[Snyk] Upgrade babel-loader from 8.0.6 to 8.3.0

[mmkobylin1]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade babel-loader from 8.0.6 to 8.3.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 8 versions ahead of your current version.
• The recommended version was released a year ago, on 2022-11-03.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Prototype Pollution SNYK-JS-LOADERUTILS-3043105	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-SEMVER-3247795	375/1000 Why? CVSS 7.5	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3042992	375/1000 Why? CVSS 7.5	No Known Exploit
	Regular Expression Denial of Service (ReDoS) SNYK-JS-LOADERUTILS-3105943	375/1000 Why? CVSS 7.5	No Known Exploit
	Prototype Pollution SNYK-JS-MINIMIST-559764	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-JSON5-3182856	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-559764	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	375/1000 Why? CVSS 7.5	Proof of Concept
	Prototype Pollution SNYK-JS-MINIMIST-2429795	375/1000 Why? CVSS 7.5	Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: babel-loader

• 8.3.0 - 2022-11-03
  

  New features

  • Pass external dependencies from Babel to Webpack by @ nicolo-ribaudo in #971

  Full Changelog: v8.2.5...v8.3.0

• 8.2.5 - 2022-04-19
  

  What's Changed

  • fix: respect inputSourceMap loader option by @ alan-agius4 in #896

  New Contributors

  • @ alan-agius4 made their first contribution in #896

  Full Changelog: v8.2.4...v8.2.5

• 8.2.4 - 2022-03-22
  

  What's Changed

  • doc(README.md): fix a broken markdown link by @ loveDstyle in #919
  • Bump loader-utils to 2.x by @ stianjensen in #931
  • Use md5 hashing for OpenSSL 3 by @ pathmapper in #924

  Thanks @ loveDstyle, @ stianjensen and @ pathmapper for your first PRs!

• 8.2.3 - 2021-10-20
  

  This release fixes compatibility with Node.js 17

  • Use md5 hash for caching on node v17 (#918)

  Thanks @ Reptarsrage!

• 8.2.2 - 2020-11-26
  

  8.2.2

• 8.2.1 - 2020-11-10
  
  • Move @ ava/babel to devDependencies #881 (@ jvasseur)
• 8.2.0 - 2020-11-10
  
  • Replace mkdirp with make-dir 47958ca (@ JLHwung)
  • Use async config loading when available d8cff97 (@ the-spyke)
• 8.1.0 - 2020-03-20
• 8.0.6 - 2019-05-12

from babel-loader GitHub release notes

Commit messages

Package name: babel-loader

• 9bf5652 8.3.0
• 80ab7d0 Update `@ babel/` dependencies
• 493ac6c Pass external dependencies from Babel to Webpack (#971)
• df28fe3 Fix broken main test (#950)
• 0b338e4 update hash method so it doesn't fail on a fips enabled machine (#939)
• 1f98d3c 8.2.5
• c622868 fix: respect `inputSourceMap` loader option (#896)
• f7982c1 8.2.4
• 4bb9e21 Use md5 hashing for OpenSSL 3 (#924)
• 247c94b Bump loader-utils to 2.x (#931)
• 052c07a doc(README.md): fix a broken markdown link (#919)
• 199c207 8.2.3
• 0093525 Use `md5` has for caching on node v17 (#918)
• 7fdf6f4 chore: update readme example (#907)
• f3538d0 Fix failing main (#903)
• eafd20d fix: add all babel config files to file dependency (#887)
• 1669ac0 Add note about top-level IIFE to the 'Troubleshooting' section (#886)
• 649f578 docs(readme): options.metadataSubscribers (#857)
• 557a853 8.2.2
• 534ec84 Upgrade dependencies & replace pify (#884)
• bd2fb05 Add trouble shooting about how to transpile node_modules (#883)
• 5deb8a6 8.2.1
• ecf20d2 Test on Node.js 8 (#882)
• a4d17c0 Move `@ ava/babel` to `devDependencies` (#881)

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs