Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 9, 2021

Bumps webpack from 5.44.0 to 5.49.0.

Release notes

Sourced from webpack's releases.

v5.49.0

Features

  • add experiments.buildHttp to build http(s):// imports instead of keeping them external
    • keeps a webpack.lock file with integrity and webpack.lock.data with cached content that should be committed
    • Automatically upgrades lockfile during development when remote resources change (might be disabled with experiments.buildHttp.upgrade: false)
    • Lockfile is frozen during production builds and usually no network requests are made (exception: Cache-Control: no-cache).
    • The webpack.lock.data persisting can be disabled with experiments.buildHttp.cacheLocation: false. That will will introduce a availability risk. (webpack cache will be used to cache network responses)

Bugfixes

  • fix HMR infinite loop (again)
  • fix rare non-determinism with splitChunks.maxSize introduces in the last release
  • optional modules no longer cause the module to fail when bail is set
  • fix typo in records format: chunkHashs -> chunkHashes

Performance

  • limit the number of parallel generated chunks for memory reasons

v5.48.0

Features

  • enable import assertions again

Bugfixes

  • upgrade webpack-sources for fixes regarding source maps
  • fix infinite loop in HMR runtime code

v5.47.1

Bugfixes

  • upgrade webpack-sources for a bunch of bugfixes regarding source maps and missing chars in output

v5.47.0

Performance

  • improve source-map performance

Bugfixes

  • avoid unnecessary "use strict"s in module mode

v5.46.0

... (truncated)

Commits
  • d386838 5.49.0
  • 150d370 Merge pull request #13918 from privatenumber/hashes-typo
  • f8acab3 Merge pull request #13944 from webpack/bugfix/11594
  • 9e735a7 Merge pull request #13943 from webpack/bugfix/split-chunks-max-size-determini...
  • c6856e2 optional modules will not fail the build when bail is set
  • 0605b88 fix indeterminism with splitChunks.maxSize
  • a6e9f59 Merge pull request #13932 from webpack/bugfix/infinite-loop
  • d77d863 Merge pull request #13925 from webpack/feature/http-urls
  • 9bf6797 fix resolving context for redirects
  • 30ebedd fix handling of new URL() in remote resources
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [webpack](https://github.com/webpack/webpack) from 5.44.0 to 5.49.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.44.0...v5.49.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 9, 2021
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 16, 2021

Superseded by #40.

@dependabot dependabot bot closed this Aug 16, 2021
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/app/webpack-5.49.0 branch August 16, 2021 14:10
tschmidtb51 pushed a commit that referenced this pull request Oct 24, 2022
550e5bd7 Merge pull request #38 from secvisogram/test_6.2.20
963e9ff3 Merge pull request #36 from secvisogram/informative_test_6.3.9
c00d74dc feat: implement optional test 6.2.20
8b2e345d Merge branch 'main' into informative_test_6.3.9
e1b9e6d8 Merge pull request #37 from secvisogram/test_6.1.8
ccafd061 Merge pull request #34 from secvisogram/spell_check
2684c5aa feat: implement mandatory test 6.1.8
de0a2066 Merge pull request #35 from secvisogram/docs/refactor_readme
d61cbc34 feat: implement spell checking test (6.3.8)
57c71085 feat: implement informative test 6.3.9
867ac8b5 docs: refactor readme
2c3ece83 Merge pull request #33 from secvisogram/fix/test-6-1-31
b21c77ec Merge pull request #32 from secvisogram/fix/test-6-1-24
76842ac7 fix(mandatoryTest_6_1_31): add missing word "before"
bfda62f2 test(mandatoryTest_6_1_31): add test files from OASIS repo
f74090f2 fix(mandatoryTest_6_1_31): add missing word "earlier"
2998504d test(mandatory_6_1_24): add test files from OASIS repo
670f566f fix(mandatoryTest_6_1_24): fixes #30 by checking involvements per vulnerability only
0d59c10b Merge pull request #22 from secvisogram/feat/export-cwe-catalogue
01bf1853 feat: update cwec file
02d73570 Merge pull request #29 from secvisogram/feat/cs02-test-6-1-31
da07289a style: format code to make it more readable
c11fe190 docs: add url to latest cwec file
a805aa91 feat: export cwe weaknesses
161e73ac feat: update cwe catalogue
4cf336c7 chore: add script to import cwe catalogue
c13f0483 feat: adopt mandatory test 6.1.31 to reflect state of CS02
1d86605b Merge pull request #9 from secvisogram/feat/csd02-additional-tests
b8ae04d7 docs: improve comment
757f7161 test: update files from oasis repo
b0ebacfd refactor: improve readability of test 6.2.19
2a11c425 test: improve tests of optional test 6.2.14
19bd17a0 docs: add comment with link to iana registry
d6763c28 tests: improve language checker tests
0b09f4bc fix: adapt test according to spec samples
03b1fd02 feat: adapt optional test to use set
6eb314f2 fix: correct instance path
802add13 feat: adapt error message
a082e677 feat: detect private-use regions and scripts
6ea33cb9 tests: fix test cases
ae736435 fix: adapt instancePath
e5a3090d feat: implement informative test 6.3.11
b48a57b4 feat: implement informative test 6.3.10
d1de823e feat: implement optional test 6.2.19
95f3e6e3 feat: Implement optional test 6.2.18
da7b1e6d feat: Implement optional test 6.2.17
bddab7c1 feat: Implement optional test 6.2.16
8ce1ee07 feat: Implement optional test 6.2.15
b1dc58ea feat: Implement optional test 6.2.14
bafd6d48 Merge pull request #23 from secvisogram/chore/github-action
bb27a798 build: adapt coverage gh action to use lcov format
c166bb81 fix: replace nyc with c8 for test coverage
07063c47 chore(github-action): add test run with code coverage
cbecb5b9 chore(github-action): skip coverage folder
0e5eac89 chore(github-action): add missing version specifier
2c21baa6 chore(github-action): add test and coverage report
372c4e82 chore(github-action): add missing version specifier for used actions
61ccf478 chore(github-action): add GitHub action to run npm test
f9ed8e2b Merge pull request #18 from secvisogram/fix/typings
97ce7e67 fix: install node typings
e1002221 Merge pull request #12 from secvisogram/fix/test-issues
6149b589 tests: improve test suite
71a2dd86 fix: correct instance path
c41d2325 fix: skip informational advisory docs
09d51c7e fix: catch network errors correctly
6747d8d1 feat: adapt optional test 6.2.11 to match csd02
842a3abd style: omit explicit falsy to `false` conversion
734c83ba test: adapt http mock status text
a6b51607 fix: include vulnerability references in url check
fbfbfe83 Update lib/informativeTests/informativeTest_6_3_6.js
9d122608 Update lib/informativeTests/informativeTest_6_3_6.js
74d9e2b3 Update lib/informativeTests/informativeTest_6_3_6.js
1e747e58 Update lib/informativeTests/informativeTest_6_3_6.js
eb6c1512 Update lib/informativeTests/informativeTest_6_3_6.js
ff78b4e4 fix: complete optional test 6.2.1
6d582ce6 fix: complete informative tests 6.3.6 and 6.3.7
ba0aeccb fix: Adapt message based on hash name
b7e7146c Merge pull request #11 from secvisogram/feat/run-test-script
af3eb0ea feat: add script to run single tests against files

git-subtree-dir: csaf-validator-lib
git-subtree-split: 550e5bd7c447447cc6aadc7a084922626c5dd696
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant