[Snyk] Upgrade webpack from 5.36.1 to 5.39.0

[snyk-bot]

Snyk has created this PR to upgrade webpack from 5.36.1 to 5.39.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 6 versions ahead of your current version.
• The recommended version was released 21 days ago, on 2021-06-14.

Release notes

Package name: webpack

• 5.39.0 - 2021-06-14
  

  Features

  • allow lazy compilation for import() context (import with expression)

  Bugfixes

  • fix respecting cache.allowCollectingMemory
  • fix cli loading after installing it
  • fix initial list of non-js chunks that are flagged as already loaded

  Performance

  • remove unnecessary Error.captureStackTrace from webpack errors
• 5.38.1 - 2021-05-27
  

  Performance

  • fix missing increment in sorting optimization from last release
• 5.38.0 - 2021-05-27
  

  Features

  • new URL("data:...", import.meta.url) is now supported
  • add module.rules[].scheme as condition to match the request scheme (like data, http, etc.)

  Bugfixes

  • fix tracking of changes and removals during watching in some edge cases
  • fix incorrect renaming of class fields in concatenatenated modules
  • fix crash in HMR when removing runtimes from the compilation

  Performance

  • lazy import some internal modules only when used
  • allow unsafe caching of the entrypoint
  • improve performance of sorting exports info map
  • update to latest webpack-sources for improved source map performance
• 5.37.1 - 2021-05-19
  

  Bugfixes

  • When using multiple configurations in watch mode and calling Watching.invalidate, dependencies and parallelism of the config array is now respected correctly
  • Fix a crash when accessing the stats after the next compilation has started
  • fix collecting changes when using Watching.suspend
  • fix schema of RuleCondition.not and allow passing a condition directly instead of only an array

  Developer Experience

  • typings accept a ReadonlyArray of configurations now

  Contributing

  • fix coverage reporting for child processes
  • remove outdated loader from readme
• 5.37.0 - 2021-05-10
  

  Features

  • add output.trustedTypes

  Bugfixes

  • fix inclusion of too many chunk in the filename function when using dependOn
  • allow errors to be null in fs callbacks

  Developer Experiences

  • make ESM tracking info message less verbose
  • add typings for loaders
• 5.36.2 - 2021-04-30
  

  Bugfixes

  • correctly handle errors thrown during parser/generator creation
    • e. g. validation errors for asset module options
  • use a better automatic runtime name for workers
    • not too long to cause filename problems
  • no longer assume assets do not get removed when the compiler is running
    • Using output.clean is against this assumption
    • It fixes a bug where assets are missing, when removed and readded to the compilation
  • fix a problem when chained dependOn, which causes too many modules being included in entrypoints
• 5.36.1 - 2021-04-28
  

  Performance

  • add cache.profile (type: "filesystem" only) flag for more info about (de)serialization timings
  • avoid complex "by exports" splitting for splitChunks in development mode
  • faster hashing for the common case
  • improve algorithmic complexity for merging InitFragments to solve performance in an edge case

from webpack GitHub release notes

Commit messages

Package name: webpack

• e9f9045 5.39.0
• ae4bd73 Merge pull request #13567 from webpack/bugfix/initial-chunk-ids-with-depend-on
• e282a6c add test case
• 9a7cf9a getAllInitialChunks really returns all of them
• ac97a27 Merge pull request #13533 from markjm/markjm/errors
• 6a4cb8e Merge pull request #13546 from webpack/dependabot/npm_and_yarn/trim-newlines-3.0.1
• 7567874 chore(deps): bump trim-newlines from 3.0.0 to 3.0.1
• ff1b314 Merge pull request #13529 from webpack/fix-npx-usage
• 87e03a7 Merge pull request #13490 from markjm/markjm/collect-mem
• 8203154 fix: usage `npx webpack`
• ecf8728 perf: Remove Error.captureStackTrace from all WebpackErrors
• 74d5172 Respect allowCollectingMemory setting (being normalized away right now)
• 5dd661c Merge pull request #13475 from webpack/dependabot/npm_and_yarn/core-js-3.13.1
• 1736808 Merge pull request #13478 from bebraw/feat/support-lazy-compilation-in-lazy-context
• 3097917 avoid writing the fixtures/bundle.js
• 00db303 remove bundle.js file
• 23c4907 fix bug in ContextModule, improve test case for lazy compilation
• 00bacbe chore: Add a todo
• fe9d250 chore: Add a new fixture
• 9d01479 chore: Update types
• a58b443 chore: Add initial test
• 189a886 chore: Allow passing a typePrefix to ContextElementDependency
• de3563a chore(deps-dev): bump core-js from 3.12.1 to 3.13.1
• 487665c 5.38.1

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs