Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade webpack from 5.91.0 to 5.92.0 #15008

Closed
wants to merge 1 commit into from

Conversation

snipe
Copy link
Owner

@snipe snipe commented Jul 3, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to upgrade webpack from 5.91.0 to 5.92.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released on 22 days ago.

Release notes
Package name: webpack
  • 5.92.0 - 2024-06-11

    Bug Fixes

    • Correct tidle range's comutation for module federation
    • Consider runtime for pure expression dependency update hash
    • Return value in the subtractRuntime function for runtime logic
    • Fixed failed to resolve promise when eager import a dynamic cjs
    • Avoid generation extra code for external modules when remapping is not required
    • The css/global type now handles the exports name
    • Avoid hashing for @ keyframe and @ property at-rules in css/global type
    • Fixed mangle with destructuring for JSON modules
    • The stats.hasWarnings() method now respects the ignoreWarnings option
    • Fixed ArrayQueue iterator
    • Correct behavior of __webpack_exports_info__.a.b.canMangle
    • Changed to the correct plugin name for the CommonJsChunkFormatPlugin plugin
    • Set the chunkLoading option to the import when environment is unknown and output is module
    • Fixed when runtimeChunk has no exports when module chunkFormat used
    • [CSS] Fixed parsing minimized CSS import
    • [CSS] URLs in CSS files now have correct public path
    • [CSS] The css module type should not allow parser to switch mode
    • [Types] Improved context module types

    New Features

    • Added platform target properties to compiler
    • Improved multi compiler cache location and validating it
    • Support import attributes spec (with keyword)
    • Support node: prefix for Node.js core modules in runtime code
    • Support prefetch/preload for module chunk format
    • Support "..." in the importsFields option for resolver
    • Root module is less prone to be wrapped in IIFE
    • Export InitFragment class for plugins
    • Export compileBooleanMatcher util for plugins
    • Export InputFileSystem and OutputFileSystem types
    • [CSS] Support the esModule generator option for CSS modules
    • [CSS] Support CSS when chunk format is module
  • 5.91.0 - 2024-03-20

    Bug Fixes

    • Deserializer for ignored modules doesn't crash
    • Allow the unsafeCache option to be a proxy object
    • Normalize the snapshot.unmanagedPaths option
    • Fixed fs types
    • Fixed resolve's plugins types
    • Fixed wrongly calculate postOrderIndex
    • Fixed watching types
    • Output import attrbiutes/import assertions for external JS imports
    • Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same
    • [CSS] Output layer/supports/media for external CSS imports

    New Features

    • Allow to customize the stage of BannerPlugin
    • [CSS] Support CSS exports convention
    • [CSS] support CSS local ident name
    • [CSS] Support __webpack_nonce__ for CSS chunks
    • [CSS] Support fetchPriority for CSS chunks
    • [CSS] Allow to use LZW to compress css head meta (enabled in the production mode by default)
    • [CSS] Support prefetch/preload for CSS chunks
from webpack GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade webpack from 5.91.0 to 5.92.0.

See this package in npm:
webpack

See this project in Snyk:
https://app.snyk.io/org/snipe/project/3d53e1dd-b8bf-46b5-ba61-18ce26933166?utm_source=github&utm_medium=referral&page=upgrade-pr
@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels Jul 3, 2024
Copy link

what-the-diff bot commented Jul 3, 2024

PR Summary

  • Update of name field in package-lock.json
    The name field value was changed to "relock-npm-lock-v2-FQhlVl" for enhanced identification.

  • Upgrade of webpack version
    The webpack version was updated from "^5.90.2" to "^5.92.0" in both package-lock.json and package.json files. This upgrade to the new version should bring in overall improvements and fix potential issues with the older version.

  • Addition of a new dependency
    The dependency "acorn-import-attributes" was added to improve the functionality of the project. This will help in handling certain import attributes better.

  • Updates of dependencies in package-lock.json
    The versions of the enhanced-resolve, tapable, and webpack dependencies were updated. These upgrades should enhance capabilities and fix potential issues linked with the older versions. Specifically, enhanced-resolve was updated from "5.16.0" to "5.17.0", tapable from "2.2.0to "2.2.1", andwebpack from "5.91.0 to "5.92.0".

@snipe snipe closed this Jul 4, 2024
@snipe snipe deleted the snyk-upgrade-15e722de894051933a537676d69188c5 branch July 4, 2024 00:07
snipe added a commit that referenced this pull request Jul 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants