[Snyk] Upgrade webpack from 4.40.2 to 5.54.0 #1
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade webpack from 4.40.2 to 5.54.0.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Warning: This is a major version upgrade, and may be a breaking change.
The recommended version fixes:
SNYK-JS-Y18N-1021887
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-Y18N-1021887
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-UAPARSERJS-610226
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-UAPARSERJS-1023599
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TMPL-1583443
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-THENIFY-571690
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TAR-1579155
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TAR-1579152
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TAR-1579147
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TAR-1536531
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TAR-1536528
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SSRI-1246392
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SSRI-1246392
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SETVALUE-450213
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SETVALUE-450213
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SERIALIZEJAVASCRIPT-570062
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SEMVERREGEX-1585624
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SEMVERREGEX-1584358
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-NTHCHECK-1586032
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-MIXINDEEP-450212
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-1040724
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-JSYAML-174129
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-JSYAML-174129
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-INI-1048974
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-534478
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-480388
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-469063
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-174183
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-173692
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ESLINTUTILS-460220
Why? Proof of Concept exploit, CVSS 7.3
npm:ua-parser-js:20180227
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-UAPARSERJS-1072471
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-SEMVERREGEX-1047770
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-PROMPTS-1729737
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-PATHPARSE-1077067
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-NODENOTIFIER-1035794
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-NODEFETCH-674311
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-MINIMIST-559764
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-MINIMIST-559764
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-MINIMIST-559764
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-1018905
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-TAR-1536758
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-LODASH-590103
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-JSYAML-173999
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-JSYAML-173999
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HOSTEDGITINFO-1088355
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HIGHLIGHTJS-1045326
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-567742
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-534988
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-BL-608877
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-AJV-584908
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ACORN-559469
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ACORN-559469
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ACORN-559469
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ACORN-559469
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ACORN-559469
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-1279029
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-1056767
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-567742
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-1279029
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-HANDLEBARS-1056767
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-GLOBPARENT-1016905
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-ELLIPTIC-1064899
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-DOTPROP-543489
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-CSSWHAT-1298035
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-COLORSTRING-1082939
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-CODEMIRROR-1016937
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-BROWSERSLIST-1090194
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-KINDOF-537849
Why? Proof of Concept exploit, CVSS 7.3
SNYK-JS-CODEMIRROR-569611
Why? Proof of Concept exploit, CVSS 7.3
(*) Note that the real score may have changed since the PR was raised.
Release notes
Package name: webpack
Features
&&
||
and??
output.hashFunction
eval
is used in a moduleBugfixes
Performance
output.hashFunction: "xxhash64"
for a super fast wasm based hash functionexperiments.cacheUnaffected
which caches computations for modules that are unchanged and reference only unchanged modulesFeatures
node.__dirname/__filename: "warn-mock"
which warns on usage (will be enabled in webpack 6 by default)Bugfixes
stream/web
to Node.js externalsExperiments
experiments.futureDefaults
to enable defaults for webpack 6Performance
Feature
experiments.executeModule
is enabled by default and the option is removedthis.importModule
Bugfixes
__WEBPACK_EXTERNAL_MODULE_null__
, which leads to merged externals.webpack[...]
extension is not part of matching and module nameBugfixes
[contenthash]
is undefined when usingnew Worker
Bugfixes
library: "module"
propages top-level-await correctlyBugfixes
yarn link
ing of dependencies.Compilation.addModuleChain
andCompilation.addModuleTree
Features
#! ...
) are now handled by webpackPerformance
Features
experiments.buildHttp
to buildhttp(s)://
imports instead of keeping them externalwebpack.lock
file with integrity andwebpack.lock.data
with cached content that should be committed(might be disabled with
experiments.buildHttp.upgrade: false
)(exception:
Cache-Control: no-cache
).webpack.lock.data
persisting can be disabled withexperiments.buildHttp.cacheLocation: false
.That will will introduce a availability risk.
(webpack cache will be used to cache network responses)
Bugfixes
splitChunks.maxSize
introduces in the last releasebail
is setPerformance
Features
Bugfixes
Commit messages
Package name: webpack
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs