Skip to content

Bump style-loader from 3.3.2 to 4.0.0#279

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/style-loader-4.0.0
Closed

Bump style-loader from 3.3.2 to 4.0.0#279
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/style-loader-4.0.0

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 13, 2026

Bumps style-loader from 3.3.2 to 4.0.0.

Release notes

Sourced from style-loader's releases.

v4.0.0

4.0.0 (2024-04-08)

⚠ BREAKING CHANGES

  • minimum supported webpack version is 5.27.0
  • minimum support Node.js version is 18.12.0
  • the insert option can only be a selector or the path to the module

Migration:

Before:

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              injectType: "styleTag",
              styleTagTransform: function (css, style) {
                // Do something ...
                style.innerHTML = `${css}.modify{}\n`;
            document.head.appendChild(style);
          },
        },
      },
      "css-loader",
    ],
  },
],

},
};

After:

insert-function.js

function insert(css, style) {
  var parent = options.target || document.head;
</tr></table> 

... (truncated)

Changelog

Sourced from style-loader's changelog.

4.0.0 (2024-04-08)

⚠ BREAKING CHANGES

  • minimum supported webpack version is 5.27.0
  • minimum support Node.js version is 18.12.0
  • the insert option can only be a selector or the path to the module

Migration:

Before:

webpack.config.js

module.exports = {
  module: {
    rules: [
      {
        test: /\.css$/i,
        use: [
          {
            loader: "style-loader",
            options: {
              injectType: "styleTag",
              styleTagTransform (css, style) {
                // Do something ...
                style.innerHTML = `${css}.modify{}\n`;
            document.head.appendChild(style);
          },
        },
      },
      &quot;css-loader&quot;,
    ],
  },
],

},
};

After:

insert-function.js

function insert(css, style) {
  const parent = options.target || document.head;
</tr></table>

... (truncated)

Commits
  • 091d37d chore(release): 4.0.0
  • abc0b5f docs: improve more
  • 565362c docs: update
  • 7122cde refactor!: the insert option can only be a selector or the path to the mo...
  • 11b8639 refactor!: the styleTagTransform option can only be the path to the module
  • 7ec1120 test: fix
  • 977bb71 refactor!: minimum supported webpack version is 5.27.0
  • a70555a test: update
  • dc6e368 refactor!: minimum support Node.js version is 18.12.0
  • b7cdc6c chore: update codecov-action to v4 (#623)
  • Additional commits viewable in compare view
Install script changes

This version modifies prepare script that runs during installation. Review the package contents before updating.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note

Medium Risk
Build tooling is updated to style-loader@4, which raises minimum Node (>=18.12) and webpack requirements and can break existing webpack loader options. The regenerated package-lock.json also changes the root package name/version, which may indicate an unintended lockfile rewrite affecting reproducible installs.

Overview
Updates the build toolchain dependency style-loader from ^3.3.2 to ^4.0.0 in package.json and package-lock.json.

The lockfile is regenerated, updating style-loader’s resolved metadata (and its Node/webpack engine constraints) and also rewriting the lockfile’s root name/version entries (e.g., 1.6.245 -> 1.0.3).

Reviewed by Cursor Bugbot for commit 54bbb59. Bugbot is set up for automated code reviews on this repo. Configure here.

Bumps [style-loader](https://github.com/webpack-contrib/style-loader) from 3.3.2 to 4.0.0.
- [Release notes](https://github.com/webpack-contrib/style-loader/releases)
- [Changelog](https://github.com/webpack/style-loader/blob/main/CHANGELOG.md)
- [Commits](webpack/style-loader@v3.3.2...v4.0.0)

---
updated-dependencies:
- dependency-name: style-loader
  dependency-version: 4.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Apr 13, 2026
@cloudflare-workers-and-pages
Copy link
Copy Markdown

Deploying javascript-adminhelper-sdk with  Cloudflare Pages  Cloudflare Pages

Latest commit: 54bbb59
Status:⚡️  Build in progress...

View logs

@github-actions
Copy link
Copy Markdown

Closing PR due to failing tests.

@github-actions github-actions bot closed this Apr 13, 2026
@github-actions github-actions bot deleted the dependabot/npm_and_yarn/style-loader-4.0.0 branch April 13, 2026 08:12
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 13, 2026

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants