[Snyk] Upgrade stylus-loader from 2.0.0 to 9.0.0

[mhill-os]

Snyk has created this PR to upgrade stylus-loader from 2.0.0 to 9.0.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 36 versions ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes

Package name: stylus-loader

• 9.0.0 - 2026-05-25
  

  Major Changes

  • Minimum supported Node.js version is now 22.11.0. (by @ alexander-akait in #461)

  • Migrated source and published bundles to ECMAScript modules. The package (by @ alexander-akait in #461)
    is now ESM ("type": "module") and exposes both an ESM build at
    ./dist/esm/index.js and a CommonJS build at ./dist/cjs/index.js via
    the exports field. The main entry now points to ./dist/cjs/index.js.

  Minor Changes

  • Added JSDoc type annotations and TypeScript declaration file generation. The package now ships types/index.d.ts and exposes types via the package's exports/types fields. (by @ alexander-akait in #464)

  All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

• 8.1.3 - 2026-02-05
  

  8.1.3 (2026-02-05)

  Bug Fixes

  • update peer dependency for @ rspack/core v2 (#447) (2af82b2)
• 8.1.2 - 2025-08-18
  

  8.1.2 (2025-08-18)

  Bug Fixes

  • resolving problems on windows (a1a3140)
• 8.1.1 - 2024-09-18
  

  8.1.1 (2024-09-18)

  Bug Fixes

  • avoid losing use during incremental build (#425) (4f28957)
• 8.1.0 - 2024-01-30
  

  8.1.0 (2024-01-30)

  Features

  • add @ rspack/core as an optional peer dependency (#407) (4315ff6)
• 8.0.0 - 2024-01-15
  

  8.0.0 (2024-01-15)

  ⚠ BREAKING CHANGES

  • minimum supported Node.js version is 18.12.0 (#404) (505ecd0)
• 7.1.3 - 2023-06-08
  

  7.1.3 (2023-06-08)

  Bug Fixes

  • perf: avoid using klona for stylus options (#394) (261f70e)
• 7.1.2 - 2023-05-28
  

  7.1.2 (2023-05-28)

  Bug Fixes

  • avoid stack in error messages (#391) (b6f5578)
• 7.1.1 - 2023-05-25
  

  7.1.1 (2023-05-25)

  Bug Fixes

  • handling errors better (#390) (25de46d)
• 7.1.0 - 2022-10-06
  

  7.1.0 (2022-10-06)

  Features

  • allow to extend conditionNames (#365) (5d76d64)
• 7.0.0 - 2022-05-17
• 6.2.0 - 2021-10-12
• 6.1.0 - 2021-06-10
• 6.0.0 - 2021-05-12
• 5.0.0 - 2021-02-02
• 4.3.3 - 2021-01-15
• 4.3.2 - 2021-01-09
• 4.3.1 - 2020-12-02
• 4.3.0 - 2020-11-11
• 4.2.0 - 2020-10-29
• 4.1.1 - 2020-10-09
• 4.1.0 - 2020-10-02
• 4.0.0 - 2020-09-29
• 3.0.2 - 2018-02-26
• 3.0.1 - 2017-03-07
• 3.0.0 - 2017-03-07
• 2.5.1 - 2017-03-07
• 2.5.0 - 2017-02-17
• 2.4.0 - 2016-11-28
• 2.3.1 - 2016-08-17
• 2.3.0 - 2016-08-17
• 2.2.0 - 2016-08-09
• 2.1.2 - 2016-07-29
• 2.1.1 - 2016-06-14
• 2.1.0 - 2016-05-19
• 2.0.1 - 2016-05-19
• 2.0.0 - 2016-03-28

from stylus-loader GitHub release notes

---

Important

• Warning: This PR contains a major version upgrade, and may be a breaking change.
• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[mhill-os]

This is a major upgrade from version 2.0.0 to 9.0.0, which spans multiple significant breaking changes. Direct upgrade is not recommended without careful migration and testing.

Key Breaking Changes:

• Node.js Version Requirement: Support for older Node.js versions has been dropped incrementally. Version 7.0.0 requires Node.js 14.15.0 or newer, and version 8.0.0 requires Node.js 18.12.0 or newer.
• Webpack Support: Support for webpack 1 was dropped in version 3.0.0.
• Loader Options: Options passed to the loader must now be nested within a stylusOptions object in your webpack.config.js.
• Import Syntax: The ~ prefix in @import statements (e.g., @import "~package/file.styl") is deprecated. The loader's resolution logic has been improved to find packages in node_modules automatically.

Recommendation:

1. Ensure your project is running on Node.js version 18.12.0 or later.
2. Update your webpack.config.js to move all stylus-specific options into a stylusOptions object.
3. Review and remove the ~ prefix from all @import statements in your .styl files.
4. Given the large version gap, test your application thoroughly after the upgrade, as there may be subtle changes in how styles are compiled by the underlying stylus package itself.

Source: GitHub Releases, NPM Documentation

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[mhill-os]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.