Bump the npm_and_yarn group across 1 directory with 17 updates

Closed

Number: #2
Type: Pull Request
State: Closed

Author:

dependabot[bot]
Association: None
Comments: 1

Created: August 08, 2025 at 08:03 AM UTC
(3 months ago)

Updated: August 08, 2025 at 08:43 AM UTC
(3 months ago)

Closed: August 08, 2025 at 08:43 AM UTC
(3 months ago)

Time to Close: 41 minutes

Labels:
dependencies javascript

Description:

Bumps the npm_and_yarn group with 15 updates in the / directory:

Package	From	To
axios	`0.16.2`	`0.30.0`
vue	`2.7.16`	`3.0.0`
autoprefixer	`6.7.7`	`10.4.21`
css-loader	`0.28.11`	`7.1.2`
html-webpack-plugin	`2.30.1`	`5.6.3`
optimize-css-assets-webpack-plugin	`1.3.2`	`6.0.1`
shelljs	`0.7.8`	`0.8.5`
vue-loader	`12.2.2`	`17.4.2`
webpack-bundle-analyzer	`2.13.1`	`3.3.2`
webpack-dev-middleware	`1.12.2`	`5.3.4`
loader-utils	`0.2.17`	`removed`
babel-loader	`6.4.1`	`10.0.0`
webpack	`2.7.0`	`5.101.0`
extract-text-webpack-plugin	`2.1.2`	`3.0.2`
ejs	`2.7.4`	`removed`
webpack-bundle-analyzer	`3.3.2`	`4.10.2`

Updates axios from 0.16.2 to 0.30.0

Release notes

Sourced from axios's releases.

Release v0.30.0

Release notes:

Bug Fixes

fix: modify log while request is aborted by @mori5321 in axios/axios#4917

fix: update CHANGELOG.md for v0.x by @TehZarathustra in axios/axios#6271

fix: modify upgrade guide for 0.28.1's breaking change by @nafeger in axios/axios#6787

fix: backport allowAbsoluteUrls vulnerability fix to v0.x by @thatguyinabeanie in axios/axios#6829

fix: add allowAbsoluteUrls type by @thatguyinabeanie in axios/axios#6849

Contributors to this release

@mori5321 made their first contribution in axios/axios#4917

@TehZarathustra made their first contribution in axios/axios#6271

@nafeger made their first contribution in axios/axios#6787

@thatguyinabeanie made their first contribution in axios/axios#6829

Full Changelog: https://github.com/axios/axios/compare/v0.29.0...v0.30.0

v0.29.0

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 to v0.x by @Sean-Powell in axios/axios#6402

fix: omit nulls in params by @Willshaw in axios/axios#6394

fix(backport): fix paramsSerializer function validation by @solonzhu in axios/axios#6361

fix: Regular Expression Denial of Service (ReDoS) by @qiongshusheng in axios/axios#6708

Contributors to this release

@Sean-Powell made their first contribution in axios/axios#6402

@Willshaw made their first contribution in axios/axios#6394

@solonzhu made their first contribution in axios/axios#6361

@qiongshusheng made their first contribution in axios/axios#6708

Release v0.28.1

Release notes:

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

Release v0.28.0

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated #4745

... (truncated)

Changelog

Sourced from axios's changelog.

0.30.0 (2025-03-26)

Release notes:

Bug Fixes

fix: modify log while request is aborted (#4917)

fix: update CHANGELOG.md for v0.x (#6271)

fix: modify upgrade guide for 0.28.1's breaking change (#6787)

fix: backport allowAbsoluteUrls vulnerability fix to v0.x (#6829)

fix: add allowAbsoluteUrls type (#6849)

0.29.0 (2024-11-21)

Release notes:

Bug Fixes

fix(backport): backport security fixes in commits #6167 and #6163 (#6402)

fix: omit nulls in params (#6394)

fix(backport): fix paramsSerializer function validation (#6361)

fix: regular expression denial of service (ReDoS) (#6708)

0.28.1 (2024-03-24)

Release notes:

Bug Fixes

fix(backport): custom params serializer support (#6263)

fix(backport): uncaught ReferenceError req is not defined (#6307)

0.28.0 (2024-02-12)

Release notes:

Bug Fixes

fix(security): fixed CVE-2023-45857 by backporting withXSRFToken option to v0.x (#6091)

Backports from v1.x:

Allow null indexes on formSerializer and paramsSerializer v0.x (#4961)

Fixing content-type header repeated (#4745)

Fixed timeout error message for HTTP (#4738)

Added axios.formToJSON method (#4735)

URL params serializer (#4734)

Fixed toFormData Blob issue on node>v17 (#4728)

Adding types for progress event callbacks (#4675)

Fixed max body length defaults (#4731)

... (truncated)

Commits

6e922e4 chore: added build artifacts
a06ed1e chore: added pre-release artifacts
c010622 feat: add type for allowAbsoluteUrls (#6849)
02c3c69 fix: backport allowAbsoluteUrls vuln fix to v0.x (#6829)
8603e67 docs: modify upgrade guide for 0.28.1's breaking change (#6787)
f0642ee fix(docs): update CHANGELOG.md for v0.x (#6271)
0630c32 fix: modify log while request is aborted (#4917)
7750b8c chore(release): prep release v0.29.0
4840cb2 fix: regular expression denial of service issues (#6708)
2e36cdb fix(backport): fix paramsSerializer function validation (#6361)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jasonsaayman, a new releaser for axios since your current version.

Updates vue from 2.7.16 to 3.0.0

Changelog

Sourced from vue's changelog.

3.0.0 (2020-09-18)

3.0.0-rc.13 (2020-09-18)

Bug Fixes

hmr: make hmr working with class components (#2144) (422f05e)

reactivity: avoid length mutating array methods causing infinite updates (#2138) (f316a33), closes #2137

suspense: should discard unmount effects of invalidated pending branch (5bfcad1)

types: component instance inference without props (#2145) (57bdaa2)

Code Refactoring

watch APIs default to trigger pre-flush (49bb447), closes vuejs/vue-next#1706

Features

runtime-core: support using inject() inside props default functions (58c31e3)

watch: support dot-delimited path in watch option (1c9a0b3)

BREAKING CHANGES

watch APIs now default to use flush: 'pre' instead of flush: 'post'. This change affects watch, watchEffect, the watch component option, and this.$watch. See (49bb447) for more details.

3.0.0-rc.12 (2020-09-16)

Bug Fixes

reactivity: effect should only recursively self trigger with explicit options (3810de7), closes #2125

runtime-core: ensure root stable fragments inherit elements for moving (bebd44f), closes #2134

runtime-core: should still do full traverse of stable fragment children in dev + hmr (dd40ad8)

runtime-core/async-component: fix error component when there are no error handlers (c7b4a37), closes #2129

types/tsx: optional props from Mixin/Extends are treated as required (#2048) (89e9ab8)

Features

compiler-sfc: additionalData support for css preprocessors (#2126) (066d514)

3.0.0-rc.11 (2020-09-15)

... (truncated)

Commits

See full diff in compare view

Updates autoprefixer from 6.7.7 to 10.4.21

Release notes

Sourced from autoprefixer's releases.

10.4.21

Fixed old -moz- prefix for :placeholder-shown (by @Marukome0743).

10.4.20

Fixed fit-content prefix for Firefox.

10.4.19

Removed end value has mixed support, consider using flex-end warning since end/start now have good support.

10.4.18

Fixed removing -webkit-box-orient on -webkit-line-clamp (@Goodwine).

10.4.17

Fixed user-select: contain prefixes.

10.4.16

Improved performance (by @romainmenke).

Fixed docs (by @coliff).

10.4.15

Fixed ::backdrop prefixes (by @yisibl).

Fixed docs (by @coliff).

10.4.14

Improved startup time and reduced JS bundle size (by @Knagis).

10.4.13

Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

10.4.12

Fixed support of unit-less zero angle in backgrounds (by @yisibl).

10.4.11

Fixed text-decoration prefixes by moving to MDN data (by @romainmenke).

10.4.10

Fixed unicode-bidi prefixes by moving to MDN data.

10.4.9

Fixed css-unicode-bidi issue from latest Can I Use.

10.4.8

Do not print color-adjust warning if print-color-adjust also is in rule.

10.4.7

Fixed print-color-adjust support in Firefox.

10.4.6

Fixed print-color-adjust support.

... (truncated)

Changelog

Sourced from autoprefixer's changelog.

10.4.21

Fixed old -moz- prefix for :placeholder-shown (by @Marukome0743).

10.4.20

Fixed fit-content prefix for Firefox.

10.4.19

Removed end value has mixed support, consider using flex-end warning since end/start now have good support.

10.4.18

Fixed removing -webkit-box-orient on -webkit-line-clamp (@Goodwine).

10.4.17

Fixed user-select: contain prefixes.

10.4.16

Improved performance (by Romain Menke).

Fixed docs (by Christian Oliff).

10.4.15

Fixed ::backdrop prefixes (by 一丝).

Fixed docs (by Christian Oliff).

10.4.14

Improved startup time and reduced JS bundle size (by Kārlis Gaņģis).

10.4.13

Fixed missed prefixes on vendor prefixes in name of CSS Custom Property.

10.4.12

Fixed support of unit-less zero angle in backgrounds (by 一丝).

10.4.11

Fixed text-decoration prefixes by moving to MDN data (by Romain Menke).

10.4.10

Fixed unicode-bidi prefixes by moving to MDN data.

10.4.9

Fixed css-unicode-bidi issue from latest Can I Use.

10.4.8

Do not print color-adjust warning if print-color-adjust also is in rule.

10.4.7

Fixed print-color-adjust support in Firefox.

10.4.6

Fixed print-color-adjust support.

... (truncated)

Commits

541295c Release 10.4.21 version
8d555f7 Update dependencies and sort imports
5c2421e Update Node.js and pnpm on CI
af9cb5f fix: replace :-moz-placeholder-shown with :-moz-placeholder (#1532)
dae6eb4 Release 10.4.20 version
ee43652 Fix fit-content for Firefox
cf80824 Update dependencies
49d5ec6 Move to pnpm 9
8060e33 Release 10.4.19 version
fe7bae4 Remove end→flex-end warning
Additional commits viewable in compare view

Updates css-loader from 0.28.11 to 7.1.2

Release notes

Sourced from css-loader's releases.

v7.1.2

7.1.2 (2024-05-22)

Bug Fixes

keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

v7.1.1

7.1.1 (2024-04-10)

Bug Fixes

automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

v7.1.0

7.1.0 (2024-04-08)

Features

added the getJSON option to output CSS modules mapping (#1577) (af834b4)

v7.0.0

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:
import style from "./style.css";
console.log(style.myClass);
After:
import * as style from "./style.css";
console.log(style.myClass);

... (truncated)

Changelog

Sourced from css-loader's changelog.

7.1.2 (2024-05-22)

Bug Fixes

keep order of @imports with the webpackIgnore comment (#1600) (76757ef)

7.1.1 (2024-04-10)

Bug Fixes

automatically rename class default to _default when named export is enabled (#1590) (d6c31a1)

7.1.0 (2024-04-08)

Features

added the getJSON option to output CSS modules mapping (#1577) (af834b4)

7.0.0 (2024-04-04)

⚠ BREAKING CHANGES

The modules.namedExport option is true by default if you enable the esModule option

Migration guide:

Before:
import style from "./style.css";
console.log(style.myClass);
After:
import * as style from "./style.css";
console.log(style.myClass);
To restore 6.x behavior, please use:
module.exports = {
</tr></table> 

... (truncated)

Commits

d5ba44a chore(release): 7.1.2
76757ef fix: keep order of @imports with the webpackIgnore comment (#1600)
4b41689 ci: use node v22 (#1596)
2068222 chore: update dependencies to latest version (#1595)
e006f66 refactor: use environment to get templateLiteral value (#1591)
5c717c9 chore(release): 7.1.1
d6c31a1 fix: automatically rename class default to _default when named export is ...
b162e25 chore(release): 7.1.0
15f793d docs: update logic (#1587)
9c165a4 docs: update migration guide (#1586)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for css-loader since your current version.

Updates html-webpack-plugin from 2.30.1 to 5.6.3

Changelog

Sourced from html-webpack-plugin's changelog.

5.6.3 (2024-10-23)

Bug Fixes

hooks file for old plugins (#1867) (0585a36)

5.6.2 (2024-10-17)

Bug Fixes

allow bundle empty html (#1865) (f5b9140)

5.6.1 (2024-10-17)

Bug Fixes

avoid importing all of lodash (#1864) (2caf5db)

don't use initialize hooks to allow dynamic plugin injection (ae85878)

handle childCompilation.errors being an iterator rather than array (#1863) (4c0c894)

5.6.0 (2023-12-19)

Features

add @rspack/core as an optional peer dependency (#1829) (56ff3ae)

Added support type=systemjs-module via the scriptLoading option (#1822) (7effc30)

Bug Fixes

memory leak (#1836) (c79f2cf)

5.5.4 (2023-12-06)

Bug Fixes

avoid have undefined type for script tags (#1809) (9959484)

reemit assets from loaders (#1811) (a214736)

reemit favicon in serve/watch mode (#1804) (57c5a4e)

5.5.3 (2023-06-10)

Bug Fixes

... (truncated)

Commits

7299866 chore(release): 5.6.3
0585a36 fix: hooks file for old plugins (#1867)
11a248e chore(release): 5.6.2
f5b9140 fix: allow bundle empty html (#1865)
832e0f9 chore(release): 5.6.1
2caf5db fix: avoid importing all of lodash (#1864)
4c0c894 fix: handle childCompilation.errors being an iterator rather than array (#1...
ae85878 fix: don't use initialize hooks to allow dynamic plugin injection
41f4a7b chore: update tooling
7d5b559 docs: update (#1841)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for html-webpack-plugin since your current version.

Updates optimize-css-assets-webpack-plugin from 1.3.2 to 6.0.1

Commits

e896b97 6.0.1
24ed912 fix: cve in dependencies
29c44fb 6.0.0
51313e4 feat(deps): upgrade cssnano and postcss major version
3e6a04c 5.0.6
9567391 fix: previous version breaking changes (#156)
09d29b3 5.0.5
d0a7da7 feat(deps): update dependencies (#154)
41d1e23 Redirect to css-minimizer-webpack-plugin for webpack 5 or above
e9b84f1 5.0.4
Additional commits viewable in compare view

Updates shelljs from 0.7.8 to 0.8.5

Release notes

Sourced from shelljs's releases.

v0.8.5

This was a small security fix for #1058.

v0.8.4

Small patch release to fix a circular dependency warning in node v14. See #973.

v0.8.3

Closed issues:

Shelljs print stderr to console even if exec-only "silent" is true #905

refactor: remove common.state.tempDir #902

Can't suppress stdout for echo #899

exec() doesn't apply the arguments correctly #895

shell.exec('npm pack') painfully slow #885

shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881

test infra: mocks and skipOnWin conflict #862

Support for shell function completion on IDE #859

echo command shows options in stdout #855

silent does not always work #851

Appveyor installs the latest npm, instead of the latest compatible npm #844

Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830

inconsistent result when trying to echo to a file #798

Prevent require()ing executable-only files #789

Cannot set property to of [object String] which has only a getter #752

which() should check executability before returning a value #657

Bad encoding experience #456

phpcs very slow #440

Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254

.to$file$ does not mute STDIO output #146

Escaping shell arguments to exec() #143

Allow multiple string arguments for exec() #103

cp does not recursively copy from readonly location #98

Handling permissions errors on file I/O #64

Merged pull requests:

Add test case for sed on empty file #904 (wyardley)

refactor: don't expose tempdir in common.state #903 (nfischer)

chore(ci): fix codecov on travis #897 (nfischer)

chore(npm): add ci-or-install script #896 (nfischer)

Fix silent exec #892 (nfischer)

chore(appveyor): run entire test matrix #886 (nfischer)

docs: remove gitter badge #880 (nfischer)

grep includes the i flag #876 (ppsleep)

Fix(which): match only executable files (#657) #874 (termosa)

chore: rename some tests #871 (nfischer)

Fix cp from readonly source #870 (nfischer)

chore: bump dev dependencies and add package-lock #864 (nfischer)

fix(mocks): fix conflict between mocks and skip #863 (nfischer)

chore: output npm version in travis #850 (nfischer)

... (truncated)

Changelog

Sourced from shelljs's changelog.

v0.8.5 (2022-01-13)

Full Changelog

This was a small security fix for #1058.

v0.8.4 (2020-04-24)

Full Changelog

Small patch release to fix a circular dependency warning in node v14. See #973.

v0.8.3 (2018-11-13)

Full Changelog

Closed issues:

Shelljs print stderr to console even if exec-only "silent" is true #905

refactor: remove common.state.tempDir #902

Can't suppress stdout for echo #899

exec() doesn't apply the arguments correctly #895

shell.exec('npm pack') painfully slow #885

shelljs.exec cannot find app.asar/node_modules/shelljs/src/exec-child.js #881

test infra: mocks and skipOnWin conflict #862

Support for shell function completion on IDE #859

echo command shows options in stdout #855

silent does not always work #851

Appveyor installs the latest npm, instead of the latest compatible npm #844

Force symbolic link (ln -sf) does not overwrite/recreate existing destination #830

inconsistent result when trying to echo to a file #798

Prevent require()ing executable-only files #789

Cannot set property to of [object String] which has only a getter #752

which() should check executability before returning a value #657

Bad encoding experience #456

phpcs very slow #440

Error shown when triggering a sigint during shelljs.exec if process.on sigint is defined #254

.to$file$ does not mute STDIO output #146

Escaping shell arguments to exec() #143

Allow multiple string arguments for exec() #103

cp does not recursively copy from readonly location #98

Handling permissions errors on file I/O #64

Merged pull requests:

Add test case for sed on empty file #904 (wyardley)

refactor: don't expose tempdir in common.state #903 (nfischer)

chore(ci): fix codecov on travis #897 (nfischer)

chore(npm): add ci-or-install script #896 (nfischer)

Fix silent exec #892 (nfischer)

chore(appveyor): run entire test matrix #886 (nfischer)

docs: remove gitter badge #880 (nfischer)

grep includes the i flag #876 (ppsleep)

... (truncated)

Commits

70668a4 0.8.5
d919d22 fix(exec): lockdown file permissions (#1060)
fcf1651 0.8.4
a1111ee Silence potentially upcoming circular dependency warning (#973)
d4d1317 0.8.3
db317bf Add test case for sed on empty file (#904)
0d5ecb6 docs(changelog): updated by Nate Fischer [ci skip]
6b3c7b1 refactor: don't expose tempdir in common.state (#903)
4bd22e7 chore(ci): fix codecov on travis (#897)
2b3b781 fix: silent exec (#892)
Additional commits viewable in compare view

Updates vue-loader from 12.2.2 to 17.4.2

Release notes

Sourced from vue-loader's releases.

v17.3.1

Bug Fixes

do not skip style post loader for v-bind() in non-scoped CSS (d7071bb), closes #2061

v17.3.0

Bug Fixes

re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

v17.2.2

Bug Fixes

fix: windows path for experiments.css by @h-a-n-a in vuejs/vue-loader#2049

v17.2.1

Features

A new experimentalInlineMatchResource option (webpack 5 only), which leverages webpack 5's inline matchResource feature in the underlying implementation, and works well with the experiments.css feature This also makes vue-loader compatible with Rspack (#2046) (3149f6d).

Note: v17.2.0 was released by accident; it has the same content as v17.1.2, therefore not included in the Releases page.

v17.1.2

Bug Fixes

keep build stable when run in a different path (#2040) (a81dc0f)

properly close the watcher after webpack 4 tests (40b93b9)

v17.1.1

Bug Fixes

support experimental propsDestructure and defineModel options (6269698)

v17.1.0

Bug Fixes

fix: reference project compiler, fixes #2031 by @heywhy in vuejs/vue-loader#2038

fix: do not throw when Rule.layer is used by @nolimitdev in vuejs/vue-loader#2000

Features

support 3.3 imported types hmr (bbd98fc)

Full Changelog: https://github.com/vuejs/vue-loader/compare/v17.0.1...v17.1.0

... (truncated)

Changelog

Sourced from vue-loader's changelog.

17.4.2 (2023-12-30)

Bug Fixes

pass compilerOptions to sfc parse & re-enable AST reuse (d2a2e05)

17.4.1 (2023-12-30)

Bug Fixes

(temporarily) disable template ast reuse (31b03af)

17.4.0 (2023-12-25)

Features

leverage ast reuse in 3.4 (479835f)

17.3.1 (2023-10-31)

Bug Fixes

do not skip style post loader for v-bind() in CSS (d7071bb), closes #2061

17.3.0 (2023-10-07)

Bug Fixes

re-use ident of vue rule for template compiler, fixes #2029 (#2030) (b50fa56)

Features

skip normal css files without scoped flag in stylePostLoader (#2053) (98782e7)

17.2.2 (2023-06-02)

... (truncated)

Commits

1c0324f v17.4.2
d2a2e05 fix: pass compilerOptions to sfc parse & re-enable AST reuse
071f30d chore: bump to vue 3.4.3
94e778e chore: 17.4.1 changelog
284a333 17.4.1
31b03af fix: (temporarily) disable template ast reuse
50699e6 chore: set compilerOptions in example
59a0570 chore: changelog for 17.4.0
1bce3f8 v17.4.0
f71cb1d chore: update caniuse db
Additional commits viewable in compare view

Updates webpack-bundle-analyzer from 2.13.1 to 3.3.2

Changelog

Sourced from webpack-bundle-analyzer's changelog.

3.3.2

Bug Fix

Fix regression with escaping internal assets (#264, fixes #263)

3.3.1

Improvements

Use relative links for serving internal assets (#261, fixes #254)

Properly escape embedded JS/JSON (#262)

Bug Fix

Fix showing help message on -h flag (#260, fixes #239)

3.3.0

New Feature

Show/hide chunks using context menu (#246, @bregenspan)

Internal

Updated dev dependencies

3.2.0

Improvements

Add support for .mjs output files (#252, @jlopezxs)

3.1.0

Bug Fix

Properly determine the size of the modules containing special characters (#223, @hulkishDescription has been truncated



      
        
          
            
              
              Pull Request Statistics
            
          
          
            
                
                  Commits:

                  
                  0
                
              
                
                  Files Changed:

                  
                  0
                
              
                
                  Additions:

                  
                    
                    +0
                  
                
              
                
                  Deletions:

                  
                    
                    -0


          
            
              
              Package Dependencies
            
          
          
              
                
                  
                    Package:

                    
                      axios
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      0.16.2 → 0.30.0
                    
                  
                    
                      Update Type:

                      
                        Minor
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      webpack
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      2.7.0 → 5.101.0
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      vue
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      2.7.16 → 3.0.0
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      autoprefixer
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      6.7.7 → 10.4.21
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      ejs
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      2.7.4 → removed
                    
                  
                  
                
              
              
                
                  
                    Package:

                    
                      css-loader
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      0.28.11 → 7.1.2
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      html-webpack-plugin
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      2.30.1 → 5.6.3
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      babel-loader
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      6.4.1 → 10.0.0
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      loader-utils
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      0.2.17 → removed
                    
                  
                  
                
              
              
                
                  
                    Package:

                    
                      shelljs
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      0.7.8 → 0.8.5
                    
                  
                    
                      Update Type:

                      
                        Minor
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      vue-loader
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      12.2.2 → 17.4.2
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      webpack-bundle-analyzer
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      2.13.1 → 3.3.2
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      webpack-dev-middleware
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      1.12.2 → 5.3.4
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      optimize-css-assets-webpack-plugin
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      1.3.2 → 6.0.1
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
              
                
                  
                    Package:

                    
                      extract-text-webpack-plugin
                  
                  
                  
                    Ecosystem:

                    npm
                  
                  
                    
                      Version Change:

                      2.1.2 → 3.0.2
                    
                  
                    
                      Update Type:

                      
                        Major
                      
                    
                  
                
              
          
        

      
        
          
            
              
              Security Advisories
            
          
          
              
                
                  
                    
                      Axios Cross-Site Request Forgery Vulnerability
                      
                      
                          GHSA-wf5p-g6vw-rhxx
                          CVE-2023-45857
                        
                          
                            MODERATE
                          
                      
                      
                        
                          An issue discovered in Axios 0.8.1 through 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-XSRF-TOKEN for every request made to any ho...



    
    
      
        
          Actions
        
        
          
            
            View on GitHub
          
          
            
            View Repository
          
          
            
            All Dependabot PRs
        
      

      
        
          Technical Details
        
        
          
            
              ID:
              4782318
            
            
              UUID:
              3303055676
            
            
              Node ID:
              PR_kwDOPWRcQs6it6Nc
            
            
              Host:
              GitHub
            
            
              Repository:
              TeamBuilderApp/vue-demo

ID:	`4782318`
UUID:	`3303055676`
Node ID:	`PR_kwDOPWRcQs6it6Nc`
Host:	GitHub
Repository:	TeamBuilderApp/vue-demo