)

  Features

  • added the hashStrategy option (ca4abce)
• 6.5.1 - 2021-11-03
  

  6.5.1 (2021-11-03)

  Bug Fixes

  • regression with unicode characters in locals (b7a8441)
  • runtime path generation (#1393) (feafea8)
• 6.5.0 - 2021-10-26
  

  6.5.0 (2021-10-26)

  Features

  • support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

  Bug Fixes

  • respect nosources in the devtool option (c60eff2)
• 6.4.0 - 2021-10-09
  

  6.4.0 (2021-10-09)

  Features

  • generate more collision resistant for locals (c7db752)

  Bug Fixes

  • classes generation for client and server bundling (303a3a1)
• 6.3.0 - 2021-09-18
  

  6.3.0 (2021-09-18)

  Features

  • added [folder] placeholder (a0dee4f)
  • added the exportType option with 'array', 'string' and 'css-style-sheet' values (c6d2066)
    • 'array' - the default export is Array with API for style-loader and other
    • 'string' - the default export is String you don't need to-string-loader loader anymore
    • 'css-style-sheet' - the default export is a constructable stylesheet, you can use import sheet from './styles.css' assert { type: 'css' }; like in a browser, more information you can find here
  • supported supports() and layer() functions in @ import at-rules (#1377) (bce2c17)
  • fix multiple merging multiple @ media at-rules (#1377) (bce2c17)

  Bug Fixes

  • reduce runtime (#1378) (cf3a3a7)

from css-loader GitHub release notes

Commit messages

Package name: css-loader

• 830fe2c chore(release): 6.7.1
• 74dac1e fix: defaultGetLocalIdent export (#1427)
• 84b552a chore(release): 6.7.0
• 207cf36 feat: re-export defaultGetLocalIdent (#1423)
• f0e20e6 chore: upgrade dependencies to the latest version (#1425)
• 4dede55 docs(readme): added types (#1418)
• e16ba4d chore(deps): bump nanoid from 3.1.30 to 3.2.0 (#1412)
• 76ad29f docs: add yarn and pnpm installation commands (#1417)
• 67bb937 chore: upgrade dependencies to the latest version (#1416)
• 5d6be09 chore(release): v6.6.0
• ca4abce feat: added the `hashStrategy` option
• 3240394 ci: fix (#1413)
• c78fe78 ci: remove install NPM steps (#1411)
• cbe3898 docs: reword sentence (#1407)
• 5167ce9 chore: update lint staged config (#1405)
• 8ffd14e chore: update dependencies to the latest version (#1404)
• db4d652 chore: update node version (#1403)
• 0df1ae9 fix: expand lint-staged, use eslint cache (#1399)
• 5eb7b80 test: fix (#1400)
• e857d71 chore(release): 6.5.1
• b7a8441 fix: regression with unicode characters in locals
• 52715ee ci: test on Node.js v17 (#1394)
• feafea8 fix: runtime path generation (#1393)
• 61fcc4a test: data uri (#1392)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs