[Snyk] Upgrade css-loader from 0.23.1 to 0.28.11

[snyk-bot]

Snyk has created this PR to upgrade css-loader from 0.23.1 to 0.28.11.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 22 versions ahead of your current version.
• The recommended version was released 2 years ago, on 2018-03-16.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Information Disclosure SNYK-JS-KINDOF-537849	Proof of Concept
	Information Disclosure SNYK-JS-KINDOF-537849	Proof of Concept
	Information Disclosure SNYK-JS-KINDOF-537849	Proof of Concept

Release notes

Package name: css-loader

• 0.28.11 - 2018-03-16
  

  2018-03-16

  Bug Fixes

  • lib/processCss: don't check mode for url handling (options.modules) (#698) (c788450)
• 0.28.10 - 2018-02-22
  

  2018-02-22

  Bug Fixes

  • getLocalIdent: add rootContext support (webpack >= v4.0.0) (#681) (9f876d2)
• 0.28.9 - 2018-01-17
  

  2018-01-17

  Bug Fixes

  • ignore invalid URLs (url()) (#663) (d1d8221)
• 0.28.8 - 2018-01-05
  

  2018-01-05

  Bug Fixes

  • loader: correctly check if source map is undefined (#641) (0dccfa9)
  • proper URL escaping and wrapping (url()) (#627) (8897d44)
• 0.28.7 - 2017-08-30
  

  2017-08-30

  Bug Fixes

  • pass resolver to localsLoader (options.alias) (#601) (8f1b57c)
• 0.28.6 - 2017-08-30
  

  2017-08-30

  Bug Fixes

  • add support for aliases starting with / (options.alias) (#597) (63567f2)
• 0.28.5 - 2017-08-17
  

  2017-08-17

  Bug Fixes

  • match mutliple dashes (options.camelCase) (#556) (1fee601)
  • stricter @import tolerance (#593) (2e4ec09)
• 0.28.4 - 2017-05-30
  

  2017-05-30

  Bug Fixes

  • preserve leading underscore in class names (#543) (f6673c8)
• 0.28.3 - 2017-05-25
  

  2017-05-25

  Bug Fixes

  • correct plugin order for CSS Modules (#534) (b90f492)
• 0.28.2 - 2017-05-22
  

  2017-05-22

  Bug Fixes

  • source maps path on windows (#532) (c3d0d91)
• 0.28.1 - 2017-05-02
• 0.28.0 - 2017-03-30
• 0.27.3 - 2017-03-13
• 0.27.2 - 2017-03-12
• 0.27.1 - 2017-03-10
• 0.27.0 - 2017-03-10
• 0.26.4 - 2017-03-08
• 0.26.2 - 2017-02-24
• 0.26.1 - 2016-12-02
• 0.26.0 - 2016-11-17
• 0.25.0 - 2016-09-05
• 0.24.0 - 2016-08-24
• 0.23.1 - 2015-12-22

from css-loader GitHub release notes

Commit messages

Package name: css-loader

• df497db chore(release): 0.28.11
• c788450 fix(lib/processCss): don't check `mode` for `url` handling (`options.modules`) (#698)
• c35d8bd chore(release): 0.28.10
• 9f876d2 fix(getLocalIdent): add `rootContext` support (`webpack >= v4.0.0`) (#681)
• 0452f26 test: hashes inside `@font-face` url (#678)
• 630579d chore(release): 0.28.9
• 604bd4b chore(package): update dependencies
• d1d8221 fix: ignore invalid URLs (`url()`) (#663)
• 0fc46c7 chore(release): 0.28.8
• 333a2ce chore(package): update `dependencies`
• 39773aa ci(travis): use `npm`
• 8897d44 fix: proper URL escaping and wrapping (`url()`) (#627)
• 0dccfa9 fix(loader): correctly check if source map is `undefined` (#641)
• d999f4a docs: Update importLoaders documentation (#646)
• 05c36db test: removed redundant `modules` argument (#599)
• c45fa66 test: add case for `url` processing (#603)
• 7039740 docs(README): add anchor tags to options table (#609)
• 0840c80 Fix markdown for link to webpack resolve.alias doc (#595)
• 7b52951 chore(release): 0.28.7
• 8f1b57c fix: pass resolver to `localsLoader` (`options.alias`) (#601)
• d18ee04 chore(release): 0.28.6
• 63567f2 fix: add support for aliases starting with `/` (`options.alias`) (#597)
• e16bdeb chore(release): 0.28.5
• 53283a1 chore: Update yarn lock file from #565

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs