build(deps-dev): bump webpack from 5.41.0 to 5.51.2 in /js

[dependabot]

Bumps webpack from 5.41.0 to 5.51.2.

Release notes

Sourced from webpack's releases.

v5.51.2

Bugfixes

• fix crash in FileSystemInfo when errors occur
• avoid property access of reserved properties
• fix reexports from async modules
• automatically close an active watching when closing the compiler
• when filenames of other runtimes are referenced that need a full hash, upgrade referencing runtime moduel to full hash mode too
  • fixes a bug where [contenthash] is undefined when using new Worker

v5.51.1

Bugfixes

• library: "module" propages top-level-await correctly
• fix crash in filesystem snapshotting when trying to snapshot a non-existing directory
• fix some context-dependent logic in concatenated modules and source url handling

v5.51.0

Bugfixes

• correctly keep chunk loading state when the chunk loading logic is HMR updated
  • This fixes some edge cases that e. g. occur when using lazy compilation for entrypoints. It is now able to HMR update that instead of needing a manual reload. Also see fixes in webpack-dev-server@4.
• track and resolve symlinks for filesystem snapshotting
  • This fixes some cases of circular yarn linking of dependencies.
  • It also fixes some problems when using package managers that use symlinks to deduplicate (e. g. cnpm or pnpm)
• pass the resulting module in the callbacks of Compilation.addModuleChain and Compilation.addModuleTree

v5.50.0

Features

• hashbangs (#! ...) are now handled by webpack
  • https://github.com/tc39/proposal-hashbang

Performance

• disable cache compression by default as it tend to make performance worse
  • I could still be enabled again for specific scenarios
• reduce the number of allocations during cache serialization
  • This improves performance and memory usage

v5.49.0

Features

• add experiments.buildHttp to build http(s):// imports instead of keeping them external
  • keeps a webpack.lock file with integrity and webpack.lock.data with cached content that should be committed
  • Automatically upgrades lockfile during development when remote resources change (might be disabled with experiments.buildHttp.upgrade: false)
  • Lockfile is frozen during production builds and usually no network requests are made (exception: Cache-Control: no-cache).
  • The webpack.lock.data persisting can be disabled with experiments.buildHttp.cacheLocation: false.

... (truncated)

Commits

• 684e22e 5.51.2
• d6d4a46 Merge pull request #14112 from webpack/bugfix/reference-full-hash
• b16568a upgrade filename runtime module to full hash module when referencing a full h...
• 179d2e0 Merge pull request #14095 from webpack/bugfix/close-watching-when-closing-com...
• be6c0e6 Merge pull request #14094 from webpack/bugfix/reexport-async-modules
• 05c1861 close watching when closing compiler
• ae711ac copy/read exports from imported async modules later once they are awaited
• 553d9b6 Merge pull request #13972 from aleen42/main
• 67e17b2 Merge branch 'main' into aleen42/main
• dab1c30 use a Set for better performance
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #154.