Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Aug 23, 2021

Bumps webpack from 5.44.0 to 5.51.1.

Release notes

Sourced from webpack's releases.

v5.51.1

Bugfixes

  • library: "module" propages top-level-await correctly
  • fix crash in filesystem snapshotting when trying to snapshot a non-existing directory
  • fix some context-dependent logic in concatenated modules and source url handling

v5.51.0

Bugfixes

  • correctly keep chunk loading state when the chunk loading logic is HMR updated
    • This fixes some edge cases that e. g. occur when using lazy compilation for entrypoints. It is now able to HMR update that instead of needing a manual reload. Also see fixes in webpack-dev-server@4.
  • track and resolve symlinks for filesystem snapshotting
    • This fixes some cases of circular yarn linking of dependencies.
    • It also fixes some problems when using package managers that use symlinks to deduplicate (e. g. cnpm or pnpm)
  • pass the resulting module in the callbacks of Compilation.addModuleChain and Compilation.addModuleTree

v5.50.0

Features

Performance

  • disable cache compression by default as it tend to make performance worse
    • I could still be enabled again for specific scenarios
  • reduce the number of allocations during cache serialization
    • This improves performance and memory usage

v5.49.0

Features

  • add experiments.buildHttp to build http(s):// imports instead of keeping them external
    • keeps a webpack.lock file with integrity and webpack.lock.data with cached content that should be committed
    • Automatically upgrades lockfile during development when remote resources change (might be disabled with experiments.buildHttp.upgrade: false)
    • Lockfile is frozen during production builds and usually no network requests are made (exception: Cache-Control: no-cache).
    • The webpack.lock.data persisting can be disabled with experiments.buildHttp.cacheLocation: false. That will will introduce a availability risk. (webpack cache will be used to cache network responses)

Bugfixes

  • fix HMR infinite loop (again)
  • fix rare non-determinism with splitChunks.maxSize introduces in the last release
  • optional modules no longer cause the module to fail when bail is set
  • fix typo in records format: chunkHashs -> chunkHashes

... (truncated)

Commits
  • d3da48e 5.51.1
  • e73864c Merge pull request #14031 from webpack/bugfix/concatenated-contextify
  • c76be4d make some things context-independent
  • 5239f26 Merge pull request #14030 from webpack/bugfix/crash-fsinfo
  • ff69a4a Merge pull request #13997 from yujunjung/main
  • 0088d55 fix crash when trying to snapshot not existing directory
  • bd7cb37 5.51.0
  • 1a06a45 update lazy-compilation example for webpack-dev-server@4
  • 4e5e0ac Merge pull request #14009 from henryqdineen/hqd-module-creation-callback
  • c61466e Merge pull request #14019 from webpack/bugfix/symlink-snapshot
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Aug 23, 2021
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from 50239de to ada089e Compare August 30, 2021 08:14
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from ada089e to dc4eb00 Compare October 6, 2021 20:07
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from dc4eb00 to fd755eb Compare December 2, 2021 23:25
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from fd755eb to 2cd22c0 Compare December 24, 2021 00:53
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from 2cd22c0 to 0794112 Compare January 24, 2022 10:41
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from 0794112 to 8c42d60 Compare April 6, 2022 21:53
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from 8c42d60 to a64fe8f Compare June 23, 2022 17:48
tschmidtb51 pushed a commit that referenced this pull request Oct 24, 2022
7405d411 feat: remove strict option temporarily
a3466e94 Merge pull request secvisogram#69 from secvisogram/update-deps
6df13f01 chore: update dependencies
348912d5 Merge pull request secvisogram#68 from secvisogram/fix-mandatory-test-6-1-16
20065219 fix: correct version checking
4a59f463 Merge pull request #60 from secvisogram/docs/hunspell
6bc47d7a Merge pull request secvisogram#62 from secvisogram/39-expose-group-of-tests
d5567cf4 Merge pull request secvisogram#64 from secvisogram/26-abstract-cvss-mapping-in-single-module
5f62a16e Merge pull request secvisogram#63 from secvisogram/25-use-embedded-cvss-20-library-in-mandatory-test-619
5d23103a Merge pull request secvisogram#66 from secvisogram/45-interface-anpassen
b989ba6f Merge pull request secvisogram#65 from secvisogram/56-test-639
b24b3bd4 refactor: remove unused field
38f934f5 Merge pull request #61 from secvisogram/fix/allow_empty_revision_history
a0030f00 style(mandatoryTest_6_1_24): reformat with prettier
da6ec702 refactor(mandatoryTest_6_1_24): correct test name in description
e4999f09 test(mandatoryTest_6_1_30): add unit test with valid and invalid examples
1b209467 feat: handle ajv errors without message
d7d0b62f fix: fix recursion in informative test 6.3.9
c2ff02b8 refactor: use central cvss v3 mapping
b11c34ed refactor: use central cvss v2 mapping
d8ef58b7 refactor: use embedded cvss2 library
77810740 docs: document basic, extended and full presets
d764e7e7 fix(mandatoryTest_6_1_30): allow empty revision history
840b5d74 docs: document hunspell requirement
575610d2 Merge pull request #51 from secvisogram/48-add-strict-option
e1fe09a3 Apply suggestions from code review
1351365f Merge pull request #59 from secvisogram/chore/57-improve-error-message
c38e01f8 chore: improve error message in 6.3.3
3801ce24 Update README.md
b1a91084 Update README.md
ecb02f33 0.1.0
96aa2bf2 docs: add paragraph about strict mode
bc3da447 Update tests/validate.js
74ad2437 Update lib/validate.js
510d70e7 Merge pull request #54 from secvisogram/47-undici-aktualisieren
dbe1ed24 Merge pull request #52 from secvisogram/28-add-license-file
70708701 Merge pull request #53 from secvisogram/19-indicate-node-version
9f92d864 chore: add license file
1769c1ce chore: update undici dependency
8b0316bb chore: update json-pointer dependency
bcfae615 chore: document node.js version
95e41c07 feat: add strict mode option
4d897a04 Merge pull request #42 from secvisogram/40-example-doesnt-work
53364a2f Merge pull request #43 from secvisogram/41-test-618-missing-in-readme
4b44a795 Merge pull request #44 from secvisogram/39-expose-group-of-tests
1c94a73f docs: update example
485c7e81 feat: expose basic, extended and full presets
b845135a docs: add missing tests in readme

git-subtree-dir: csaf-validator-lib
git-subtree-split: 7405d411bd34e4530d2fd5caeac13dbda5627a4f
Bumps [webpack](https://github.com/webpack/webpack) from 5.44.0 to 5.51.1.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.44.0...v5.51.1)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/app/webpack-5.51.1 branch from a64fe8f to a03b518 Compare October 24, 2022 13:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant