Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade webpack from 5.90.1 to 5.90.2 #14395

Merged
merged 1 commit into from
Mar 8, 2024

Conversation

snipe
Copy link
Owner

@snipe snipe commented Mar 8, 2024

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade webpack from 5.90.1 to 5.90.2.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.
  • The recommended version was released 22 days ago, on 2024-02-15.
Release notes
Package name: webpack
  • 5.90.2 - 2024-02-15

    Bug Fixes

    • use Math.imul in fnv1a32 to avoid loss of precision, directly hash UTF16 values
    • the setStatus() of the HMR module should not return an array, which may cause infinite recursion
    • __webpack_exports_info__.xxx.canMangle shouldn't always same as default
    • mangle export with destructuring
    • use new runtime to reconsider skipped connections activeState
    • make dynamic import optional in try/catch
    • improve auto publicPath detection

    Dependencies & Maintenance

    • improve CI setup and include Node.js@21
  • 5.90.1 - 2024-02-01

    Bug Fixes

    • set unmanagedPaths in defaults
    • correct preOrderIndex and postOrderIndex
    • add fallback for MIME mismatch error in async wasm loading
    • browsers versions of ECMA features

    Performance

    • optimize compareStringsNumeric
    • optimize numberHash using 32-bit FNV1a for small ranges, 64-bit for larger
    • reuse VM context across webpack magic comments
from webpack GitHub release notes
Commit messages
Package name: webpack
  • 11c1be3 chore(release): 5.90.2
  • c73afa4 fix: improve auto publicPath detection
  • 856c8d2 test: update
  • 858cb35 test: update
  • 55ebdbd fix: improve auto publicPath detection
  • 1a6ac87 ci: update
  • 535cc98 ci: update azure
  • 5dd5317 ci: update
  • 451286b chore(deps): update
  • 9c75a74 ci: update
  • bd13845 ci: update
  • 9767162 test: case for issue-17459
  • 60f632b test: use production
  • 582a4d3 test: case for issue-17459
  • a793ed8 fix: make dynamic import optional in try/catch
  • f06427a fix: make dynamic import optional in try/catch
  • a2ce375 fix: use new runtime to reconsider skipped connections activeState
  • 1673ee5 update snapshot
  • 6d104b8 add test
  • e094bf3 fix: should use new runtime to reconsider skipped connections
  • 2a063f8 fix: mangle export with destructuring
  • 69127ae add test
  • 213290e fix: not mangle export with destructuring
  • 51f0f0a fix: __webpack_exports_info__.xxx.canMangle shouldn't always same as default

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

@probot-autolabeler probot-autolabeler bot added dependencies Pull requests that update a dependency file javascript labels Mar 8, 2024
Copy link

what-the-diff bot commented Mar 8, 2024

PR Summary

  • Upgrade of Webpack Version
    The version of a key software building tool, webpack, was upgraded in our project. This newer version offers greater stability and potentially new features, enhancing the overall performance of our application.

@snipe snipe merged commit bda6fdf into master Mar 8, 2024
10 of 11 checks passed
@snipe snipe deleted the snyk-upgrade-9e465161f7c9fd096a214ca3ad2fae7b branch March 8, 2024 08:44
snipe added a commit that referenced this pull request Mar 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file javascript
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants