master
common/hexec: Make NODE_PATH a fallback for ESM bare imports
Continue resolving on ERR_ACCESS_DENIED in Node's resolver
css: Make css.Build's file-loader URLs absolute to web context root
config/security: Add AllowChildProcess to security.node.permissions