Skip to content

Bump webpack and @angular-devkit/build-angular in /UserApp#34

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/UserApp/multi-9b3f4ab430
Open

Bump webpack and @angular-devkit/build-angular in /UserApp#34
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/UserApp/multi-9b3f4ab430

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Aug 30, 2024

Bumps webpack to 5.94.0 and updates ancestor dependency @angular-devkit/build-angular. These dependencies need to be updated together.

Updates webpack from 5.88.2 to 5.94.0

Release notes

Sourced from webpack's releases.

v5.94.0

Bug Fixes

  • Added runtime condition for harmony reexport checked
  • Handle properly data/http/https protocols in source maps
  • Make bigint optimistic when browserslist not found
  • Move @​types/eslint-scope to dev deps
  • Related in asset stats is now always an array when no related found
  • Handle ASI for export declarations
  • Mangle destruction incorrect with export named default properly
  • Fixed unexpected asi generation with sequence expression
  • Fixed a lot of types

New Features

  • Added new external type "module-import"
  • Support webpackIgnore for new URL() construction
  • [CSS] @import pathinfo support

Security

  • Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

  • Generate correct relative path to runtime chunks
  • Makes DefinePlugin quieter under default log level
  • Fixed mangle destructuring default in namespace import
  • Fixed consumption of eager shared modules for module federation
  • Strip slash for pretty regexp
  • Calculate correct contenthash for CSS generator options

New Features

  • Added the binary generator option for asset modules to explicitly keep source maps produced by loaders
  • Added the modern-module library value for tree shakable output
  • Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Bug Fixes

  • Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Bug Fixes

  • Correct tidle range's comutation for module federation
  • Consider runtime for pure expression dependency update hash
  • Return value in the subtractRuntime function for runtime logic

... (truncated)

Commits
  • eabf85d chore(release): 5.94.0
  • 955e057 security: fix DOM clobbering in auto public path
  • 9822387 test: fix
  • cbb86ed test: fix
  • 5ac3d7f fix: unexpected asi generation with sequence expression
  • 2411661 security: fix DOM clobbering in auto public path
  • b8c03d4 fix: unexpected asi generation with sequence expression
  • f46a03c revert: do not use heuristic fallback for "module-import"
  • 60f1898 fix: do not use heuristic fallback for "module-import"
  • 66306aa Revert "fix: module-import get fallback from externalsPresets"
  • Additional commits viewable in compare view

Updates @angular-devkit/build-angular from 16.2.9 to 16.2.15

Release notes

Sourced from @​angular-devkit/build-angular's releases.

v16.2.15

16.2.15 (2024-08-29)

@​angular-devkit/build-angular

Commit Description
fix - f596a3d5d clear context in Karma by default for single run executions
fix - 56fa051bd upgrade webpack to 5.94.0

v16.2.14

16.2.14 (2024-04-11)

@​angular-devkit/build-angular

Commit Description
fix - 1068c3c73 update vite to 4.5.3

v16.2.13

16.2.13 (2024-03-25)

@​angular-devkit/build-angular

Commit Description
fix - 5ad507e3d update webpack-dev-middleware to 6.1.2

v16.2.12

16.2.12 (2024-01-24)

@​angular-devkit/build-angular

Commit Description
fix - 5fad40162 update dependency vite to v4.5.2

v16.2.11

16.2.11 (2023-12-21)

v16.2.10

16.2.10 (2023-11-08)

@​angular-devkit/build-angular

Commit Description
fix - bab3672cd normalize exclude path
Changelog

Sourced from @​angular-devkit/build-angular's changelog.

16.2.15 (2024-08-29)

@​angular-devkit/build-angular

Commit Type Description
f596a3d5d fix clear context in Karma by default for single run executions
56fa051bd fix upgrade webpack to 5.94.0

19.0.0-next.1 (2024-08-22)

Breaking Changes

@​angular-devkit/build-angular

  • The browserTarget option has been removed from the DevServer and ExtractI18n builders. buildTarget is to be used instead.

@​angular-devkit/core

  • The deprecated fileBuffer function is no longer available. Update your code to use stringToFileBuffer instead to maintain compatibility.

    Note: that this change does not affect application developers.

@​angular/build

  • The @angular/localize/init polyfill will no longer be added automatically to projects. To prevent runtime issues, ensure that this polyfill is manually included in the "polyfills" section of your "angular.json" file if your application relies on Angular localization features.

@​schematics/angular

Commit Type Description
7992218a9 fix remove declaration and sourceMap from default tsconfig

@​angular-devkit/build-angular

Commit Type Description
0b161bc76 fix remove outdated browser-esbuild option warning
e40384e63 refactor remove deprecated browserTarget

@​angular-devkit/core

Commit Type Description
0d8a1006d refactor remove deprecated fileBuffer function in favor of stringToFileBuffer

... (truncated)

Commits
  • 8460cec release: cut the v16.2.15 release
  • f596a3d fix(@​angular-devkit/build-angular): clear context in Karma by default for sin...
  • 56fa051 fix(@​angular-devkit/build-angular): upgrade webpack to 5.94.0
  • 01bd959 release: cut the v16.2.14 release
  • 1068c3c fix(@​angular-devkit/build-angular): update vite to 4.5.3
  • b951c58 release: cut the v16.2.13 release
  • 882fff3 test: update Safari 15 private property E2E for babel changes
  • bdcc5a1 test: disable failing test
  • 6b8722d build: update ng-dev config to work with Node.js 18.19
  • 5ad507e fix(@​angular-devkit/build-angular): update webpack-dev-middleware to 6.1.2
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Description by Korbit AI

Summary by CodeRabbit

  • Chores
    • Updated the Angular build toolkit to improve performance and stability.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [webpack](https://github.com/webpack/webpack) to 5.94.0 and updates ancestor dependency [@angular-devkit/build-angular](https://github.com/angular/angular-cli). These dependencies need to be updated together.


Updates `webpack` from 5.88.2 to 5.94.0
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.88.2...v5.94.0)

Updates `@angular-devkit/build-angular` from 16.2.9 to 16.2.15
- [Release notes](https://github.com/angular/angular-cli/releases)
- [Changelog](https://github.com/angular/angular-cli/blob/main/CHANGELOG.md)
- [Commits](angular/angular-cli@16.2.9...16.2.15)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: indirect
- dependency-name: "@angular-devkit/build-angular"
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 30, 2024
@korbit-ai
Copy link
Copy Markdown

korbit-ai bot commented Aug 30, 2024

My review is in progress 📖 - I will have feedback for you in a few minutes!

Your free trial of Korbit Pro is ending in 5 days. To continue using Pro, manage your subscription in the Korbit Console. Otherwise your account will be set to Korbit Starter beginning on September 5th, 2024.

@trag-bot
Copy link
Copy Markdown

trag-bot bot commented Aug 30, 2024

@trag-bot
Copy link
Copy Markdown

trag-bot bot commented Aug 30, 2024

@trag-bot didn't find any issues in the code! ✅✨

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Aug 30, 2024

Walkthrough

The change involves an update to the @angular-devkit/build-angular package in the devDependencies section of the UserApp/package.json file. The version has been upgraded from ~16.2.9 to ~16.2.15, reflecting a minor version increment that typically includes bug fixes and performance improvements. No other dependencies or configurations have been altered.

Changes

Files Change Summary
UserApp/package.json Updated @angular-devkit/build-angular from ~16.2.9 to ~16.2.15 in devDependencies

Poem

In the garden, I hop with glee,
A version change, oh what a spree!
Angular tools, now spry and bright,
Bug fixes dance in the moonlight.
With every update, we leap and bound,
In code and joy, new wonders found! 🐇✨


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Other keywords and placeholders

  • Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
  • Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
  • Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

Copy link
Copy Markdown

@korbit-ai korbit-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I have reviewed your code and did not find any issues!


Please note that I can make mistakes, and you should still encourage your team to review your code as well.

@sonarqubecloud
Copy link
Copy Markdown

Copy link
Copy Markdown

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between d81b1a7 and b37cc16.

Files ignored due to path filters (1)
  • UserApp/package-lock.json is excluded by !**/package-lock.json
Files selected for processing (1)
  • UserApp/package.json (1 hunks)
Additional comments not posted (1)
UserApp/package.json (1)

64-64: Approved: Dependency version update.

The update of @angular-devkit/build-angular from ~16.2.9 to ~16.2.15 is noted and approved. This minor version update is expected to include bug fixes and performance improvements that are backward compatible.

It's important to ensure that this update does not introduce any compatibility issues with other dependencies. Consider running a full build and test cycle to verify that all integrated parts of the application function as expected.

@endorphinians endorphinians self-assigned this Oct 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file korbit-code-analysis

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant