chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 #8789

dependabot · 2024-08-31T02:40:54Z

Bumps webpack from 5.90.3 to 5.94.0.

Release notes

v5.94.0

Bug Fixes

Added runtime condition for harmony reexport checked

Handle properly data/http/https protocols in source maps

Make bigint optimistic when browserslist not found

Move @types/eslint-scope to dev deps

Related in asset stats is now always an array when no related found

Handle ASI for export declarations

Mangle destruction incorrect with export named default properly

Fixed unexpected asi generation with sequence expression

Fixed a lot of types

New Features

Added new external type "module-import"

Support webpackIgnore for new URL() construction

[CSS] @import pathinfo support

Security

Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

Generate correct relative path to runtime chunks

Makes DefinePlugin quieter under default log level

Fixed mangle destructuring default in namespace import

Fixed consumption of eager shared modules for module federation

Strip slash for pretty regexp

Calculate correct contenthash for CSS generator options

New Features

Added the binary generator option for asset modules to explicitly keep source maps produced by loaders

Added the modern-module library value for tree shakable output

Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Bug Fixes

Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Bug Fixes

Correct tidle range's comutation for module federation

Consider runtime for pure expression dependency update hash

Return value in the subtractRuntime function for runtime logic

... (truncated)

Commits

eabf85d chore(release): 5.94.0
955e057 security: fix DOM clobbering in auto public path
9822387 test: fix
cbb86ed test: fix
5ac3d7f fix: unexpected asi generation with sequence expression
2411661 security: fix DOM clobbering in auto public path
b8c03d4 fix: unexpected asi generation with sequence expression
f46a03c revert: do not use heuristic fallback for "module-import"
60f1898 fix: do not use heuristic fallback for "module-import"
66306aa Revert "fix: module-import get fallback from externalsPresets"
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

Chores
- Updated the webpack dependency to the latest version, which may enhance performance and introduce improvements.

Bumps [webpack](https://github.com/webpack/webpack) from 5.90.3 to 5.94.0. - [Release notes](https://github.com/webpack/webpack/releases) - [Commits](webpack/webpack@v5.90.3...v5.94.0) --- updated-dependencies: - dependency-name: webpack dependency-type: direct:development ... Signed-off-by: dependabot[bot] <[email protected]>

coderabbitai · 2024-08-31T02:41:01Z

Walkthrough

The update involves changing the version of the webpack dependency in the package.json file from ^5.90.2 to ^5.94.0. This is a straightforward version increment that reflects an upgrade to a newer release of the webpack package.

Changes

File	Change Summary
package.json	Updated `webpack` version from `^5.90.2` to `^5.94.0`

Poem

🐰 In the garden of code, a change has been made,
With webpack now fresh, in the sun it will wade.
Hopping along, with features so bright,
We celebrate upgrades, oh what a delight!
So let’s dance and rejoice, in this version so new,
For the magic of coding brings joy to us too! 🌼✨

Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share

Tips

Chat

There are 3 ways to chat with CodeRabbit:

Review comments: Directly reply to a review comment made by CodeRabbit. Example:
- I pushed a fix in commit <commit_id>.
- Generate unit testing code for this file.
- Open a follow-up GitHub issue for this discussion.
Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
- @coderabbitai generate unit testing code for this file.
- @coderabbitai modularize this function.
PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
- @coderabbitai generate interesting stats about this repository and render them as a table.
- @coderabbitai show all the console.log statements in this repository.
- @coderabbitai read src/utils.ts and generate unit testing code.
- @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
- @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

@coderabbitai pause to pause the reviews on a PR.
@coderabbitai resume to resume the paused reviews.
@coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
@coderabbitai full review to do a full review from scratch and review all the files again.
@coderabbitai summary to regenerate the summary of the PR.
@coderabbitai resolve resolve all the CodeRabbit review comments.
@coderabbitai configuration to show the current CodeRabbit configuration for the repository.
@coderabbitai help to get help.

Other keywords and placeholders

Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (`.coderabbit.yaml`)

You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
Please see the configuration documentation for more information.
If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

Visit our Documentation for detailed information on how to use CodeRabbit.
Join our Discord Community to get help, request features, and share feedback.
Follow us on X/Twitter for updates and announcements.

coderabbitai

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between a1d1b3e and a2eef75.

Files ignored due to path filters (1)

yarn.lock is excluded by !**/yarn.lock, !**/*.lock

Files selected for processing (1)

package.json (1 hunks)

Additional comments not posted (1)

package.json (1)

70-70: Approved: Update to webpack version.

The update from "^5.90.2" to "^5.94.0" is correctly implemented and follows semantic versioning best practices. This should allow the project to benefit from the latest bug fixes and features without breaking compatibility.

Please ensure to run all project tests to verify that the new version integrates well with the existing codebase.

This reverts commit 9525801.

…8797) This reverts commit 9525801.

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 31, 2024

coderabbitai bot reviewed Aug 31, 2024

View reviewed changes

miigotu merged commit 9525801 into master Sep 10, 2024
5 checks passed

miigotu deleted the dependabot/npm_and_yarn/webpack-5.94.0 branch September 10, 2024 15:32

miigotu added a commit that referenced this pull request Sep 10, 2024

Revert "chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 (#8789)"

a4b7bc7

This reverts commit 9525801.

miigotu mentioned this pull request Sep 10, 2024

Revert "chore(deps-dev): bump webpack from 5.90.3 to 5.94.0" #8797

Merged

miigotu added a commit that referenced this pull request Sep 10, 2024

Revert "chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 (#8789)" (#…

846adaf

…8797) This reverts commit 9525801.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 #8789

chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 #8789

dependabot bot commented on behalf of github Aug 31, 2024 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Aug 31, 2024 •

edited

Loading

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (`.coderabbit.yaml`)

Documentation and Community

coderabbitai bot left a comment

chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 #8789

chore(deps-dev): bump webpack from 5.90.3 to 5.94.0 #8789

Conversation

dependabot bot commented on behalf of github Aug 31, 2024 • edited by coderabbitai bot Loading

v5.94.0

Bug Fixes

New Features

Security

v5.93.0

Bug Fixes

New Features

v5.92.1

Bug Fixes

v5.92.0

Bug Fixes

Summary by CodeRabbit

coderabbitai bot commented Aug 31, 2024 • edited Loading

Walkthrough

Changes

Poem

Chat

CodeRabbit Commands (Invoked using PR comments)

Other keywords and placeholders

CodeRabbit Configuration File (.coderabbit.yaml)

Documentation and Community

coderabbitai bot left a comment

Choose a reason for hiding this comment

dependabot bot commented on behalf of github Aug 31, 2024 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Aug 31, 2024 •

edited

Loading

CodeRabbit Configuration File (`.coderabbit.yaml`)