Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade webpack from 5.95.0 to 5.97.1 #285

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

keyasuda
Copy link
Owner

@keyasuda keyasuda commented Jan 3, 2025

snyk-top-banner

Snyk has created this PR to upgrade webpack from 5.95.0 to 5.97.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 4 versions ahead of your current version.

  • The recommended version was released a month ago.

Release notes
Package name: webpack
  • 5.97.1 - 2024-12-05

    Bug Fixes

    • Performance regression
    • Sub define key should't be renamed when it's a defined variable
  • 5.97.0 - 2024-12-03

    Bug Fixes

    • Don't crash with filesystem cache and unknown scheme
    • Generate a valid code when output.iife is true and output.library.type is umd
    • Fixed conflict variable name with concatenate modules and runtime code
    • Merge duplicate chunks before
    • Collisions in ESM library
    • Use recursive search for versions of shared dependencies
    • [WASM] Don't crash WebAssembly with Reference Types (sync and async)
    • [WASM] Fixed wasm loading for sync and async webassembly
    • [CSS] Don't add [uniqueName] to localIdentName when it is empty
    • [CSS] Parsing strings on Windows
    • [CSS] Fixed CSS local escaping

    New Features

    • Added support for injecting debug IDs
    • Export the MergeDuplicateChunks plugin
    • Added universal loading for JS chunks and JS worker chunks (only ES modules)
    • [WASM] Added universal loading for WebAssembly chunks (only for async WebAssembly)
    • [CSS] Allow initial CSS chunks to be placed anywhere - the output.cssHeadDataCompression option was deleted
    • [CSS] Added universal loading for CSS chunks
    • [CSS] Parse ICSS @ value at-rules in CSS modules
    • [CSS] Parse ICSS :import rules in CSS modules
    • [CSS] Added the url and import options for CSS
    • [CSS] Allow to import custom properties in CSS modules

    Performance

    • Faster Queue implementation, also fixed queue iterator state in dequeue method to ensure correct behavior after item removal
  • 5.96.1 - 2024-11-01

    Bug Fixes

    • [Types] Add @ types/eslint-scope to dependencieS
    • [Types] Fixed regression in validate
  • 5.96.0 - 2024-10-31

    Bug Fixes

    • Fixed Module Federation should track all referenced chunks
    • Handle Data URI without base64 word
    • HotUpdateChunk have correct runtime when modified with new runtime
    • Order of chunks ids in generated chunk code
    • No extra Javascript chunks when using asset module as an entrypoint
    • Use optimistically logic for output.environment.dynamicImport to determine chunk format when no browserslist or target
    • Collision with global variables for optimization.avoidEntryIife
    • Avoid through variables in inlined module
    • Allow chunk template strings in output.devtoolNamespace
    • No extra runtime for get javascript/css chunk filename
    • No extra runtime for prefetch and preload in JS runtime when it was unsed in CSS
    • Avoid cache invalidation using ProgressPlugin
    • Increase parallelism when using importModule on the execution stage
    • Correctly parsing string in export and import
    • Typescript types
    • [CSS] css/auto considers a module depending on its filename as css (pure CSS) or css/local, before it was css/global and css/local
    • [CSS] Always interpolate classes even if they are not involved in export
    • [CSS] No extra runtime in Javascript runtime chunks for asset modules used in CSS
    • [CSS] No extra runtime in Javascript runtime chunks for external asset modules used in CSS
    • [CSS] No extra runtime for the node target
    • [CSS] Fixed url()s and @ import parsing
    • [CSS] Fixed - emit a warning on broken :local and :global

    New Features

    • Export CSS and ESM runtime modules
    • Single Runtime Chunk and Federation eager module hoisting
    • [CSS] Support /* webpackIgnore: true */ for CSS files
    • [CSS] Support src() support
    • [CSS] CSS nesting in CSS modules
  • 5.95.0 - 2024-09-25

    Bug Fixes

    • Fixed hanging when attempting to read a symlink-like file that it can't read
    • Handle default for import context element dependency
    • Merge duplicate chunks call after split chunks
    • Generate correctly code for dynamically importing the same file twice and destructuring
    • Use content hash as [base] and [name] for extracted DataURI's
    • Distinguish module and import in module-import for externals import's
    • [Types] Make EnvironmentPlugin default values types less strict
    • [Types] Typescript 5.6 compatibility

    New Features

    • Add new optimization.avoidEntryIife option (true by default for the production mode)
    • Pass output.hash* options to loader context

    Performance

    • Avoid unneeded re-visit in build chunk graph
from webpack GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade webpack from 5.95.0 to 5.97.1.

See this package in npm:
webpack

See this project in Snyk:
https://app.snyk.io/org/keyasuda/project/59199cca-f1a3-4814-91df-aa43c81c0240?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants