Low-level CSS Toolkit – the original Functional/Utility/Atomic CSS library

Basscss

Last update: Dec 31, 2022

Overview

Basscss

Low-level CSS toolkit – the original Functional CSS library https://basscss.com

Lightning-Fast Modular CSS with No Side Effects

Basscss is a lightweight collection of immutable utilities designed for speed, clarity, performance, and scalability.

Stable

Basscss v8 is the final version of Basscss, which means no major, breaking changes will be introduced. Minor features and patches may be added, but due to the nature of this CSS approach, there are virtually no bugs in Basscss.

Features

Code with Confidence

Using clear, humanized naming conventions, Basscss is quick to internalize and easy to reason about while speeding up development time with more scalable, more readable code.

No Side Effects

Things behave exactly as expected with immutable utilities and styles that follow the open/closed principle to help prevent common pitfalls with CSS.

Composable

Reusable, interoperable styles work like building blocks to lay the foundation for any stylesheet and can be mixed and matched in any number of combinations.

Designed for Design

Basscss strikes a balance between consistency and flexibility to allow for rapid prototyping and quick iterative changes when designing in the browser.

Responsive by Default

Basscss provides lightweight, performant styles and flexible utilities to design for any device and to help reduce boilerplate in stylesheets.

Unassuming

Modular and customizable typography and layout styles don’t dictate what things should look like and play well with other stylesheets and frameworks.

Base styles

The core Basscss package does not include any base element styles. For an out-of-the-box solution, see:

https://github.com/basscss/basic

Addons

In addition to the core modules, optional modules, including responsive margin, padding, layout, and typography styles, can be found here:

https://github.com/basscss/addons

Ace.css

For a bundle with the core Basscss and all optional modules, see:

https://github.com/basscss/ace

Contributing

See CONTRIBUTING.md

Thanks

This library was largely inspired and influenced by the following people

MIT license

Comments

Built with Basscss

To showcase the various sites that have been built with Basscss, I'll be putting up a gallery/blog section on the site. If you'd like to have your site featured, please leave a link to it in the comments.
enhancement

opened by jxnblk 32
v8 Prototype
This is a prototype to vet proposed changes for Basscss v8.

Community feedback is welcome

Changes

Removes base element styles. All styles are class-based. A separate base element reset might be offered in their place.

Removes color styles in favor of using packages like colors.css directly.

Moves all custom property definitions to local modules and removes the defaults module.

New, more generic basscss-flexbox module to replace flex-object.

Adds the same directional utilities for both margin and padding styles (t, r, b, l, x, y)

To do

[x] Karma tests

[ ] Deprecate old modules

[x] Create an optional modules monorepo

[x] Offer a few optional color theme modules, e.g. lighten and darken

[x] Update docs in READMEs

[x] Consider either removing btn module or adding a field/input module

[x] Consider max-width module (would remove .container from grid)

[x] ~~Consider interaction module (e.g. :hover, :focus, :active, etc.)~~

[x] Consider alternate naming conventions for flexbox module
opened by jxnblk 21
Include compiled CSS in single modules

The modular structure of Basscss is a great thing, as it makes easy to integrate parts of the framework into custom development environments (personally, I'm using Basscss whitespace utilities pretty much in every project now).

I think that Including the compiled CSS also in the single modules available through NPM, just as it is in the main Basscss repository, would reduce the overhead of having to set up a Rework workflow every time one needs to integrate a single module into an existing project, making the whole thing more tools-agnostic. Just nice CSS files ready to be dropped in whatever dev environment one might have setup.

Thanks for any feedback on this.

opened by mrzool 17
Having trouble getting started

Hi there - most likely not an issue with basscss, more that I depend maybe too heavily on documentation.

I'm trying to achieve the basic styles here: http://www.basscss.com/v7/docs/color-base/

However, no matter how I load/install basscss and basscss-addons, my forms never quite look like the examples. In one case it looks right but my form inputs are huge, for example.

What I'm looking for is a little quidance on how to install basscss and basscss addons, preferably with the files imported directly into my CSS files.

Many thanks in advance!

opened by tobyl 11
v7
Simplifies the core package and realigns with the design principles, removing less useful styles.

New

Simpler buttons with .btn module

Vertical alignment with align module

type-scale module (previously part of base-typography)

fieldset and legend base styles

simplified .field-light to .field

.border-box utility

Removes the following:

~~.flex-first and .flex-last~~

~~positions~~

progress

input range

base-buttons

button-sizes

button-outline

button-transparent

background-images

color-forms-dark

border-colors
opened by jxnblk 9
Custom class needed?
In this JSFiddle: https://jsfiddle.net/Lxjprnz1/2/, I have the following HTML:

<img src="http://pipsum.com/200x200.jpg" class="md-hide sm-hide xs-hide left" /> <img src="http://pipsum.com/200x200.jpg" class="md-hide sm-hide xs-hide left" /> <img src="http://pipsum.com/200x200.jpg?1" class="lg-left block mx-auto fit" />

I want the final image to be centered on lg and below (while the other images are hidden). On lg, I want all the images to float left. I am using the core basscss and the responsive-layout addon.

However, when the viewport is 1024px, the final image floats to the left, but the other images are displayed. Of course, this is undesired.

Is there a workaround using basscss' classes, or do I need to write a custom class for this use case?
opened by RyanZim 7
.mx{N} classes

Consider adding .mx{N} classes. My use case is to display a bunch of element with some spacing between them. .ml1.mr1 is a bit too much.

PS. In fact after thinking of it, I didn't use it, so maybe this was premature.

opened by firedev 7
Now scss is compilable via _basscss.scss
After noticing that scss folder can't be compiled as is I have fixed it:

Moved all files from scss into scss/basscss

Added the head file scss/_basscss.scss that includes everything from scss/basscss

Fixed missing defaults and order of mixins:

/* Variables */ @import 'basscss/colors'; $link-color: $blue; $button-background-color: $blue; $pre-background-color: $silver; @import 'basscss/defaults'; ...

Changed color() to rgba() in basscss/_color-forms.scss

box-shadow: 0 0 2px rgba($blue, .5);

Profit. Now it can be used everywhere SASS is in use.

Not sure about having colors in the root file, hope you can suggest something better.
opened by firedev 7
Polymer components support

Carrying on from #70:

Angular directives are probably first on my list, because of my familiarity and the popularity of the library. Polymer is also on the radar because of the similarities to spec-based web components. And, of course, React because of its component-based approach.

Do you have a specific plan/implementation in mind for adding basscss Polymer components?

Here's where I'm at pondering this so far (I'm not particularly familiar with Polymer components, but have been meaning to dive in for some time):

It appears there's a pretty useful generator for polymer:seeds, which can be leveraged to quickly scaffold out each CSS/HTML module to include in a web component. However, one potential pain point is that it looks like Polymer components want to introduce bower dependencies (for linking the styles to the component), and most basscss modules are currently only configured with npm package.json files. This will require some rejiggering by either registering CSS modules with bower or adding the CSS from an npm dependency as some sort of basscss Polymer build.

When I get a chance I will begin fiddling some more to see if there's a way to easily leverage the module CSS as an npm dependency (perhaps something like a gulp task).

opened by johno 7
Add main entry point to package.json
I decided to try basscss and replace tachyons, as this seems far more readable. We are using postcss and css-modules in our setup and "composing" from basscss does not work, unless I go inside package.json and add a main:

{ "main": "css/basscss.css" }

Doing composes: classname from 'basscss/css/basscss.css'; also seems to work, but it seems less than ideal.

PS. I would've happily provided a PR, but I wasn't sure if you wanted this.
opened by iamricard 6
Positioning an image or figure in left faux column
Hello - thank you for basscss ("basis"?). I've been using it to learn more about css, and to also get used to a npm / gulp workflow.

Perhaps this is easy to do given existing classes, but, please let me ask:

I'd like to put my blog articles in a single column, set up so there is a large-ish left margin. In that margin, instead of a typical sidebar, I want to put all images and figures, so the text is not broken up so much.

There's a <section> in the bassplate template index, showing Typography, structured like:

<div class="sm-flex mxn2"> <div class="sm-col-5 px2"> <h1 class="mt0">Hamburger 1</h1> <h2>etc etc... </div> <div class="sm-col-7 px2"> <p>Content, content, content</p>

This seems to be close to what I need. Within the paragraphs of the sm-col-7 div, I can put a:

<div style="position:relative;"> <img src="img/logo.png" style="position:absolute; float:left; left:-220px; margin-right:10px; width:200px; border:none;"/> </div>

This kind of ham-handedly places the img so it juts out into the left margin of this main column div, and works well enough, but is not responsive at all.

I'm wondering, is there a more skillful way to do this, or a more "accepted" or "best practice" way to do this, so that it's responsive?

When I write blog posts, I use a static site generator, and write in Markdown. The SSG supports putting html tags inside the markdown text, so, I can put a figure or img tag with specific classes, inside the paragraphs of the blog post. So that's my intention: combining a figure tag with an img or maybe a picture tag.

At a large viewport size, I'd like the image / figure to be in the left margin. As the viewport decreases, I'd like it to fold in, so the image / figure is between the paragraphs neatly.

Any code I add into the markdown, would end up being nested inside the sm-col-7 div, so I'm just not sure what I can use here.

Thanks for your help and consideration.

Sincerely Rick
opened by RickCogley 6
Bump flat and mocha
Bumps flat to 5.0.2 and updates ancestor dependency mocha. These dependencies need to be updated together.

Updates flat from 4.1.0 to 5.0.2

Commits

e5ffd66 Release 5.0.2

fdb79d5 Update dependencies, refresh lockfile, format with standard.

e52185d Test against node 14 in CI.

0189cb1 Avoid arrow function syntax.

f25d3a1 Release 5.0.1

54cc7ad use standard formatting

779816e drop dependencies

2eea6d3 Bump lodash from 4.17.15 to 4.17.19

a61a554 Bump acorn from 7.1.0 to 7.4.0

20ef0ef Fix prototype pollution on unflatten

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by timoxley, a new releaser for flat since your current version.

Updates mocha from 6.1.4 to 10.2.0

Release notes

Sourced from mocha's releases.

v10.2.0

10.2.0 / 2022-12-11

:tada: Enhancements

#4945: API: add possibility to decorate ESM name before import (@j0tunn)

:bug: Fixes

#4946: Browser: color of failed test icon (@kleisauke)

:book: Documentation

#4944: Remove duplicated header (@PauloGoncalvesBH)

v10.1.0

10.1.0 / 2022-10-16

:tada: Enhancements

#4896: Browser: add support for prefers-color-scheme: dark (@greggman)

:nut_and_bolt: Other

#4912: Browser: increase contrast for replay buttons (@JoshuaKGoldberg)

#4905: Use standard Promise.allSettled instead of polyfill (@outsideris)

#4899: Upgrade official GitHub actions to latest (@ddzz)

#4770: Fix regex in function clean(@yetingli)

v10.0.0

10.0.0 / 2022-05-01

:boom: Breaking Changes

#4845: Drop Node.js v12.x support (@juergba)

#4848: Drop Internet-Explorer-11 support (@juergba)

#4857: Drop AMD/RequireJS support (@juergba)

#4866: Drop Growl notification support (@juergba)

#4863: Rename executable bin/mocha to bin/mocha.js (@juergba)

#4865: --ignore option in Windows: upgrade Minimatch (@juergba)

#4861: Remove deprecated Runner signature (@juergba)

:nut_and_bolt: Other

... (truncated)

Changelog

Sourced from mocha's changelog.

10.2.0 / 2022-12-11

:tada: Enhancements

#4945: API: add possibility to decorate ESM name before import (@j0tunn)

:bug: Fixes

#4946: Browser: color of failed test icon (@kleisauke)

:book: Documentation

#4944: Remove duplicated header (@PauloGoncalvesBH)

10.1.0 / 2022-10-16

:tada: Enhancements

#4896: Browser: add support for prefers-color-scheme: dark (@greggman)

:nut_and_bolt: Other

#4912: Browser: increase contrast for replay buttons (@JoshuaKGoldberg)

#4905: Use standard Promise.allSettled instead of polyfill (@outsideris)

#4899: Upgrade official GitHub actions to latest (@ddzz)

#4770: Fix regex in function clean(@yetingli)

10.0.0 / 2022-05-01

:boom: Breaking Changes

#4845: Drop Node.js v12.x support (@juergba)

#4848: Drop Internet-Explorer-11 support (@juergba)

#4857: Drop AMD/RequireJS support (@juergba)

#4866: Drop Growl notification support (@juergba)

#4863: Rename executable bin/mocha to bin/mocha.js (@juergba)

#4865: --ignore option in Windows: upgrade Minimatch (@juergba)

#4861: Remove deprecated Runner signature (@juergba)

:nut_and_bolt: Other

#4878: Update production dependencies (@juergba)

#4876: Add Node.js v18 to CI test matrix (@outsideris)

... (truncated)

Commits

202e9b8 build(v10.2.0): release

6782d6d build(v10.2.0): update CHANGELOG

73bb819 feat(esm): ability to decorate ESM module name before importing it (#4945)

fc4ac58 chore(devDeps): remove unused depedencies (#4949)

0a10ddc docs: remove duplicated header (#4944)

b0a0fb8 fix(browser): failed test icon color (#4946)

3cc9cac ci: update stale action (#4931)

8f3c37b chore(ci): workaround for firefox error (#4933)

5f96d51 build(v10.1.0): release

ed74f16 build(v10.1.0): update CHANGELOG

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by juergba, a new releaser for mocha since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump json5, css-loader, karma-webpack, postcss-loader, style-loader and webpack
Bumps json5 to 2.2.2 and updates ancestor dependencies json5, css-loader, karma-webpack, postcss-loader, style-loader and webpack. These dependencies need to be updated together.

Updates json5 from 2.1.0 to 2.2.2

Release notes

Sourced from json5's releases.

v2.2.2

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

Changelog

Sourced from json5's changelog.

v2.2.2 [code, diff]

Fix: Properties with the name __proto__ are added to objects and arrays. (#199) This also fixes a prototype pollution vulnerability reported by Jonathan Gregson! (#295).

v2.2.1 [code, diff]

Fix: Removed dependence on minimist to patch CVE-2021-44906. (#266)

v2.2.0 [code, diff]

New: Accurate and documented TypeScript declarations are now included. There is no need to install @types/json5. (#236, #244)

v2.1.3 [code, diff]

Fix: An out of memory bug when parsing numbers has been fixed. (#228, #229)

v2.1.2 [code, diff]

Fix: Bump minimist to v1.2.5. (#222)

v2.1.1 [code, diff]

New: package.json and package.json5 include a module property so bundlers like webpack, rollup and parcel can take advantage of the ES Module build. (#208)

Fix: stringify outputs \0 as \\x00 when followed by a digit. (#210)

Fix: Spelling mistakes have been fixed. (#196)

Commits

14f8cb1 2.2.2

10cc7ca docs: update CHANGELOG for v2.2.2

7774c10 fix: add proto to objects and arrays

edde30a Readme: slight tweak to intro

97286f8 Improve example in readme

d720b4f Improve readme (e.g. explain JSON5 better!) (#291)

910ce25 docs: fix spelling of Aseem

2aab4dd test: require tap as t in cli tests

6d42686 test: remove mocha syntax from tests

4798b9d docs: update installation and usage for modules

Additional commits viewable in compare view

Updates css-loader from 2.1.1 to 6.7.3

Release notes

Sourced from css-loader's releases.

v6.7.3

6.7.3 (2022-12-14)

Bug Fixes

remove sourceURL from emitted CSS (#1487) (962924c)

v6.7.2

6.7.2 (2022-11-13)

Bug Fixes

css modules generation with inline syntax (#1480) (2f4c273)

v6.7.1

6.7.1 (2022-03-08)

Bug Fixes

defaultGetLocalIdent export (#1427) (74dac1e)

v6.7.0

6.7.0 (2022-03-04)

Features

re-export defaultGetLocalIdent (#1423) (207cf36)

v6.6.0

6.6.0 (2022-02-02)

Features

added the hashStrategy option (ca4abce)

v6.5.1

6.5.1 (2021-11-03)

Bug Fixes

regression with unicode characters in locals (b7a8441)

runtime path generation (#1393) (feafea8)

v6.5.0

... (truncated)

Changelog

Sourced from css-loader's changelog.

6.7.3 (2022-12-14)

Bug Fixes

remove sourceURL from emitted CSS (#1487) (962924c)

6.7.2 (2022-11-13)

Bug Fixes

css modules generation with inline syntax (#1480) (2f4c273)

6.7.1 (2022-03-08)

Bug Fixes

defaultGetLocalIdent export (#1427) (74dac1e)

6.7.0 (2022-03-04)

Features

re-export defaultGetLocalIdent (#1423) (207cf36)

6.6.0 (2022-02-02)

Features

added the hashStrategy option (ca4abce)

6.5.1 (2021-11-03)

Bug Fixes

regression with unicode characters in locals (b7a8441)

runtime path generation (#1393) (feafea8)

6.5.0 (2021-10-26)

Features

support absolute URL in url() when experiments.buildHttp enabled (#1389) (8946be4)

... (truncated)

Commits

ef749f2 chore(release): 6.7.3

36fb945 chore: fix cspell

962924c fix: remove sourceURL from emitted CSS (#1487)

3f3f302 chore(deps): bump decode-uri-component from 0.2.0 to 0.2.2 (#1486)

04ca713 chore: update dependencies to the latest version (#1485)

9449827 chore: update styfle/cancel-workflow-action (#1484)

6c67af8 chore: add cSpell to check spelling issues (#1482)

239b9ac chore(deps): bump loader-utils from 2.0.3 to 2.0.4 (#1481)

394d200 chore(release): 6.7.2

2f4c273 fix: css modules generation with inline syntax (#1480)

Additional commits viewable in compare view

Updates karma-webpack from 3.0.5 to 5.0.0

Release notes

Sourced from karma-webpack's releases.

v5.0.0

No release notes provided.

v5.0.0-alpha.6

Bug Fixes

automatically fix missing webpack framework and report a warning (ea5dc8e)

fix an issue where multiple karma-webpack processes could not run in parallel (ea3dabe)

bump hotfix dependencies (98b3ec9)

v5.0.0-alpha.5

Bug Fixes

change the webpack peer dependency to webpack v5 (2e0ca74)

v5.0.0-alpha.4

Bug Fixes

fix compatibility issues for webpack v5 (8d7366f), closes #452

remove deprecation warning for .watch() (4fe1f60)

v4.0.2

4.0.2 (2019-06-08)

Bug Fixes

don't error when webpackMiddleware config not provided' (#418) (7570912)

v4.0.1

4.0.1 (2019-06-07)

Bug Fixes

package: point to dist instead of lib (#417) (c0a0d47)

v4.0.0

4.0.0 (2019-06-07)

Bug Fixes

karma-webpack: Regression in multi-compiler mode (#390) (#391) (63cfd78)

chore

default: update (#412) (74e526f)

... (truncated)

Changelog

Sourced from karma-webpack's changelog.

5.0.0 (2021-02-02)

No changes, just a new stable release.

5.0.0-alpha.6 (2021-01-30)

Bug Fixes

automatically fix missing webpack framework and report a warning (ea5dc8e)

fix an issue where multiple karma-webpack processes could not run in parallel (ea3dabe)

bump hotfix dependencies (98b3ec9)

5.0.0-alpha.5 (2020-12-06)

Bug Fixes

change the webpack peer dependency to webpack v5 (2e0ca74)

5.0.0-alpha.4 (2020-12-06)

Bug Fixes

fix compatibility issues for webpack v5 (8d7366f), closes #452

remove deprecation warning for .watch() (4fe1f60)

5.0.0-alpha.3.0 (2019-03-07)

Bug Fixes

allow for same filenames to be added (#401) (80ce2d8), closes #400

5.0.0-alpha.2 (2019-02-13)

Bug Fixes

karma-webpack: normalize paths to be compatible with windows (b783e1c)

5.0.0-alpha.1 (2019-01-01)

... (truncated)

Commits

e2423b4 chore: release v5.0.0

46a5505 Merge branch 'master' into next

71fc63a fix(config): ignore entry options (#479)

05cfa79 fix(docs): fixed warning inaccuracy (#478)

1598fa6 fix(config): force default output.filename (#477)

d603679 change(readme): made minor adjustments (#476)

5300200 refactor(*): break up into individual modules (#474)

8ad09d1 fix(test): handle scenario test rejection (#473)

da86766 chore(release): 5.0.0-alpha.6

98b3ec9 chore(deps): bump hotfix dependencies (#472)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ryanclark, a new releaser for karma-webpack since your current version.

Updates postcss-loader from 3.0.0 to 7.0.2

Release notes

Sourced from postcss-loader's releases.

v7.0.2

7.0.2 (2022-11-29)

Bug Fixes

support ESM version of postcss.config.js and postcss.config.mjs (#614) (955085f)

v7.0.1

7.0.1 (2022-07-11)

Bug Fixes

unexpected failing on CSS syntax error (#593) (888d72e)

v7.0.0

7.0.0 (2022-05-18)

⚠ BREAKING CHANGES

minimum supported Node.js version is 14.15.0

v6.2.1

6.2.1 (2021-11-26)

Bug Fixes

watching configuration (#553) (7f165b4)

v6.2.0

6.2.0 (2021-10-13)

Features

add link field in schema (#540) (1ae8212)

v6.1.1

6.1.1 (2021-07-01)

Bug Fixes

do not swallow exception from postcss (2eec42b)

v6.1.0

6.1.0 (2021-06-10)

... (truncated)

Changelog

Sourced from postcss-loader's changelog.

7.0.2 (2022-11-29)

Bug Fixes

support ESM version of postcss.config.js and postcss.config.mjs (#614) (955085f)

7.0.1 (2022-07-11)

Bug Fixes

unexpected failing on CSS syntax error (#593) (888d72e)

7.0.0 (2022-05-18)

⚠ BREAKING CHANGES

minimum supported Node.js version is 14.15.0

6.2.1 (2021-11-26)

Bug Fixes

watching configuration (#553) (7f165b4)

6.2.0 (2021-10-13)

Features

add link field in schema (#540) (1ae8212)

6.1.1 (2021-07-01)

Bug Fixes

do not swallow exception from postcss (2eec42b)

6.1.0 (2021-06-10)

Features

allow String value for the "implementation" option (0d342b1)

6.0.0 (2021-06-10)

... (truncated)

Commits

2129116 chore(release): 7.0.2

955085f fix: support ESM version of postcss.config.js and postcss.config.mjs (#614)

b0f4749 chore: update styfle/cancel-workflow-action (#612)

ab3ff44 chore: add cSpell to check spelling issues (#610)

3177135 chore: update dependencies to the latest version (#609)

08b19c7 docs: update cla link (#608)

49a0943 ci: add node v19 (#607)

d274f90 ci: add dependency review action (#606)

64af37b chore: update dependencies to the latest version (#605)

548e8aa chore: update commitlint action (#604)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for postcss-loader since your current version.

Updates style-loader from 0.23.1 to 3.3.1

Release notes

Sourced from style-loader's releases.

v3.3.1

3.3.1 (2021-10-21)

Bug Fixes

small perf improvement (#544) (610524e)

v3.3.0

3.3.0 (2021-09-21)

Features

added support for supports(), layer() and media from @import at-rules (b9a600c)

allow to pass options to insert function through style.use() (#535) (f8ef63b)

v3.2.1

3.2.1 (2021-07-20)

Bug Fixes

added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

v3.2.0

3.2.0 (2021-07-20)

Features

add link field in schema (#525) (7ed3456)

Bug Fixes

added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

v3.1.0

3.1.0 (2021-07-12)

Features

allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)

allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

... (truncated)

Changelog

Sourced from style-loader's changelog.

3.3.1 (2021-10-21)

Bug Fixes

small perf improvement (#544) (610524e)

3.3.0 (2021-09-21)

Features

added support for supports(), layer() and media from @import at-rules (b9a600c)

allow to pass options to insert function through style.use() (#535) (f8ef63b)

3.2.1 (2021-07-20)

Bug Fixes

added the styletagtransform option when it is a module to addBuildDependency (#528) (270513f)

3.2.0 (2021-07-20)

Features

add link field in schema (#525) (7ed3456)

Bug Fixes

added the insert option when it is a module to addBuildDependency (#527) (3963c0b)

3.1.0 (2021-07-12)

Features

allow to specify the insert option from file, we strongly recommend do it, using the insert option from file will reduce your bundle size, example (#521) (56fc8f0)

allow to specify the styleTagTransform option from file, we strongly recommend do it, using the styleTagTransform option from file will reduce your bundle size, example

Bug Fixes

reduce runtime (#519) (8a26186)

reduce runtime when you use custom options (#520) (21c80c8)

3.0.0 (2021-06-24)

... (truncated)

Commits

4663416 chore(release): 3.3.1

610524e fix: small perf improvement (#544)

c799ecc chore(release): 3.3.0

b47718a test: update (#542)

43bede4 refactor: code (#541)

b9a600c feat: added support for @supports, @layer and @media from @import at-...

74fa1cf chore(deps): update (#539)

cdf0ba7 refactor: code

caf66a0 chore(deps): update

f8ef63b feat: allow to pass options to insert function through style.use() (#535)

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for style-loader since your current version.

Updates webpack from 4.30.0 to 5.75.0

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

experiments.* normalize to false when opt-out

avoid NaN%

show the correct error when using a conflicting chunk name in code

HMR code tests existance of window before trying to access it

fix eval-nosources-* actually exclude sources

fix race condition where no module is returned from processing module

fix position of standalong semicolon in runtime code

Features

add support for @import to extenal CSS when using experimental CSS in node

add i64 support to the deprecated WASM implementation

Developer Experience

expose EnableWasmLoadingPlugin

add more typings

generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")

add support for ES2022 features like static blocks

add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive

make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules

remove left-over from debugging in TLA/async modules runtime code

remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed

fix shareScope option for ModuleFederationPlugin

set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance

Extensibility

export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

8241da7 5.75.0

a91d923 Merge pull request #16458 from webpack/bugfix/semi

4608b11 Merge pull request #16457 from webpack/tooling/update

dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback

23b9a1c Merge pull request #16167 from exposir/fixts

6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose

f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64

761a542 fix semicolon position

2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources

c18203c update tooling

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump qs and body-parser
Bumps qs and body-parser. These dependencies needed to be updated together. Updates qs from 6.7.0 to 6.11.0

Changelog

Sourced from qs's changelog.

6.11.0

[New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option (#442)

[readme] fix version badge

6.10.5

[Fix] stringify: with arrayFormat: comma, properly include an explicit [] on a single-item array (#434)

6.10.4

[Fix] stringify: with arrayFormat: comma, include an explicit [] on a single-item array (#441)

[meta] use npmignore to autogenerate an npmignore file

[Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, object-inspect, tape

6.10.3

[Fix] parse: ignore __proto__ keys (#428)

[Robustness] stringify: avoid relying on a global undefined (#427)

[actions] reuse common workflows

[Dev Deps] update eslint, @ljharb/eslint-config, object-inspect, tape

6.10.2

[Fix] stringify: actually fix cyclic references (#426)

[Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] add note and links for coercing primitive values (#408)

[actions] update codecov uploader

[actions] update workflows

[Tests] clean up stringify tests slightly

[Dev Deps] update eslint, @ljharb/eslint-config, aud, object-inspect, safe-publish-latest, tape

6.10.1

[Fix] stringify: avoid exception on repeated object values (#402)

6.10.0

[New] stringify: throw on cycles, instead of an infinite loop (#395, #394, #393)

[New] parse: add allowSparse option for collapsing arrays with missing indices (#312)

[meta] fix README.md (#399)

[meta] only run npm run dist in publish, not install

[Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbols, tape

[Tests] fix tests on node v0.6

[Tests] use ljharb/actions/node/install instead of ljharb/actions/node/run

[Tests] Revert "[meta] ignore eclint transitive audit warning"

6.9.7

[Fix] parse: ignore __proto__ keys (#428)

[Fix] stringify: avoid encoding arrayformat comma when encodeValuesOnly = true (#424)

[Robustness] stringify: avoid relying on a global undefined (#427)

[readme] remove travis badge; add github actions/codecov badges; update URLs

[Docs] add note and links for coercing primitive values (#408)

[Tests] clean up stringify tests slightly

[meta] fix README.md (#399)

Revert "[meta] ignore eclint transitive audit warning"

... (truncated)

Commits

56763c1 v6.11.0

ddd3e29 [readme] fix version badge

c313472 [New] [Fix] stringify: revert 0e903c0; add commaRoundTrip option

95bc018 v6.10.5

0e903c0 [Fix] stringify: with arrayFormat: comma, properly include an explicit `[...

ba9703c v6.10.4

4e44019 [Fix] stringify: with arrayFormat: comma, include an explicit [] on a s...

113b990 [Dev Deps] update object-inspect

c77f38f [Dev Deps] update eslint, @ljharb/eslint-config, aud, has-symbol, tape

2cf45b2 [meta] use npmignore to autogenerate an npmignore file

Additional commits viewable in compare view

Updates body-parser from 1.19.0 to 1.20.1

Release notes

Sourced from body-parser's releases.

1.20.0

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: [email protected]

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

1.19.2

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

deps: [email protected]

deps: [email protected]

1.19.1

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: type-is@~1.6.18

Changelog

Sourced from body-parser's changelog.

1.20.1 / 2022-10-06

deps: [email protected]

perf: remove unnecessary object clone

1.20.0 / 2022-04-02

Fix error message for json parse whitespace in strict

Fix internal error when inflated body exceeds limit

Prevent loss of async hooks context

Prevent hanging when request already read

deps: [email protected]

Replace internal eval usage with Function constructor

Use instance methods on process to check for listeners

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

1.19.2 / 2022-02-15

deps: [email protected]

deps: [email protected]

Fix handling of __proto__ keys

deps: [email protected]

deps: [email protected]

1.19.1 / 2021-12-10

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: [email protected]

deps: type-is@~1.6.18

Commits

830bdfb 1.20.1

ecad1cc build: [email protected]

03b93cf build: [email protected]

2c611fc build: [email protected]

f199e94 perf: remove unnecessary object clone

0123e12 build: [email protected]

de1e6c2 build: [email protected]

477ff13 build: [email protected]

40c3fff deps: [email protected]

4aa84b7 build: [email protected]

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump decode-uri-component from 0.2.0 to 0.2.2
Bumps decode-uri-component from 0.2.0 to 0.2.2.

Release notes

Sourced from decode-uri-component's releases.

v0.2.2

Prevent overwriting previously decoded tokens 980e0bf

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.1...v0.2.2

v0.2.1

Switch to GitHub workflows 76abc93

Fix issue where decode throws - fixes #6 746ca5d

Update license (#1) 486d7e2

Tidelift tasks a650457

Meta tweaks 66e1c28

https://github.com/SamVerschueren/decode-uri-component/compare/v0.2.0...v0.2.1

Commits

a0eea46 0.2.2

980e0bf Prevent overwriting previously decoded tokens

3c8a373 0.2.1

76abc93 Switch to GitHub workflows

746ca5d Fix issue where decode throws - fixes #6

486d7e2 Update license (#1)

a650457 Tidelift tasks

66e1c28 Meta tweaks

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump engine.io and karma
Bumps engine.io to 6.2.1 and updates ancestor dependency karma. These dependencies need to be updated together.

Updates engine.io from 3.2.1 to 6.2.1

Release notes

Sourced from engine.io's releases.

6.2.1

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

6.2.0

Features

add the "maxPayload" field in the handshake details (088dcb4)

So that clients in HTTP long-polling can decide how many packets they have to send to stay under the maxHttpBufferSize value.

This is a backward compatible change which should not mandate a new major revision of the protocol (we stay in v4), as we only add a field in the JSON-encoded handshake data:

0{"sid":"lv_VI97HAXpY6yYWAAAC","upgrades":["websocket"],"pingInterval":25000,"pingTimeout":5000,"maxPayload":1000000}

Links

Diff: https://github.com/socketio/engine.io/compare/6.1.3...6.2.0

Client release: 6.2.0

ws version: ~8.2.3

6.1.3

Bug Fixes

typings: allow CorsOptionsDelegate as cors options (#641) (a463d26)

uws: properly handle chunked content (#642) (3367440)

... (truncated)

Changelog

Sourced from engine.io's changelog.

6.2.1 (2022-11-20)

:warning: This release contains an important security fix :warning:

A malicious client could send a specially crafted HTTP request, triggering an uncaught exception and killing the Node.js process:

Error: read ECONNRESET at TCP.onStreamRead (internal/stream_base_commons.js:209:20) Emitted 'error' event on Socket instance at: at emitErrorNT (internal/streams/destroy.js:106:8) at emitErrorCloseNT (internal/streams/destroy.js:74:3) at processTicksAndRejections (internal/process/task_queues.js:80:21) { errno: -104, code: 'ECONNRESET', syscall: 'read' }

Please upgrade as soon as possible.

Bug Fixes

catch errors when destroying invalid upgrades (#658) (425e833)

3.6.0 (2022-06-06)

Bug Fixes

add extension in the package.json main entry (#608) (3ad0567)

do not reset the ping timer after upgrade (1f5d469), closes socketio/socket.io-client-swift#1309

Features

decrease the default value of maxHttpBufferSize (58e274c)

This change reduces the default value from 100 mb to a more sane 1 mb.

This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.

See also: https://github.com/advisories/GHSA-j4f2-536g-r55m

increase the default value of pingTimeout (f55a79a)

... (truncated)

Commits

24b847b chore(release): 6.2.1

425e833 fix: catch errors when destroying invalid upgrades (#658)

99adb00 chore(deps): bump xmlhttprequest-ssl and engine.io-client in /examples/latenc...

d196f6a chore(deps): bump minimatch from 3.0.4 to 3.1.2 (#660)

7c1270f chore(deps): bump nanoid from 3.1.25 to 3.3.1 (#659)

535a01d ci: add Node.js 18 in the test matrix

1b71a6f docs: remove "Vanilla JS" highlight from README (#656)

917d1d2 refactor: replace deprecated String.prototype.substr() (#646)

020801a chore: add changelog for version 3.6.0

ed1d6f9 test: make test script work on Windows (#643)

Additional commits viewable in compare view

Updates karma from 4.1.0 to 6.4.1

Release notes

Sourced from karma's releases.

v6.4.1

6.4.1 (2022-09-19)

Bug Fixes

pass integrity value (63d86be)

v6.4.0

6.4.0 (2022-06-14)

Features

support SRI verification of link tags (dc51a2e)

support SRI verification of script tags (6a54b1c)

v6.3.20

6.3.20 (2022-05-13)

Bug Fixes

prefer IPv4 addresses when resolving domains (e17698f), closes #3730

v6.3.19

6.3.19 (2022-04-19)

Bug Fixes

client: error out when opening a new tab fails (099b85e)

v6.3.18

6.3.18 (2022-04-13)

Bug Fixes

deps: upgrade socket.io to v4.4.1 (52a30bb)

v6.3.17

6.3.17 (2022-02-28)

Bug Fixes

deps: update colors to maintained version (#3763) (fca1884)

v6.3.16

... (truncated)

Changelog

Sourced from karma's changelog.

6.4.1 (2022-09-19)

Bug Fixes

pass integrity value (63d86be)

6.4.0 (2022-06-14)

Features

support SRI verification of link tags (dc51a2e)

support SRI verification of script tags (6a54b1c)

6.3.20 (2022-05-13)

Bug Fixes

prefer IPv4 addresses when resolving domains (e17698f), closes #3730

6.3.19 (2022-04-19)

Bug Fixes

client: error out when opening a new tab fails (099b85e)

6.3.18 (2022-04-13)

Bug Fixes

deps: upgrade socket.io to v4.4.1 (52a30bb)

6.3.17 (2022-02-28)

Bug Fixes

deps: update colors to maintained version (#3763) (fca1884)

6.3.16 (2022-02-10)

Bug Fixes

security: mitigate the "Open Redirect Vulnerability" (ff7edbb)

... (truncated)

Commits

0013121 chore(release): 6.4.1 [skip ci]

63d86be fix: pass integrity value

84f7cc3 chore(release): 6.4.0 [skip ci]

f2d0663 docs: add integrity parameter

dc51a2e feat: support SRI verification of link tags

6a54b1c feat: support SRI verification of script tags

5e71cf5 chore(release): 6.3.20 [skip ci]

e17698f fix: prefer IPv4 addresses when resolving domains

60f4f79 build: add Node 16 and 18 to the CI matrix

6ff5aaf chore(release): 6.3.19 [skip ci]

Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0
Bump loader-utils from 1.1.0 to 1.4.2
Bumps loader-utils from 1.1.0 to 1.4.2.

Release notes

Sourced from loader-utils's releases.

v1.4.2

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

v1.4.1

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

v1.4.0

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

v1.3.0

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

v1.2.3

1.2.3 (2018-12-27)

Bug Fixes

interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

v1.2.2

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Changelog

Sourced from loader-utils's changelog.

1.4.2 (2022-11-11)

Bug Fixes

ReDoS problem (#226) (17cbf8f)

1.4.1 (2022-11-07)

Bug Fixes

security problem (#220) (4504e34)

1.4.0 (2020-02-19)

Features

the resourceQuery is passed to the interpolateName method (#163) (cd0e428)

1.3.0 (2020-02-19)

Features

support the [query] template for the interpolatedName method (#162) (469eeba)

1.2.3 (2018-12-27)

Bug Fixes

interpolateName: don't interpolated hashType without hash or contenthash (#140) (3528fd9)

1.2.2 (2018-12-27)

Bug Fixes

... (truncated)

Commits

331ad50 chore(release): 1.4.2

17cbf8f fix: ReDoS problem (#226)

8f082b3 chore(release): 1.4.1

4504e34 fix: security problem (#220)

d95b8b5 chore(release): 1.4.0

cd0e428 feat: the resourceQuery is passed to the interpolateName method (#163)

06d36cf chore(release): 1.3.0

469eeba feat: support the [query] template for the interpolatedName method (#162)

909c99d chore: funding.yml config and CI fix (#159)

b5b74f0 Set up CI with Azure Pipelines

Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by evilebottnawi, a new releaser for loader-utils since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR

@dependabot recreate will recreate this PR, overwriting any edits that have been made to it

@dependabot merge will merge this PR after your CI passes on it

@dependabot squash and merge will squash and merge this PR after your CI passes on it

@dependabot cancel merge will cancel a previously requested merge and block automerging

@dependabot reopen will reopen this PR if it is closed

@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually

@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)

@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot use these labels will set the current labels as the default for future PRs for this repo and language

@dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language

@dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language

@dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

dependencies
opened by dependabot[bot] 0

Releases(8.0.0)

8.0.0(Feb 13, 2016)
Inspired by discussions with the community, Basscss v8 is a simplification of styles and a narrowing of scope based on recent trends in front-end web development – particularly component-based UI approaches – and the unique features that Basscss provides. The core module is now just 2.2 KB minified and gzipped with a focus on widely applicable typography and layout utilities that can be added to virtually any existing style guide or framework.

Basscss v8 should be considered feature complete – that is all essential layout and typography utilities are, for the most part, covered. There may be additional minor features and optional modules added in the future, but this release is meant to be more stable in regards to features and naming conventions than previous releases.

Changes

Breaking All base element styles (including body, typography, form, and table styles) have been removed in favor of using simpler resets or user-defined styles. To help with transitioning, the new basscss-basic package has been put together for use as-is or as a starting point for custom base styles.

Breaking The btn, btn-primary, and btn-outline modules have been removed from the core package. The are optionally available in basscss-addons

Breaking The color-forms module has been removed from the core package. A new optional basscss-forms module is available as a replacement.

Breaking All color styles have been removed from the core in favor of user-defined styles and more discrete color style modules. Several color modules are available in basscss-addons or checkout basscss/themes for inspiration.

Breaking The flex-object module is now replaced with basscss-flexbox, a more generic and more powerful suite of utilities.

Breaking The .container style has been removed from basscss-grid and is replaced with max-width utilities in basscss-layout.

Breaking The basscss-border module no longer includes border-color styles. By default borders inherit foreground color. To adjust the color, use border-color utilities.

Breaking The basscss-responsive-states module has been replaced with the basscss-hide module.

All custom properties and custom media queries are now withing each individual module and basscss-defaults is deprecated.

Margin utilities now include x and y shorthand styles for the x- and y-axes.

Margin utilities include .ml-auto and .mr-auto for added possibilities with flexbox layouts.

Padding utilities now include t, r, b, and l shorthand styles for top, right, bottom, and left directions.

Other

The core modules are now tested with Karma. Run npm test to see it in action.

Each npm module now includes compiled CSS in the css folder.

Optional modules are now consolidated into a single monorepo: basscss/addons

Migrating

For any module that has been removed from the core, they are still available from basscss/addons. To continue using these modules, import them in addition to the core module.

Base element styles should be replaced with custom styles or something like basscss-basic. The following base elements might be affected: body, img, svg, input, select, textarea, fieldset, label, table, th, td, h1, h2, h3, h4, h5, h6, p, dl, ol, ul, pre, samp, code, a, and hr

btn, btn-primary, and btn-outline styles should either be imported separately or replaced with custom styles.

When using the new basscss-forms module, replace instances of the field class with input, select, and textarea respectively. Optionally use the label style for labels. Custom colors styles should be added to replace the older basscss-color-forms module.

The table-light style has been removed. Replace it with custom styles.

For color styles, import additional modules or add custom styles.

The new basscss-flexbox module uses a different naming convention from the flex-object module to be more in-line with property and value names.

Replace flex-center with items-center.

Replace flex-baseline with items-baseline.

Replace flex-stretch with items-stretch.

Replace flex-start with items-start.

Replace flex-end with items-end.

Replace flex-justify with justify-between

flex-grow has been removed. In many cases flex-auto can replace the old flex-grow style.

Replace flex-first with order-0.

Replace flex-last with order-last.

Replace container with max-width-4 mx-auto.

For elements using .border, .border-top, .border-right, .border-bottom, or .border-left, add an additional border-color class and custom style where the border color differs from foreground color.

The basscss-hide module works differently from the older basscss-responsive-states module. Each style in the new module sets display: none at just one breakpoint. Adjust classes on elements using .sm-show, .md-show, .lg-show, .sm-hide, and .md-hide.

Replace sm-show with xs-hide.

Replace md-show with xs-hide sm-hide.

Replace lg-show with xs-hide sm-hide md-hide.

Replace sm-hide with sm-hide md-hide lg-hide.

Replace md-hide with md-hide lg-hide.

lg-hide works the same as in the previous module.

Source code(tar.gz)
Source code(zip)
v7.0.0(Jun 30, 2015)
Basscss 7 is a simplification and realignment of design principles intended to better fit in with component-base architectures. Version 7 is less opinionated and more flexible than ever. With 19% fewer rules and 27% fewer declarations, version 7 is just 3.32KB gzipped – 13% smaller than before.

New

Simpler buttons with btn, btn-primary, and btn-outline modules

Vertical alignment with the align module

Utility type-scale module has been separated from base-typography

.field-light class is now .field

.border-box utility

.p0 utility

.border-none utility

Removes the following styles

Base font-size for <p>, <dl>, <ol>, and <ul>

Base <hr> margin styles

.fieldset-reset – use .p0, .m0, and .border-none instead

.full-width – use .col-12 instead

.half-width – use .col-6 instead

Modules removed

Note: modules are still optionally available through npm

progress - .progress

input range - .range-light

base-buttons - .button

button-sizes - .button-big, .button-small, and .button-narrow

button-outline - .button-outline

button-transparent - .button-transparent

background-images - .bg-cover, .bg-contain, .bg-center, .bg-top, .bg-right, .bg-bottom, .bg-left

color-forms-dark - .field-dark

border-colors - .border-black, .border-gray, etc.

Source code(tar.gz)
Source code(zip)
6.0.0(Apr 11, 2015)
Basscss now has it's own GitHub organization, and this repo has been reorganized and cleaned up.

Changes

The public documentation site is now here: https://github.com/basscss/basscss.github.io

Transpiled Sass partials are now in their own repo: https://github.com/basscss/basscss.github.io

Some modules have been renamed for better consistency.

Minor visual bug fixes for button-transparent and button-outline modules.

Source code(tar.gz)
Source code(zip)
v5.0.0(Feb 24, 2015)
Basscss now is more colorful and more flexible with the flex-object flexbox layout module and new extensible button styles.

New

flex-object flexbox layout module included by default

New color palette from mrmrs/colors, with a total of 17 colors and 4 background darken utilities

Border color utilities to alter the default border color

Default .button color styles in basscss-color-base, extensible with color utilities

New button-outline module, extensible with color utilities

New button-transparent module, extensible with color utilities

ui-utility-button-sizes included by default

background-images module included by default

.muted utility to set opacity to .5

Breaking Changes

Deprecated:

table-object

button-blue

button-blue-outline

button-red

button-gray

button-light-gray

Changed:

basscss-colors module (e.g. dark-gray, mid-gray, light-gray)

Migrating to v5

Deprecated modules are still available through npm for custom builds. To use the default styles new in v5, do the following:

Table Object

Replace instances of the table object with flex-object utilities or clearfix/float solutions.

Buttons

Replace .button-blue with .button.

Replace .button-blue-outline with .button-outline.blue.

Replace .button-red with .button.bg-red.

Replace .button-gray with .button.bg-gray.

Replace .button-light-gray with .button.bg-silver.

Colors

The entire color palette has been replaced with mrmrs/colors. For backwards compatibility, .dark-gray, .mid-gray, and .light-gray are mapped to .black, gray, and .silver, respectively, but will be deprecated in a future version. .lighter-gray has been removed. .white has not changed.

The default values for .blue, .green, .yellow, and .red have changed.

The following colors have also been added:

.aqua

.navy

.teal

.olive

.lime

.orange

.fuchsia

.purple

.maroon

Source code(tar.gz)
Source code(zip)
v4.2.0(Dec 30, 2014)
What's New

More flexible styles and variables for buttons, form elements, and tables

New button-light-gray style

Removed UI Utilities module from core – now available as optional modules

Flatter specificity graph

Small adjustments to default colors

New in the Docs

Customize web app to build custom stylesheets in the browser

More documentation for creating custom builds

Tips & Tricks Guide

Updated documentation for flex-object module

Documentation for each individual module in /docs/modules

Source code(tar.gz)
Source code(zip)
v4.1.3(Oct 12, 2014)

Source code(tar.gz)
Source code(zip)
v4.1.2(Oct 12, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.70 KB)
basscss.css.zip(3.62 KB)
v4.1.1(Oct 7, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.70 KB)
basscss.css.zip(3.60 KB)
v4.1.0(Oct 6, 2014)

Utilities for UI elements
Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.70 KB)
basscss.css.zip(3.60 KB)
v4.0.8(Oct 5, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.65 KB)
basscss.css.zip(3.14 KB)
v4.0.7(Oct 3, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.71 KB)
basscss.css.zip(3.19 KB)
v4.0.6(Oct 2, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.71 KB)
basscss.css.zip(3.20 KB)
v4.0.5(Sep 30, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.65 KB)
basscss.css.zip(3.03 KB)
4.0.3(Sep 29, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.64 KB)
basscss.css.zip(2.94 KB)
4.0.1(Sep 26, 2014)

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.64 KB)
basscss.css.zip(2.89 KB)
4.0.0(Sep 21, 2014)
v4

Rebuilt from the ground up with Rework and a new modular architecture.

More powerful grid system

Simplified form and button styles

More powerful responsive utilities

Breaking Changes from v3

Now using Rework instead of Sass (basic partials are still available in the /scss folder)

Removed .nav styles

Refactored grid system

Renamed .oh to .overflow-hidden

Removed responsive type options

Refactored responsive utilities

Refactored form styles

Refactored button styles

Source code(tar.gz)
Source code(zip)
basscss-core.css.zip(1.61 KB)
basscss.css.zip(2.86 KB)
3.1.1(Sep 20, 2014)

Merged small fixes before v 4.0.0
Source code(tar.gz)
Source code(zip)
v3.1(Jul 7, 2014)

Source code(tar.gz)
Source code(zip)
v3(Jul 5, 2014)
New in V3

Table Object

Grid System

Nav Component

Global Sass Variables

Basic Table Styles

Source code(tar.gz)
Source code(zip)
v2(Feb 16, 2014)

Source code(tar.gz)
Source code(zip)
v1(Feb 16, 2014)

Source code(tar.gz)
Source code(zip)