Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade webpack from 5.9.0 to 5.10.1 #525

Merged
merged 1 commit into from
Jan 5, 2021

Conversation

snyk-bot
Copy link
Contributor

@snyk-bot snyk-bot commented Jan 4, 2021

Snyk has created this PR to upgrade webpack from 5.9.0 to 5.10.1.

merge advice
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 2 versions ahead of your current version.
  • The recommended version was released 24 days ago, on 2020-12-11.
Release notes
Package name: webpack
  • 5.10.1 - 2020-12-11

    Bugfixes

    • avoid duplicating chunk info in chunk loading global
    • allow executing chunks before runtime is loaded
    • avoid error when emitting assets with different query string but identical filename and content
    • fix duplicated asset name in processAssets with additionalAssets
    • add missing \ in module info header comment
  • 5.10.0 - 2020-12-04

    Bugfixes

    • Multiple fixes regarding the side effects optimization ("sideEffects": false) when reexports and concatenated modules are combined

    Contributing

    • Typescript major 4
      • Improved internal structure of our typings

    Performance

    • output.pathinfo: true (default in development) adds less verbose information (and is faster)
    • output.pathinfo: "verbose" adds more verbose information
    • output.pathinfo: true is cached
    • avoid assets and module stats information generation when they are cached and cached assets/modules are not shown
  • 5.9.0 - 2020-11-28

    Features

    • improve side effects analysis to report imported and reexported symbols as side-effect-free

    Bugfixes

    • fix problem when HMR and different runtimes (e. g. with Workers)
      • caused crash with ... has no hash info for runtime ...
from webpack GitHub release notes
Commit messages
Package name: webpack
  • 3f3d013 5.10.1
  • af52c8f Merge pull request #12174 from webpack/bugfix/bootstrap
  • f70aa0e readd missing char in the pathinfo comment
  • 48571c6 add selective runtime requirements from startup logic which doesn't prevent inlining modules
  • edae614 fix merge issue
  • 6a9fdc6 Merge pull request #12173 from webpack/dependabot/npm_and_yarn/ts-loader-8.0.12
  • be65953 Merge pull request #12172 from webpack/dependabot/npm_and_yarn/types/jest-26.0.19
  • d669b00 Merge pull request #12171 from webpack/dependabot/npm_and_yarn/mini-css-extract-plugin-1.3.3
  • 8e647c3 Merge pull request #12170 from webpack/dependabot/npm_and_yarn/ini-1.3.7
  • 32d887e chore(deps-dev): bump ts-loader from 8.0.11 to 8.0.12
  • 769392d chore(deps-dev): bump @ types/jest from 26.0.17 to 26.0.19
  • 89ea512 chore(deps-dev): bump mini-css-extract-plugin from 1.3.2 to 1.3.3
  • 285558a chore(deps): bump ini from 1.3.5 to 1.3.7
  • e855a24 Merge pull request #12169 from webpack/bugfix/additional-assets-duplicate
  • 0e7490a Merge pull request #12166 from webpack/dependabot/npm_and_yarn/browserslist-4.16.0
  • 1eed525 Merge pull request #12160 from webpack/dependabot/npm_and_yarn/babel/preset-react-7.12.10
  • f0af9c9 Merge pull request #12159 from webpack/dependabot/npm_and_yarn/simple-git-2.26.0
  • 561429d Merge pull request #12164 from webpack/dependabot/npm_and_yarn/types/node-14.14.12
  • 801f5d3 Merge pull request #12161 from webpack/dependabot/npm_and_yarn/babel/core-7.12.10
  • 1c7f221 fix triggering processAssets for some assets twice
  • 41d5c0f chore(deps): bump browserslist from 4.15.0 to 4.16.0
  • fe72b36 Merge pull request #12150 from webpack/dependabot/npm_and_yarn/watchpack-2.1.0
  • 765fdb4 Merge pull request #12158 from webpack/bugfix/11894
  • a5eca83 chore(deps-dev): bump @ types/node from 14.14.10 to 14.14.12

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@lholmquist lholmquist merged commit d552015 into master Jan 5, 2021
@lholmquist lholmquist deleted the snyk-upgrade-f88006f778627885e5ab9e2bbb510e72 branch January 5, 2021 14:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants