build: update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@ampproject/remapping	1.0.2 -> 1.1.1
@babel/core (source)	7.16.10 -> 7.16.12
esbuild	0.14.12 -> 0.14.13
esbuild-wasm	0.14.12 -> 0.14.13
resolve	1.21.1 -> 1.22.0
verdaccio (source)	5.4.0 -> 5.5.0
webpack	5.66.0 -> 5.67.0

---

Release Notes

ampproject/remapping

v1.1.1

Compare Source

v1.1.0

Compare Source

babel/babel

v7.16.12

Compare Source

🐛 Bug Fix

• babel-core
  • #​14192 Avoid dynamic import when it's not needed (@​nicolo-ribaudo)
• babel-parser
  • #​14194 fix: incorrect in parsing in arrow ConciseBody (@​JLHwung)

evanw/esbuild

v0.14.13

Compare Source

• Be more consistent about external paths (#​619)

  The rules for marking paths as external using --external: grew over time as more special-cases were added. This release reworks the internal representation to be more straightforward and robust. A side effect is that wildcard patterns can now match post-resolve paths in addition to pre-resolve paths. Specifically you can now do --external:./node_modules/* to mark all files in the ./node_modules/ directory as external.

  This is the updated logic:

  • Before path resolution begins, import paths are checked against everything passed via an --external: flag. In addition, if something looks like a package path (i.e. doesn't start with / or ./ or ../), import paths are checked to see if they have that package path as a path prefix (so --external:@​foo/bar matches the import path @foo/bar/baz).

  • After path resolution ends, the absolute paths are checked against everything passed via --external: that doesn't look like a package path (i.e. that starts with / or ./ or ../). But before checking, the pattern is transformed to be relative to the current working directory.

• Attempt to explain why esbuild can't run (#​1819)

  People sometimes try to install esbuild on one OS and then copy the node_modules directory over to another OS without reinstalling. This works with JavaScript code but doesn't work with esbuild because esbuild is a native binary executable. This release attempts to offer a helpful error message when this happens. It looks like this:

  $ ./node_modules/.bin/esbuild
  ./node_modules/esbuild/bin/esbuild:106
            throw new Error(`
            ^
  
  Error:
  You installed esbuild on another platform than the one you're currently using.
  This won't work because esbuild is written with native code and needs to
  install a platform-specific binary executable.
  
  Specifically the "esbuild-linux-arm64" package is present but this platform
  needs the "esbuild-darwin-arm64" package instead. People often get into this
  situation by installing esbuild on Windows or macOS and copying "node_modules"
  into a Docker image that runs Linux, or by copying "node_modules" between
  Windows and WSL environments.
  
  If you are installing with npm, you can try not copying the "node_modules"
  directory when you copy the files over, and running "npm ci" or "npm install"
  on the destination platform after the copy. Or you could consider using yarn
  instead which has built-in support for installing a package on multiple
  platforms simultaneously.
  
  If you are installing with yarn, you can try listing both this platform and the
  other platform in your ".yarnrc.yml" file using the "supportedArchitectures"
  feature: https://yarnpkg.com/configuration/yarnrc/#supportedArchitectures
  Keep in mind that this means multiple copies of esbuild will be present.
  
  Another alternative is to use the "esbuild-wasm" package instead, which works
  the same way on all platforms. But it comes with a heavy performance cost and
  can sometimes be 10x slower than the "esbuild" package, so you may also not
  want to do that.
  
      at generateBinPath (./node_modules/esbuild/bin/esbuild:106:17)
      at Object.<anonymous> (./node_modules/esbuild/bin/esbuild:161:39)
      at Module._compile (node:internal/modules/cjs/loader:1101:14)
      at Object.Module._extensions..js (node:internal/modules/cjs/loader:1153:10)
      at Module.load (node:internal/modules/cjs/loader:981:32)
      at Function.Module._load (node:internal/modules/cjs/loader:822:12)
      at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:81:12)
      at node:internal/main/run_main_module:17:47
  

browserify/resolve

v1.22.0

Compare Source

verdaccio/verdaccio

v5.5.0

Compare Source

Features

TL;DR

• Upgrade @​verdaccio-ui-theme (d36b8b1)
• Use backward compatible UI from v6 on v5 (#​2912) (b79266d)
• Update dependencies, include 🔒 security flagged ones.

Web User Interface Improvements

The current user interface for this version is exactly the same used on the next major release, the verdaccio/ui repository has been archived, one single UI is much easier to maintain and also to share features between the future major release and the stable one.

The translations were migrated from the source code to the crowdin platform for the User interface which ensure repeated words are not translated twice and also crowding provides a nice interface for contributions, the latest translations are pulled on every release automcatically.

• Add new options to the web disable login and pkg managers (#​2947) (1a7b1ee)

  • Users are able to select which package managers you want to enabled on the web user interface ref #​2226
  • Users are able to enable/disable login on web and endpoints option ref #​2228 (this is another security layer which some users might be interested to disable)

web:
  pkgManagers:
    - npm
    - yarn
    - pnpm
  login: true      

Improve language switch ui and package manager info

• Remove the language switch as autocomplete, add info how to contribute to translations
• Convert info dialog to be able host more information, learn how to use registry with Yarn 2 and add links to documentation.

Bug Fixes

⚠️ The marked dependency has been updated to v4 which was marked a security upgrade through the @verdaccio/readme dependency.

• deps: update all non-major linting dependencies (5.x) (#​2885) (23d0bd7)
• deps: update dependency @​verdaccio/local-storage to v10.1.1 (#​2932) (8c7e39e)
• deps: update dependency @​verdaccio/readme to v10.2.1 (#​2933) (8a75f8c)
• deps: update dependency async to v3.2.3 (#​2934) (e2eb6ce)
• deps: update dependency fast-safe-stringify to v2.1.1 (#​2891) (bd738ec)
• deps: update dependency verdaccio-audit to v10.1.1 (#​2935) (3a9d773)
• update babel and core dependencies (#​2887) (ec98159)
• update docker to v14.18.2 (#​2888) (22cfea0)

Announcements

The next month is the talk at Node.js Congress 2022, you can craft your own badge 😊 here, please share it with your colleagues and 👍🏼 if you want like this tweet.

webpack/webpack

v5.67.0

Compare Source

Features

• add 'outputPath' configuration option for resource asset modules
• support Trusted Types in eval source maps
• experiments.css
  • allow to generate only exports for css in node
  • add SyncModuleIdsPlugin to sync module ids between server and client compilation
  • add more options to the DeterministicModuleIdsPlugin to allow to generate equal ids

Developer Experience

• limit data url module name in stats printer
• allow specific description for CLI options
• improve space limiting algorithm in stats printing to show partial lists
• add null to errors in callbacks
• fix call signature types of addChunkInGroup

Bugfixes

• avoid reporting non-existant package.jsons as dependencies
• experiments.css
  • fix missing css runtime when only initial css is used
  • fix css hmr support
  • bugfixes to css modules
• fix cache serialization for CreateScriptUrlDependency
• fix data url content when processed by a loader
• fix regexp in identifiers that include |
• fix ProfilingPlugin for watch scenarios
• add layer to module names and identifiers
  • this avoid random module id changes when additional modules are added to another layer
• provide hashFunction parameter to DependencyTemplates to allow customizing it there
• fix HMR when experiments.lazyCompilation is enabled
• store url as Buffer to avoid serialization warnings
• exclude webpack-hot-middleware/client from lazy compilation

Contributing

• remove travis configuration
• improve spell checking

---

Configuration

📅 Schedule: "after 10pm every weekday,before 4am every weekday,every weekend" in timezone America/Tijuana.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Renovate will not automatically rebase this PR, because other commits have been found.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, click this checkbox.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.

[angular-automatic-lock-bot]

This issue has been automatically locked due to inactivity.
Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}