[Snyk] Upgrade webpack from 5.10.0 to 5.81.0 #25

q1blue · 2023-05-23T01:06:07Z

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to upgrade webpack from 5.10.0 to 5.81.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

The recommended version is 126 versions ahead of your current version.
The recommended version was released a month ago, on 2023-04-26.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Sandbox Bypass SNYK-JS-WEBPACK-3358798	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	Proof of Concept
	Regular Expression Denial of Service (ReDoS) SNYK-JS-TERSER-2806366	736/1000 Why? Proof of Concept exploit, Has a fix available, CVSS 8.3	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: webpack

5.81.0 - 2023-04-26
New Features
- [CSS] - Increased CSS import support and new hooks included for CSS module creation by @ alexander-akait in #17057
- Logging now added to DefinePlugin by @ alexander-akait in #17048
- New ignoreBrowserWarnings option to ignore browser console warnings in ModuleFederation by @ indeediansbrett in #16388
Bug Fixes
- [CSS] - Fix issue where vendor prefixed keyframes and animation was not supported in CSS modules by @ alexander-akait in #16975
- Fix bug where AST was not properly handled by @ quanru in #17032
- Fix automatic publicPath detection logic by @ alexander-akait in #17047
Tests & Contributor Experience
- Rename provide to getOrInsert in MapHelpers and document it better by @ TheLarkInn in #17060
- Increase test reliability for DefinePlugin @ alexander-akait in #17062
- Add additional CI Pipeline to test main branches of first-party webpack dependencies by @ alexander-akait in #17020
- Refactor tests to no longer use deprecated or legacy dependencies and APIs by @ alexander-akait in #17033
Developer Experience
- Increase type coverage/documentation for ModuleFilenameHelpers by @ TheLarkInn in #17045
- Increase type coverage/documentation for CommonJsExportsParserPlugin by @ TheLarkInn in #17046
- Increase type coverage/documentation for binarySearchBounds.js by @ TheLarkInn in #17058
- Export MemoryCacheOptions types by @ romulof in #17055
Dependencies & Maintenance
- Add NodeJS v20 to CI Matrix by @ alexander-akait in #17019
- Update Typescript to v5 by @ alexander-akait in #16957
- Bump @ types/estree from 1.0.0 to 1.0.1 by @ dependabot in #17026
- Bump @ types/node from 18.15.11 to 18.15.13 by @ dependabot in #17038
- Bump assemblyscript from 0.27.2 to 0.27.3 by @ dependabot in #17051
- Bump memfs from 3.5.0 to 3.5.1 by @ dependabot in #17039
- Bump prettier from 2.8.7 to 2.8.8 by @ dependabot in #17050
- Bump simple-git from 3.17.0 to 3.18.0 by @ dependabot in #17066
New Contributors
- @ quanru made their first contribution in #17032
- @ romulof made their first contribution in #17055
- @ indeediansbrett made their first contribution in #16388
Full Changelog: v5.80.0...v5.81.0
5.80.0 - 2023-04-19
Read more
5.79.0 - 2023-04-12
Read more
5.78.0 - 2023-04-05
Read more
5.77.0 - 2023-03-29
New Features
- Add a new output option, output.workerPublicPath by @ thomastay in #16671
Developer Experience
- Improve resolve.extensions error message to suggest when "." is missing before the extension by @ snitin315 in #16807
Contributor Experience
- Enable GitHub Copilot for PR's into default Pull Request Template by @ TheLarkInn in #16881
New Contributors
- @ thomastay made their first contribution in #16671
Full Changelog: v5.76.3...v5.77.0
5.76.3 - 2023-03-22
Read more
5.76.2 - 2023-03-15
Read more
5.76.1 - 2023-03-10
Fixed
- Added assert/strict built-in to NodeTargetPlugin
Revert
- Improve performance of hashRegExp lookup by @ ryanwilsonperkin in #16759
5.76.0 - 2023-03-08
Read more
5.75.0 - 2022-11-09
Bugfixes
- experiments.* normalize to false when opt-out
- avoid NaN%
- show the correct error when using a conflicting chunk name in code
- HMR code tests existance of window before trying to access it
- fix eval-nosources-* actually exclude sources
- fix race condition where no module is returned from processing module
- fix position of standalong semicolon in runtime code
Features
- add support for @ import to extenal CSS when using experimental CSS in node
- add i64 support to the deprecated WASM implementation
Developer Experience
- expose EnableWasmLoadingPlugin
- add more typings
- generate getters instead of readonly properties in typings to allow overriding them
5.74.0 - 2022-07-25
5.73.0 - 2022-06-02
5.72.1 - 2022-05-10
5.72.0 - 2022-04-07
5.71.0 - 2022-04-01
5.70.0 - 2022-03-03
5.69.1 - 2022-02-17
5.69.0 - 2022-02-15
5.68.0 - 2022-01-31
5.67.0 - 2022-01-21
5.66.0 - 2022-01-12
5.65.0 - 2021-12-06
5.64.4 - 2021-11-25
5.64.3 - 2021-11-24
5.64.2 - 2021-11-20
5.64.1 - 2021-11-15
5.64.0 - 2021-11-11
5.63.0 - 2021-11-09
5.62.2 - 2021-11-09
5.62.1 - 2021-11-05
5.62.0 - 2021-11-05
5.61.0 - 2021-10-29
5.60.0 - 2021-10-25
5.59.1 - 2021-10-20
5.59.0 - 2021-10-19
5.58.2 - 2021-10-13
5.58.1 - 2021-10-08
5.58.0 - 2021-10-07
5.57.1 - 2021-10-05
5.57.0 - 2021-10-05
5.56.1 - 2021-10-04
5.56.0 - 2021-10-01
5.55.1 - 2021-09-29
5.55.0 - 2021-09-28
5.54.0 - 2021-09-24
5.53.0 - 2021-09-16
5.52.1 - 2021-09-10
5.52.0 - 2021-09-03
5.51.2 - 2021-09-02
5.51.1 - 2021-08-19
5.51.0 - 2021-08-19
5.50.0 - 2021-08-10
5.49.0 - 2021-08-06
5.48.0 - 2021-08-02
5.47.1 - 2021-07-29
5.47.0 - 2021-07-27
5.46.0 - 2021-07-22
5.45.1 - 2021-07-16
5.45.0 - 2021-07-16
5.44.0 - 2021-07-08
5.43.0 - 2021-07-06
5.42.1 - 2021-07-05
5.42.0 - 2021-07-02
5.41.1 - 2021-06-29
5.41.0 - 2021-06-28
5.40.0 - 2021-06-21
5.39.1 - 2021-06-17
5.39.0 - 2021-06-14
5.38.1 - 2021-05-27
5.38.0 - 2021-05-27
5.37.1 - 2021-05-19
5.37.0 - 2021-05-10
5.36.2 - 2021-04-30
5.36.1 - 2021-04-28
5.36.0 - 2021-04-27
5.35.1 - 2021-04-23
5.35.0 - 2021-04-21
5.34.0 - 2021-04-19
5.33.2 - 2021-04-14
5.33.1 - 2021-04-14
5.33.0 - 2021-04-14
5.32.0 - 2021-04-12
5.31.2 - 2021-04-09
5.31.1 - 2021-04-09
5.31.0 - 2021-04-07
5.30.0 - 2021-04-01
5.29.0 - 2021-04-01
5.28.0 - 2021-03-24
5.27.2 - 2021-03-22
5.27.1 - 2021-03-20
5.27.0 - 2021-03-19
5.26.3 - 2021-03-17
5.26.2 - 2021-03-16
5.26.1 - 2021-03-16
5.26.0 - 2021-03-15
5.25.1 - 2021-03-14
5.25.0 - 2021-03-12
5.24.4 - 2021-03-08
5.24.3 - 2021-03-03
5.24.2 - 2021-02-24
5.24.1 - 2021-02-23
5.24.0 - 2021-02-22
5.23.0 - 2021-02-18
5.22.0 - 2021-02-15
5.21.2 - 2021-02-07
5.21.1 - 2021-02-06
5.21.0 - 2021-02-05
5.20.2 - 2021-02-04
5.20.1 - 2021-02-03
5.20.0 - 2021-02-02
5.19.0 - 2021-01-29
5.18.0 - 2021-01-26
5.17.0 - 2021-01-22
5.16.0 - 2021-01-19
5.15.0 - 2021-01-15
5.14.0 - 2021-01-13
5.13.0 - 2021-01-11
5.12.3 - 2021-01-10
5.12.2 - 2021-01-09
5.12.1 - 2021-01-08
5.12.0 - 2021-01-08
5.11.1 - 2020-12-28
5.11.0 - 2020-12-17
5.10.3 - 2020-12-15
5.10.2 - 2020-12-15
5.10.1 - 2020-12-11
5.10.0 - 2020-12-04

from webpack GitHub release notes

Commit messages

Package name: webpack

5c016a8 5.81.0
5b20c9a Merge pull request #17057 from webpack/import-support
f429ac7 Merge pull request #17066 from webpack/dependabot/npm_and_yarn/simple-git-3.18.0
2c6dc77 Merge pull request #16388 from indeediansbrett/feat/issue-16374
7398dbd Merge pull request #17033 from webpack/chore-deps-avoud-using-legacy-loader-utils
9234620 Merge pull request #17020 from webpack/ci-deps-main
2552028 Merge pull request #17062 from webpack/test-stabilization-for-define
a7551fa chore(deps-dev): bump simple-git from 3.17.0 to 3.18.0
ed0738d test: stability for define
f3cf014 test: stability
ddf6483 test: stability
9d930f7 fix: bug with balanced parens
e3f83e2 fix: bug with balanced
d9dd04e refactor: reuse comment logic
83d60f9 fix: bug with comments in media
fd93ed4 test: more
bbfcbcb test: more
e56df72 Merge pull request #17060 from webpack/thelarkinn/rename-map-helper
c3e393e refactor: code
605f28a test: more
e8687e7 test: more
175ca1d test: more
86ee8ab test: more
0453010 fix: anonymous layers

Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Snyk has created this PR to upgrade webpack from 5.10.0 to 5.81.0. See this package in npm: https://www.npmjs.com/package/webpack See this project in Snyk: https://app.snyk.io/org/q1bluequantumblockchainlabs.onmicrosoft.com/project/06c59b79-ad82-4593-b440-a8a7073d82d1?utm_source=github&utm_medium=referral&page=upgrade-pr

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Upgrade webpack from 5.10.0 to 5.81.0 #25

[Snyk] Upgrade webpack from 5.10.0 to 5.81.0 #25

q1blue commented May 23, 2023

New Features

Bug Fixes

Tests & Contributor Experience

Developer Experience

Dependencies & Maintenance

New Contributors

New Features

Developer Experience

Contributor Experience

New Contributors

Fixed

Revert

Bugfixes

Features

Developer Experience

[Snyk] Upgrade webpack from 5.10.0 to 5.81.0 #25

Are you sure you want to change the base?

[Snyk] Upgrade webpack from 5.10.0 to 5.81.0 #25

Conversation

q1blue commented May 23, 2023

Snyk has created this PR to upgrade webpack from 5.10.0 to 5.81.0.

New Features

Bug Fixes

Tests & Contributor Experience

Developer Experience

Dependencies & Maintenance

New Contributors

New Features

Developer Experience

Contributor Experience

New Contributors

Fixed

Revert

Bugfixes

Features

Developer Experience