Update loader-utils to v2
daniluk4000 opened this issue · comments
Do you want to request a feature or report a bug?
Request a feature
What is the current behavior?
loader-utils v1 has critical vulnerability that has been resolved in >=2.0.3
If this is a feature request, what is motivation or use case for changing the behavior?
Fix a critical dependency
Please mention other relevant information such as your webpack version, Node.js version and Operating System.
loader-utils v2 has actually also already been deprecated, so update to v3 immediately would be the best.
@Zae does vue-style-loader works with Webpack 5 actually? loader-utils v3 doesn't support Webpack 4 as I could remember
Good question actually, I don't know. loader-utils says nothing about which versions of webpack they support, either in the changelog or in the package.json.
Once webpack/loader-utils#218 will be made we'll at least be able to get rid of vulnerability in v1 by updating minor deps (npm update/yarn upgrade etc)
webpack/loader-utils#218 (comment) Fixed in loader-utils@1.4.1