Bump css-hot-loader from 1.3.4 to 1.3.9

[dependabot-preview]

Bumps css-hot-loader from 1.3.4 to 1.3.9.

Changelog

Sourced from css-hot-loader's changelog.

1.3.9 2018-03-27

• fix: Webpack 4 compatibility fix by vagusX !39

1.3.8 2018-03-01

• feat: using debounce for update in DOM by 53c701d !35

1.3.7 / 2018-02-10

• Fix issue causing multiple instances of link tags to be inserted by aminland !33

1.3.6 / 2018-01-23

• Safe access to 'src' of the last "script" tag#30

1.3.5 / 2017-12-24

• Refactor hotModuleReplacement #27 by GeorgeTaveras1231

1.3.3 / 2017-11-08

• Replace css link instead of adding new one #24

1.3.2 / 2017-10-07

• memory leak fix, only reload css files #22 by nickaversano

1.3.1 / 2017-09-04

• Use var instead of const for IE10 #17

1.3.0 / 2017-07-03

• Add support for commons chunk #12 by tfoxy
• Fix error when use a local host #11 by tfoxy

1.2.0 / 2017-06-23

• Applying styles without site jerking !9 by nvlad

1.1.1 / 2017-05-18

• Use loaderUtils.stringifyRequest to fix error path on windows !6 by dannsam

1.1.0 / 2017-05-14

• Add option fileMap, fix #3

1.0.3 / 2017-05-05

... (truncated)

Commits

• 6bc0c1d 1.3.9
• 6c79e6b chore: update history.md
• 88ba1b9 Merge pull request #39 from vagusX/master
• c629dd5 fix: using webpack4
• 1df37c6 Merge pull request #38 from chengluyu/master
• dcfa4c5 docs: fix a typo
• b78e257 chore: add examples for webpack4
• 8461dbe 1.3.8
• 5f268ef chore: modify history.md, pass test
• 196c1d2 Merge pull request #35 from 53c701d/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot ignore this [minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use [this|these] label[s] will set the current labels as the default for future PRs for this repo and language

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Out-of-range updates (receive only lockfile updates, if desired)

Finally, you can contact us by mentioning @dependabot.