Update dependency webpack to v5.94.0

[ibm-mend-app]

This PR contains the following updates:

Package	Change	Age	Confidence
webpack	5.83.1 -> 5.94.0

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability
Medium	6.4	CVE-2024-43788

---

Release Notes

webpack/webpack (webpack)

v5.94.0

Compare Source

Bug Fixes

• Added runtime condition for harmony reexport checked
• Handle properly data/http/https protocols in source maps
• Make bigint optimistic when browserslist not found
• Move @​types/eslint-scope to dev deps
• Related in asset stats is now always an array when no related found
• Handle ASI for export declarations
• Mangle destruction incorrect with export named default properly
• Fixed unexpected asi generation with sequence expression
• Fixed a lot of types

New Features

• Added new external type "module-import"
• Support webpackIgnore for new URL() construction
• [CSS] @import pathinfo support

Security

• Fixed DOM clobbering in auto public path

v5.93.0

Compare Source

Bug Fixes

• Generate correct relative path to runtime chunks
• Makes DefinePlugin quieter under default log level
• Fixed mangle destructuring default in namespace import
• Fixed consumption of eager shared modules for module federation
• Strip slash for pretty regexp
• Calculate correct contenthash for CSS generator options

New Features

• Added the binary generator option for asset modules to explicitly keep source maps produced by loaders
• Added the modern-module library value for tree shakable output
• Added the overrideStrict option to override strict or non-strict mode for javascript modules

v5.92.1

Compare Source

Bug Fixes

• Doesn't crash with an error when the css experiment is enabled and contenthash is used

v5.92.0

Compare Source

Bug Fixes

• Correct tidle range's comutation for module federation
• Consider runtime for pure expression dependency update hash
• Return value in the subtractRuntime function for runtime logic
• Fixed failed to resolve promise when eager import a dynamic cjs
• Avoid generation extra code for external modules when remapping is not required
• The css/global type now handles the exports name
• Avoid hashing for @keyframe and @property at-rules in css/global type
• Fixed mangle with destructuring for JSON modules
• The stats.hasWarnings() method now respects the ignoreWarnings option
• Fixed ArrayQueue iterator
• Correct behavior of __webpack_exports_info__.a.b.canMangle
• Changed to the correct plugin name for the CommonJsChunkFormatPlugin plugin
• Set the chunkLoading option to the import when environment is unknown and output is module
• Fixed when runtimeChunk has no exports when module chunkFormat used
• [CSS] Fixed parsing minimized CSS import
• [CSS] URLs in CSS files now have correct public path
• [CSS] The css module type should not allow parser to switch mode
• [Types] Improved context module types

New Features

• Added platform target properties to compiler
• Improved multi compiler cache location and validating it
• Support import attributes spec (with keyword)
• Support node: prefix for Node.js core modules in runtime code
• Support prefetch/preload for module chunk format
• Support "..." in the importsFields option for resolver
• Root module is less prone to be wrapped in IIFE
• Export InitFragment class for plugins
• Export compileBooleanMatcher util for plugins
• Export InputFileSystem and OutputFileSystem types
• [CSS] Support the esModule generator option for CSS modules
• [CSS] Support CSS when chunk format is module

v5.91.0

Compare Source

Bug Fixes

• Deserializer for ignored modules doesn't crash
• Allow the unsafeCache option to be a proxy object
• Normalize the snapshot.unmanagedPaths option
• Fixed fs types
• Fixed resolve's plugins types
• Fixed wrongly calculate postOrderIndex
• Fixed watching types
• Output import attrbiutes/import assertions for external JS imports
• Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same
• [CSS] Output layer/supports/media for external CSS imports

New Features

• Allow to customize the stage of BannerPlugin
• [CSS] Support CSS exports convention
• [CSS] support CSS local ident name
• [CSS] Support __webpack_nonce__ for CSS chunks
• [CSS] Support fetchPriority for CSS chunks
• [CSS] Allow to use LZW to compress css head meta (enabled in the production mode by default)
• [CSS] Support prefetch/preload for CSS chunks

v5.90.3

Compare Source

Bug Fixes

• don't mangle when destructuring a reexport
• types for Stats.toJson() and Stats.toString()
• many internal types
• [CSS] clean up export css local vars

Perf

• simplify and optimize chunk graph creation

v5.90.2

Compare Source

Bug Fixes

• use Math.imul in fnv1a32 to avoid loss of precision, directly hash UTF16 values
• the setStatus() of the HMR module should not return an array, which may cause infinite recursion
• __webpack_exports_info__.xxx.canMangle shouldn't always same as default
• mangle export with destructuring
• use new runtime to reconsider skipped connections activeState
• make dynamic import optional in try/catch
• improve auto publicPath detection

Dependencies & Maintenance

• improve CI setup and include Node.js@21

v5.90.1

Compare Source

Bug Fixes

• set unmanagedPaths in defaults
• correct preOrderIndex and postOrderIndex
• add fallback for MIME mismatch error in async wasm loading
• browsers versions of ECMA features

Performance

• optimize compareStringsNumeric
• optimize numberHash using 32-bit FNV1a for small ranges, 64-bit for larger
• reuse VM context across webpack magic comments

v5.90.0

Compare Source

Bug Fixes

• Fixed inner graph for classes
• Optimized RemoveParentModulesPlugin via bigint arithmetic
• Fixed worklet detection in production mode
• Fixed an error for cyclic importModule
• Fixed types for Server and Dirent
• Added the fetchPriority to hmr runtime's ensureChunk function
• Don't warn about dynamic import for build dependencies
• External module generation respects the output.environment.arrowFunction option
• Fixed consumimng shared runtime module logic
• Fixed a runtime logic of multiple chunks
• Fixed destructing assignment of dynamic import json file
• Passing errors array for a module hash
• Added /*#__PURE__*/ to generated JSON.parse()
• Generated a library manifest after clean plugin
• Fixed non amd externals and amd library
• Fixed a bug in SideEffectsFlagPlugin with namespace re-exports
• Fixed an error message for condition or
• The strictModuleErrorHandling is now working
• Clean up child compilation chunk graph to avoid memory leak
• [CSS] - Fixed CSS import prefer relative resolution
• [CSS] - Fixed CSS runtime chunk loading error message

New Features

• Allow to set false for dev server in webpack.config.js
• Added a warning for async external when not supported
• Added a warning for async module when not supported
• Added the node-module option for the node.__filename/__dirname and enable it by default for ESM target
• Added the snapshot.unmanagedPaths option
• Exposed the MultiCompilerOptions type
• [CSS] - Added CSS parser options to enable/disable named exports
• [CSS] - Moved CSS the exportsOnly option to CSS generator options

Dependencies & Maintenance

• use node.js LTS version for lint
• bump actions/cache from 3 to 4
• bump prettier from 3.2.1 to 3.2.3
• bump assemblyscript
• bump actions/checkout from 3 to 4

Full Changelog: webpack/webpack@v5.89.0...v5.90.0

v5.89.0

Compare Source

New Features

• Make CommonJS import preserve chained expressions by @​bworline in https://github.com/webpack/webpack/pull/17718

Dependencies & Maintenance

• chore(deps-dev): bump @​types/node from 20.3.1 to 20.4.8 by @​dependabot in https://github.com/webpack/webpack/pull/17568
• docs: add example for stats detailed output by @​ersachin3112 in https://github.com/webpack/webpack/pull/17420
• docs: add example for stats normal output by @​ersachin3112 in https://github.com/webpack/webpack/pull/17426
• chore(deps-dev): bump core-js from 3.31.0 to 3.32.0 by @​dependabot in https://github.com/webpack/webpack/pull/17539
• chore(deps-dev): bump pretty-format from 29.5.0 to 29.6.2 by @​dependabot in https://github.com/webpack/webpack/pull/17536
• chore(deps-dev): bump @​types/node from 20.4.8 to 20.4.9 by @​dependabot in https://github.com/webpack/webpack/pull/17583
• chore(deps-dev): bump less from 4.1.3 to 4.2.0 by @​dependabot in https://github.com/webpack/webpack/pull/17580
• chore(deps): bump semver from 5.7.1 to 5.7.2 by @​dependabot in https://github.com/webpack/webpack/pull/17483
• chore(deps-dev): bump simple-git from 3.19.0 to 3.19.1 by @​dependabot in https://github.com/webpack/webpack/pull/17427
• chore(deps-dev): bump @​types/node from 20.4.9 to 20.6.0 by @​dependabot in https://github.com/webpack/webpack/pull/17666

Full Changelog: webpack/webpack@v5.88.2...v5.89.0

v5.88.2

Compare Source

Bug Fixes

• Fixed a bug where unused identifiers should retain names when using css modules by @​burhanuday in https://github.com/webpack/webpack/pull/17444

Full Changelog: webpack/webpack@v5.88.1...v5.88.2

v5.88.1

Compare Source

Developer Experience

• Significantly improve TypeScript coverage for Library Plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17414

Full Changelog: webpack/webpack@v5.88.0...v5.88.1

v5.88.0

Compare Source

New Features

• [CSS] - Use css/auto as the default css mode by @​burhanuday in https://github.com/webpack/webpack/pull/17399

Bug Fixes

• Fix bugs related to require.context and layer by @​alexander-akait in https://github.com/webpack/webpack/pull/17388
• Fix bug in runtime for CSS loading by @​alexander-akait in https://github.com/webpack/webpack/pull/17400
• Correct indirect call for tagged template expressions using correct this context by @​alexander-akait in https://github.com/webpack/webpack/pull/17397
• Update environment support for KaiOS browser by @​steverep in https://github.com/webpack/webpack/pull/17395
• Fix async module runtime code for running top-level-await by @​ahabhgk in https://github.com/webpack/webpack/pull/17393

Developer Experience

• Add example for stats minimal output by @​ersachin3112 in https://github.com/webpack/webpack/pull/17406
• Significantly improve type coverage for Dependency, Runtime, Template classes by @​alexander-akait in https://github.com/webpack/webpack/pull/17394

Dependencies & Maintenance

• Bump browserslist from 4.21.8 to 4.21.9 by @​dependabot in https://github.com/webpack/webpack/pull/17389
• Bump acorn from 8.8.2 to 8.9.0 by @​dependabot in https://github.com/webpack/webpack/pull/17402
• Bump eslint from 8.42.0 to 8.43.0 by @​dependabot in https://github.com/webpack/webpack/pull/17401
• Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by @​dependabot in https://github.com/webpack/webpack/pull/17407

New Contributors

• @​steverep made their first contribution in https://github.com/webpack/webpack/pull/17395

Full Changelog: webpack/webpack@v5.87.0...v5.88.0

v5.87.0

Compare Source

New Features

• Implement fetchPriority feature as parser option and magic comment by @​alexander-akait in https://github.com/webpack/webpack/pull/17249
• [CSS] - Introduce 'css/auto' as a css module type by @​ahabhgk in https://github.com/webpack/webpack/pull/16577
• [CSS] - Style-specific fields now automatically resolve in package.json by @​burhanuday in https://github.com/webpack/webpack/pull/17346
• webpack configuration API now accepts "falsy values" loaders and plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17339

Bug Fixes

• Fix codecov badge in readme by @​burhanuday in https://github.com/webpack/webpack/pull/17353

Developer Experience

• Add link to svelte loader for webpack by @​burhanuday in https://github.com/webpack/webpack/pull/17369
• Increase parser API types in internal plugins across dependency plugins @​alexander-akait in https://github.com/webpack/webpack/pull/17365

Dependencies & Maintenance

• Bump memfs from 3.5.2 to 3.5.3 by @​dependabot in https://github.com/webpack/webpack/pull/17347
• Bump webpack-cli from 5.1.3 to 5.1.4 by @​dependabot in https://github.com/webpack/webpack/pull/17349
• Bump es-module-lexer from 1.2.1 to 1.3.0 by @​dependabot in https://github.com/webpack/webpack/pull/17362
• Bump @​types/node from 20.2.5 to 20.3.0 by @​dependabot in https://github.com/webpack/webpack/pull/17361
• Bump core-js from 3.30.2 to 3.31.0 by @​dependabot in https://github.com/webpack/webpack/pull/17360
• Bump browserslist from 4.21.6 to 4.21.8 by @​dependabot in https://github.com/webpack/webpack/pull/17367
• Bump @​types/node from 20.3.0 to 20.3.1 by @​dependabot in https://github.com/webpack/webpack/pull/17366

New Contributors

@​aboktor made their first contribution in #​16991 #​16989
@​silverwind made their first contribution in #​17339 via #​17329

Full Changelog: webpack/webpack@v5.86.0...v5.87.0

v5.86.0

Compare Source

New Features

• Improved cache size performance via better handling of serialization for errors and bigints by @​alexander-akait in https://github.com/webpack/webpack/pull/17282
• Introduce an export default handler function option for ProgressPlugin by @​alexander-akait in https://github.com/webpack/webpack/pull/17312
• Support passing RegExp to splitChunks.chunks by @​hyf0 in https://github.com/webpack/webpack/pull/17332

Bug Fixes

• Fix layer capabilities for ContextModule types by @​huozhi in https://github.com/webpack/webpack/pull/17310
• Fix compatibility of __non_webpack_require__ with ES modules by @​alexander-akait in https://github.com/webpack/webpack/pull/17308
• Improve type coverage Chunk, ChunkGroup, and other plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/1731
• Do not add js extension for eval source maps when extension is not resolvable by @​alexander-akait in https://github.com/webpack/webpack/pull/17331

Developer Experience

• Improve type coverage for Json Module type and lazy load json-assertions package by @​alexander-akait in https://github.com/webpack/webpack/pull/17301

Dependencies & Maintenance

• Bump memfs from 3.5.1 to 3.5.2 by @​dependabot in https://github.com/webpack/webpack/pull/17315
• Bump webpack-cli from 5.1.1 to 5.1.3 by @​dependabot in https://github.com/webpack/webpack/pull/17314
• Bump eslint from 8.41.0 to 8.42.0 by @​dependabot in https://github.com/webpack/webpack/pull/17313

New Contributors

• @​huozhi made their first contribution in https://github.com/webpack/webpack/pull/17310
• @​hyf0 made their first contribution in https://github.com/webpack/webpack/pull/17332

Full Changelog: webpack/webpack@v5.85.1...v5.86.0

v5.85.1

Compare Source

Bug Fixes

• Fix bug in handling barrel imports (#​17305) by @​bworline in https://github.com/webpack/webpack/pull/17307 - NOTE: An internal API BasicEvaluatedExpression.getMemberRangeStarts has been changed to BasicEvaluatedExpression.getMemberRanges, please see type definition changes and the pull request for more information.

Dependencies & Maintenance

• Bump @​types/jest from 29.5.1 to 29.5.2 by @​dependabot in https://github.com/webpack/webpack/pull/17297

Full Changelog: webpack/webpack@v5.85.0...v5.85.1

v5.85.0

Compare Source

New Features

• Add readonly cache mode by @​vankop in https://github.com/webpack/webpack/pull/15470
• Normalize property accessors for esm namespaces and chained member/call expressions by @​bworline in https://github.com/webpack/webpack/pull/17203
• Support environment in loader context by @​alexander-akait in https://github.com/webpack/webpack/pull/17281
• Introduce a new syntax for addModule() support in worklets - *context.audioWorklet.addModule() by @​alexander-akait in https://github.com/webpack/webpack/pull/17212

Bug Fixes

• Fix type regression with unknown module type strings by @​alexander-akait in https://github.com/webpack/webpack/pull/17266

Developer Experience

• Use global runtime constants for webpack exports by @​burhanuday in https://github.com/webpack/webpack/pull/17270
• Add strict mode type coverage for WASM and Runtime code by @​alexander-akait in https://github.com/webpack/webpack/pull/17267
• Add strict mode type coverage for runtime modules and runtime plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17261
• Add types for JSON & Asset Modules including their interfacing plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17262
• Add type coverage for Module subclasses and plugins by @​alexander-akait in https://github.com/webpack/webpack/pull/17272

Dependencies & Maintenance

• Use GitHub Discussions instead of Gitter in issue templates by @​snitin315 in https://github.com/webpack/webpack/pull/17293
• Bump @​types/node from 20.2.3 to 20.2.4 by @​dependabot in https://github.com/webpack/webpack/pull/17269
• Bump browserslist from 4.21.5 to 4.21.6 by @​dependabot in https://github.com/webpack/webpack/pull/17275
• Bump @​types/node from 20.2.4 to 20.2.5 by @​dependabot in https://github.com/webpack/webpack/pull/17276
• Bump @​babel/core from 7.21.8 to 7.22.1 by @​dependabot in https://github.com/webpack/webpack/pull/17278

Full Changelog: webpack/webpack@v5.84.1...v5.85.0

v5.84.1

Compare Source

Bug Fixes

• Fix regression in inner graph for reserved identifiers by @​alexander-akait in https://github.com/webpack/webpack/pull/17265

Dependencies & Maintenance

• Bump @​types/jest from 29.5.0 to 29.5.1 by @​dependabot in https://github.com/webpack/webpack/pull/17027
• Bump simple-git from 3.18.0 to 3.19.0 by @​dependabot in https://github.com/webpack/webpack/pull/17263

Full Changelog: webpack/webpack@v5.84.0...v5.84.1

v5.84.0

Compare Source

New Features

• SourceMapDevToolPlugin now supports append option as a function by @​snitin315 in https://github.com/webpack/webpack/pull/17252

Bug Fixes

• Fix multiple bugs referencing class names when shadowed by import name in properties and methods by @​alexander-akait in https://github.com/webpack/webpack/pull/17233
• Allow DefinePlugin shorthand property by @​shamoilarsi in https://github.com/webpack/webpack/pull/17231
• [CSS] - Fix edge cases in parsing @import by @​alexander-akait in https://github.com/webpack/webpack/pull/17229

Developer Experience

• Increase type coverage for serialization classes by @​alexander-akait in https://github.com/webpack/webpack/pull/17243
• Increase type coverage for JavascriptParser and ModuleDependency subclasses by @​alexander-akait in https://github.com/webpack/webpack/pull/17236
• Increase type coverage to strict-mode quality for Configuration/Normalization objects by @​alexander-akait in https://github.com/webpack/webpack/pull/17247
• Refactor duplicate strings by replacing them with constant for webpack_require instead of string literal by @​burhanuday in https://github.com/webpack/webpack/pull/17228
• Add test case for with { type: "json" } by @​alexander-akait in https://github.com/webpack/webpack/pull/17230
• Add test case for destructuring by @​alexander-akait in https://github.com/webpack/webpack/pull/17248

Dependencies & Maintenance

• Add GitHub discussions badge in README by @​snitin315 in https://github.com/webpack/webpack/pull/17251
• Bump enhanced-resolve to 5.14.1 by @​TheLarkInn in https://github.com/webpack/webpack/pull/17257
• Bump @​types/node from 20.1.7 to 20.2.0 by @​dependabot in https://github.com/webpack/webpack/pull/17219
• Bump @​types/node from 20.2.0 to 20.2.1 by @​dependabot in https://github.com/webpack/webpack/pull/17226
• Bump webpack-cli from 5.1.0 to 5.1.1 by @​dependabot in https://github.com/webpack/webpack/pull/17164
• Bump eslint from 8.39.0 to 8.40.0 by @​dependabot in https://github.com/webpack/webpack/pull/17148
• Bump @​babel/core from 7.21.4 to 7.21.8 by @​dependabot in https://github.com/webpack/webpack/pull/17126
• Bump @​types/node from 20.2.1 to 20.2.3 by @​dependabot in https://github.com/webpack/webpack/pull/17238
• Bump eslint from 8.40.0 to 8.41.0 by @​dependabot in https://github.com/webpack/webpack/pull/17237

New Contributors

• @​shamoilarsi made their first contribution in https://github.com/webpack/webpack/pull/17231

Full Changelog: webpack/webpack@v5.83.1...v5.84.0

---

• If you want to rebase/retry this PR, check this box