Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade webpack from 5.38.1 to 5.43.0 #10

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

snyk-bot
Copy link
Contributor

Snyk has created this PR to upgrade webpack from 5.38.1 to 5.43.0.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 8 versions ahead of your current version.
  • The recommended version was released 22 days ago, on 2021-07-06.
Release notes
Package name: webpack
  • 5.43.0 - 2021-07-06

    Features

    • support runtime: false in entry description to disable runtime chunk
    • support runtime option in ModuleFederationPlugin and ContainerPlugin

    Bugfixes

    • fix "module" externals when concatenated

    Performance

    • serialize JSON data as buffer and parse on demand for performance and to avoid performance warning
  • 5.42.1 - 2021-07-05

    Bugfixes

    • fix crashes when rebuilding with jsonData or dataUrl of undefined
  • 5.42.0 - 2021-07-02

    Features

    • add cache compression via cache.compression
    • enable cache compression by default for non-development modes

    Bugfixes

    • add node-commonjs to schema for externalsType
    • update acorn to fix problems with top level await
    • fix regression for system externals

    Performance

    • fix a memory leak in the unsafe cache
  • 5.41.1 - 2021-06-29

    Bugfixes

    • add missing types about experimental esm support to schema
    • avoid slicing large Buffers as that doesn't always work for unknown reasons

    Performance

    • avoid slicing Buffers unnecessarily
  • 5.41.0 - 2021-06-28

    Features

    • Persist cache faster when large changes are detected
      • new option cache.idleTimeoutAfterLargeChanges to control that

    Bugfixes

    • shutdown lazy compilation server correctly

    Experiments

    • EcmaScript modules support (experiments.outputModule: true)
      • output.library.type: "module": very basic support, no live bindings, unnecessary runtime code
      • output.chunkLoading: "import"
      • output.chunkFormat: "module"
      • externalsType: "module" generates now import * as X from "..." (in a module) or import("...") (in a script)
      • Node.js commonjs externals use import { createRequire } from "module" in a module
      • new Worker etc. sets `type: "module"
  • 5.40.0 - 2021-06-21

    Features

    • accept node: prefixed requests as node.js externals
    • avoid instanceof Promise in favor of p && typeof p.then === "function" to allow mixing different Promise implementions

    Bugfixes

    • fix usage analysis of class properties

    Performance

    • improve LazySet memory usage by shortcircuiting empty sets
    • reduce algorithmic complexity of the structure analysis for plain objects serialization

    Developer Experience

    • allow Buffer in this.emitFile typings (loader context)
    • improve reset cli argument description
  • 5.39.1 - 2021-06-17

    Bugfixes

    • reduce memory usage and fix memory leaks
  • 5.39.0 - 2021-06-14

    Features

    • allow lazy compilation for import() context (import with expression)

    Bugfixes

    • fix respecting cache.allowCollectingMemory
    • fix cli loading after installing it
    • fix initial list of non-js chunks that are flagged as already loaded

    Performance

    • remove unnecessary Error.captureStackTrace from webpack errors
  • 5.38.1 - 2021-05-27

    Performance

    • fix missing increment in sorting optimization from last release
from webpack GitHub release notes
Commit messages
Package name: webpack
  • b53a064 5.43.0
  • e7484bb Merge pull request #13720 from webpack/bugfix/module-externals-concatenated
  • 49c0864 Merge pull request #13725 from webpack/bugfix/serialize-json-as-buffer
  • 4fa26c0 Merge pull request #13723 from webpack/dependabot/npm_and_yarn/es-module-lexer-0.7.1
  • b42d94e serialize json data as buffer and decode on demand
  • 3f7d80d fix concatenation of module externals
  • 5d55bb2 chore(deps): bump es-module-lexer from 0.6.0 to 0.7.1
  • 4a8f631 Merge pull request #13722 from webpack/bugfix/13719
  • 237bebc Revert "Merge pull request #13703 from webpack/dependabot/npm_and_yarn/types/node-16.0.0"
  • 91ce4bf consistent dependencies
  • 129dd4b Merge pull request #13711 from webpack/dependabot/npm_and_yarn/webassemblyjs/wasm-edit-1.11.1
  • 9bc47af Merge pull request #13721 from webpack/ci/filter-in-azure
  • 13389fd Merge pull request #13716 from webpack/dependabot/npm_and_yarn/wast-loader-1.11.1
  • 1bb343f Merge pull request #13704 from webpack/dependabot/npm_and_yarn/eslint-7.30.0
  • 90bb1c3 Merge pull request #13703 from webpack/dependabot/npm_and_yarn/types/node-16.0.0
  • 5f85ec3 Merge pull request #13686 from webpack/dependabot/npm_and_yarn/types/estree-0.0.49
  • 64d7661 Merge pull request #13663 from webpack/dependabot/npm_and_yarn/core-js-3.15.2
  • 83b3219 Merge pull request #13548 from webpack/dependabot/npm_and_yarn/jest-junit-12.2.0
  • 86805ee fixes #13719
  • 608c295 set CI flag in azure pipelines
  • ad3d9d0 chore(deps-dev): bump wast-loader from 1.11.0 to 1.11.1
  • cd109b5 chore(deps): bump @ webassemblyjs/wasm-edit from 1.11.0 to 1.11.1
  • c46ccfb Merge branch 'publish'
  • 4156b20 5.42.1

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant