[Snyk] Upgrade loader-utils from 2.0.2 to 3.2.1

[snyk-bot]

Snyk has created this PR to upgrade loader-utils from 2.0.2 to 3.2.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

Warning: This is a major version upgrade, and may be a breaking change.

• The recommended version is 9 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2022-11-11.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-JSON5-3182856	589/1000 Why? Has a fix available, CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	589/1000 Why? Has a fix available, CVSS 7.5	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: loader-utils

• 3.2.1 - 2022-11-11
• 3.2.0 - 2021-11-11
  

  3.2.0 (2021-11-11)

  Features

  • hash uniformity for base digests (451858b)
• 3.1.3 - 2021-11-04
  

  3.1.3 (2021-11-04)

  Bug Fixes

  • crash with md4 hash (#198) (ef084d4)
• 3.1.2 - 2021-11-04
  

  3.1.2 (2021-11-04)

  Bug Fixes

  • bug with unicode characters (#196) (0426405)
• 3.1.1 - 2021-11-04
  

  3.1.1 (2021-11-04)

  Bug Fixes

  • base64 and unicode characters (02b1f3f)
• 3.1.0 - 2021-10-29
  

  3.1.0 (2021-10-29)

  Features

  • added md4 (wasm version) and md4-native (crypto module version) algorithms (cbf9d1d)
• 3.0.0 - 2021-10-20
• 2.0.4 - 2022-11-11
• 2.0.3 - 2022-10-20
  

  2.0.3 (2022-10-20)

  Bug Fixes

  • security: prototype pollution exploit (#217) (a93cf6f)
• 2.0.2 - 2021-11-04
  

  2.0.2 (2021-11-04)

  Bug Fixes

  • base64 generation and unicode characters (#197) (8c2d24e)

from loader-utils GitHub release notes

Commit messages

Package name: loader-utils

• a3fd3ca chore(release): 3.2.1
• d2d752d fix: ReDoS problem (expose other windows microsoft/monaco-editor#224)
• 52cd134 chore(deps): bump minimist from 1.2.5 to 1.2.6 (Duplicate definition warnings: vscode-languageserver-types microsoft/monaco-editor#209)
• 9fe2381 chore: add .gitattributes for normalizing end of lines - fixes JSDoc type annotations work in VSCode but not Monaco microsoft/monaco-editor#203 (monaco-json npm install fails microsoft/monaco-editor#204)
• a282654 chore(release): 3.2.0
• f2a524b chore(deps): update (Is is possible to add padding between the gutter and code? microsoft/monaco-editor#200)
• 451858b feat: hash uniformity for base digests
• f7dbfe1 chore(release): 3.1.3
• ef084d4 fix: crash with md4 hash (Prefix changed lines with +/- in addition to color in the Diff Editor microsoft/monaco-editor#198)
• 097f5c3 chore(release): 3.1.2
• 0426405 fix: bug with unicode characters (Expose EditorZoom (used by ctrl + mouse wheel) in api microsoft/monaco-editor#196)
• 5ecf7da chore(release): 3.1.1
• 02b1f3f fix: base64 and unicode characters
• a30b4b7 docs: update (Focus is not reset after a model change microsoft/monaco-editor#194)
• f764aa5 chore(release): 3.1.0
• cbf9d1d feat: added `md4` (wasm version) and `md4-native` (`crypto` module version) algorithms
• 58bb233 docs: fix readme
• e1e9f89 chore(release): 3.0.0
• 862ea7d fix: allow `interpolateName` works without options
• f37156e test: fix
• f2ce2ca refactor!: use `xxhash64` by default for `[hash]`/`[contenthash]` and `getHashDigest` API
• 10503d6 refactor!: added `isUrlRequest` again, but now it ignores only absolute URLs and `#hash` requests, `data URI` and root relative request are handled as requestable due webpack v5 support them
• 46b032d chore: deps update
• e31e8b5 refactor!: `parseString` was removed in favor `new URLSearchParams(loaderContext.resourceQuery.slice(1))` where `loaderContext` is `this` in loader function

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs