[Snyk] Upgrade webpack from 5.10.0 to 5.80.0 #21

snyk-bot · 2023-05-10T19:26:00Z

Snyk has created this PR to upgrade webpack from 5.10.0 to 5.80.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 125 versions ahead of your current version.
The recommended version was released 21 days ago, on 2023-04-19.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Sandbox Bypass SNYK-JS-WEBPACK-3358798	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack

5.80.0 - 2023-04-19
New Features
- Support destructuring assignment in import.meta by @ vankop in #16996
- Support treeshaking for destructuring assignment with AwaitExpression by @ vankop in #16995
- Introduce errorsSpace, warningsSpace for more readable traces in stats by @ vankop in #15450
Bug Fixes
- [CSS] - Fix runtime generation bug for merged CSS Chunks by @ janlent1 in #16903
- [CSS] - Properly handle url()/src()/image-set()/image() by @ alexander-akait in #16978
- ES Module webpack loaders are now supported @ stefanprobst in #15198
- Fix spelling error for statement.finalizer in parser by @ xiaoboost in #17016
- Fix non-deterministic moduleId assignment due to encountering NaN in sort function by @ scameron in #16933
- [enhanced-resolve]: Support wildcards pattern with common suffix in package maps & imports/exports field by @ bvanjoi in webpack/enhanced-resolve#353
Tests & Contributor Experience
- [CSS] - Added test case for @ supports field by @ alexander-akait in #17011
- Add test for include option in BannerPlugin by @ jeffin143 in #10736
- Remove finializer from cspell.json by @ snitin315 in #17022
Developer Experience
- Adds the twitter badge by @ yadunandanbhat in #15667
- Add wasm-bindgen example to example by @ gthb in #14313
- Update grammar mistakes in examples by @ ersachin3112 in #16988
Dependencies & Maintenance
- Bump core-js from 3.30.0 to 3.30.1 by @ dependabot in #16983
- Bump @ webassemblyjs by @ alexander-akait in #17003
- Bump assemblyscript from 0.25.2 to 0.27.2 by @ dependabot in #16959
- Bump enhanced-resolve to 5.13.0 by @ TheLarkInn in #17024
- Included githubactions in the dependabot config by @ neilnaveen in #15618
- Fix prettier by @ alexander-akait in #16976
New Contributors
- @ neilnaveen made their first contribution in #15618
- @ yadunandanbhat made their first contribution in #15667
- @ ersachin3112 made their first contribution in #16988
- @ stefanprobst made their first contribution in #15198
- @ xiaoboost made their first contribution in #17016
- @ scameron made their first contribution in #16933
Full Changelog: v5.79.0...v5.80.0
5.79.0 - 2023-04-12
Read more
5.78.0 - 2023-04-05
Read more
5.77.0 - 2023-03-29
New Features
- Add a new output option, output.workerPublicPath by @ thomastay in #16671
Developer Experience
- Improve resolve.extensions error message to suggest when "." is missing before the extension by @ snitin315 in #16807
Contributor Experience
- Enable GitHub Copilot for PR's into default Pull Request Template by @ TheLarkInn in #16881
New Contributors
- @ thomastay made their first contribution in #16671
Full Changelog: v5.76.3...v5.77.0
5.76.3 - 2023-03-22
Read more
5.76.2 - 2023-03-15
Read more
5.76.1 - 2023-03-10
Fixed
- Added assert/strict built-in to NodeTargetPlugin
Revert
- Improve performance of hashRegExp lookup by @ ryanwilsonperkin in #16759
5.76.0 - 2023-03-08
Read more
5.75.0 - 2022-11-09
Bugfixes
- experiments.* normalize to false when opt-out
- avoid NaN%
- show the correct error when using a conflicting chunk name in code
- HMR code tests existance of window before trying to access it
- fix eval-nosources-* actually exclude sources
- fix race condition where no module is returned from processing module
- fix position of standalong semicolon in runtime code
Features
- add support for @ import to extenal CSS when using experimental CSS in node
- add i64 support to the deprecated WASM implementation
Developer Experience
- expose EnableWasmLoadingPlugin
- add more typings
- generate getters instead of readonly properties in typings to allow overriding them
5.74.0 - 2022-07-25
Read more
5.73.0 - 2022-06-02
5.72.1 - 2022-05-10
5.72.0 - 2022-04-07
5.71.0 - 2022-04-01
5.70.0 - 2022-03-03
5.69.1 - 2022-02-17
5.69.0 - 2022-02-15
5.68.0 - 2022-01-31
5.67.0 - 2022-01-21
5.66.0 - 2022-01-12
5.65.0 - 2021-12-06
5.64.4 - 2021-11-25
5.64.3 - 2021-11-24
5.64.2 - 2021-11-20
5.64.1 - 2021-11-15
5.64.0 - 2021-11-11
5.63.0 - 2021-11-09
5.62.2 - 2021-11-09
5.62.1 - 2021-11-05
5.62.0 - 2021-11-05
5.61.0 - 2021-10-29
5.60.0 - 2021-10-25
5.59.1 - 2021-10-20
5.59.0 - 2021-10-19
5.58.2 - 2021-10-13
5.58.1 - 2021-10-08
5.58.0 - 2021-10-07
5.57.1 - 2021-10-05
5.57.0 - 2021-10-05
5.56.1 - 2021-10-04
5.56.0 - 2021-10-01
5.55.1 - 2021-09-29
5.55.0 - 2021-09-28
5.54.0 - 2021-09-24
5.53.0 - 2021-09-16
5.52.1 - 2021-09-10
5.52.0 - 2021-09-03
5.51.2 - 2021-09-02
5.51.1 - 2021-08-19
5.51.0 - 2021-08-19
5.50.0 - 2021-08-10
5.49.0 - 2021-08-06
5.48.0 - 2021-08-02
5.47.1 - 2021-07-29
5.47.0 - 2021-07-27
5.46.0 - 2021-07-22
5.45.1 - 2021-07-16
5.45.0 - 2021-07-16
5.44.0 - 2021-07-08
5.43.0 - 2021-07-06
5.42.1 - 2021-07-05
5.42.0 - 2021-07-02
5.41.1 - 2021-06-29
5.41.0 - 2021-06-28
5.40.0 - 2021-06-21
5.39.1 - 2021-06-17
5.39.0 - 2021-06-14
5.38.1 - 2021-05-27
5.38.0 - 2021-05-27
5.37.1 - 2021-05-19
5.37.0 - 2021-05-10
5.36.2 - 2021-04-30
5.36.1 - 2021-04-28
5.36.0 - 2021-04-27
5.35.1 - 2021-04-23
5.35.0 - 2021-04-21
5.34.0 - 2021-04-19
5.33.2 - 2021-04-14
5.33.1 - 2021-04-14
5.33.0 - 2021-04-14
5.32.0 - 2021-04-12
5.31.2 - 2021-04-09
5.31.1 - 2021-04-09
5.31.0 - 2021-04-07
5.30.0 - 2021-04-01
5.29.0 - 2021-04-01
5.28.0 - 2021-03-24
5.27.2 - 2021-03-22
5.27.1 - 2021-03-20
5.27.0 - 2021-03-19
5.26.3 - 2021-03-17
5.26.2 - 2021-03-16
5.26.1 - 2021-03-16
5.26.0 - 2021-03-15
5.25.1 - 2021-03-14
5.25.0 - 2021-03-12
5.24.4 - 2021-03-08
5.24.3 - 2021-03-03
5.24.2 - 2021-02-24
5.24.1 - 2021-02-23
5.24.0 - 2021-02-22
5.23.0 - 2021-02-18
5.22.0 - 2021-02-15
5.21.2 - 2021-02-07
5.21.1 - 2021-02-06
5.21.0 - 2021-02-05
5.20.2 - 2021-02-04
5.20.1 - 2021-02-03
5.20.0 - 2021-02-02
5.19.0 - 2021-01-29
5.18.0 - 2021-01-26
5.17.0 - 2021-01-22
5.16.0 - 2021-01-19
5.15.0 - 2021-01-15
5.14.0 - 2021-01-13
5.13.0 - 2021-01-11
5.12.3 - 2021-01-10
5.12.2 - 2021-01-09
5.12.1 - 2021-01-08
5.12.0 - 2021-01-08
5.11.1 - 2020-12-28
5.11.0 - 2020-12-17
5.10.3 - 2020-12-15
5.10.2 - 2020-12-15
5.10.1 - 2020-12-11
5.10.0 - 2020-12-04

from webpack GitHub release notes

Commit messages

Package name: webpack

9ac1728 5.80.0
09dc9e2 Merge pull request #17024 from webpack/thelarkinn/bump-enhanced-resolve
d58760a yarn-lint
58396f5 introduce the new types from enhanced-resolve
4ff4d59 Merge pull request #16933 from scameron/deterministic-moduleids
8bc34bc feat(deps): Update enhanced-resolve to latest for * wildcard pattern in exports
5c522c4 Merge pull request #17022 from snitin315/patch-3
457cbe1 Merge pull request #16903 from janlent1/fixruntimeissue
63c1601 chore: remove `finializer` from cspell.json
9c70d1d Merge pull request #17016 from xiaoboost/fix/fix-spell-error
9d39104 Merge pull request #15450 from webpack/feature/errors-warnings-space
06d5e56 Merge pull request #15198 from stefanprobst/fix/pass-package-type-to-loader-runner
56d4fb2 chore: fix lint again
90df710 chore: fix lint
5cc6d13 test: added case
a01d2d5 fix: fix spell error
65d1742 fix: bug
98b976e chore: fix lint
398dd91 test: refactor
8ce07a1 Merge pull request #17011 from webpack/issue-16155
50bb0c2 test: added
e857e99 Remove unused use-style
f1d25f4 Merge pull request #17003 from webpack/update-@ webassemblyjs
f9bb49c chore: bump `@ webassemblyjs`

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade webpack from 5.10.0 to 5.80.0. See this package in npm: https://www.npmjs.com/package/webpack See this project in Snyk: https://app.snyk.io/org/q1bluequantumblockchainlabs.onmicrosoft.com/project/06c59b79-ad82-4593-b440-a8a7073d82d1?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade webpack from 5.10.0 to 5.80.0 #21

[Snyk] Upgrade webpack from 5.10.0 to 5.80.0 #21

snyk-bot commented May 10, 2023

New Features

Bug Fixes

Tests & Contributor Experience

Developer Experience

Dependencies & Maintenance

New Contributors

New Features

Developer Experience

Contributor Experience

New Contributors

Fixed

Revert

Bugfixes

Features

Developer Experience

[Snyk] Upgrade webpack from 5.10.0 to 5.80.0 #21

Are you sure you want to change the base?

[Snyk] Upgrade webpack from 5.10.0 to 5.80.0 #21

Conversation

snyk-bot commented May 10, 2023

Snyk has created this PR to upgrade webpack from 5.10.0 to 5.80.0.

New Features

Bug Fixes

Tests & Contributor Experience

Developer Experience

Dependencies & Maintenance

New Contributors

New Features

Developer Experience

Contributor Experience

New Contributors

Fixed

Revert

Bugfixes

Features

Developer Experience