[PR #46] [MERGED] fix(deps): bump webpack from 4.46.0 to 5.75.0 in /web #106

New issue

Closed

opened 2026-03-03 16:36:46 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:36:46 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/NdoleStudio/httpsms/pull/46
Author: @dependabot[bot]
Created: 1/3/2023
Status: ✅ Merged
Merged: 1/3/2023
Merged by: @AchoArnold

Base: main ← Head: dependabot/npm_and_yarn/web/webpack-5.75.0

📝 Commits (1)

6058554 fix(deps): bump webpack from 4.46.0 to 5.75.0 in /web

📊 Changes

3 files changed (+2723 additions, -1673 deletions)

View changed files

📝 web/package-lock.json (+2417 -1644)
📝 web/package.json (+1 -1)
📝 web/yarn.lock (+305 -28)

📄 Description

Bumps webpack from 4.46.0 to 5.75.0.

Release notes

Sourced from webpack's releases.

v5.75.0

Bugfixes

experiments.* normalize to false when opt-out

avoid NaN%

show the correct error when using a conflicting chunk name in code

HMR code tests existance of window before trying to access it

fix eval-nosources-* actually exclude sources

fix race condition where no module is returned from processing module

fix position of standalong semicolon in runtime code

Features

add support for @import to extenal CSS when using experimental CSS in node

add i64 support to the deprecated WASM implementation

Developer Experience

expose EnableWasmLoadingPlugin

add more typings

generate getters instead of readonly properties in typings to allow overriding them

v5.74.0

Features

add resolve.extensionAlias option which allows to alias extensions

This is useful when you are forced to add the .js extension to imports when the file really has a .ts extension (typescript + "type": "module")

add support for ES2022 features like static blocks

add Tree Shaking support for ProvidePlugin

Bugfixes

fix persistent cache when some build dependencies are on a different windows drive

make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules

remove left-over from debugging in TLA/async modules runtime code

remove unneeded extra 1s timestamp offset during watching when files are actually untouched

This sometimes caused an additional second build which are not really needed

fix shareScope option for ModuleFederationPlugin

set "use-credentials" also for same origin scripts

Performance

Improve memory usage and performance of aggregating needed files/directories for watching

This affects rebuild performance

Extensibility

export HarmonyImportDependency for plugins

v5.73.0

... (truncated)

Commits

8241da7 5.75.0
a91d923 Merge pull request #16458 from webpack/bugfix/semi
4608b11 Merge pull request #16457 from webpack/tooling/update
dfdd0b0 Merge pull request #16122 from AnmolBansalDEV/bug/compilationCallback
23b9a1c Merge pull request #16167 from exposir/fixts
6f2c5e8 Merge pull request #16257 from alexzhang1030/calc_deterministic_verbose
f7f36ad Merge pull request #16339 from Liamolucko/wasm-i64
761a542 fix semicolon position
2403a36 Merge pull request #16345 from ahabhgk/fix-eval-nosources
c18203c update tooling
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/NdoleStudio/httpsms/pull/46 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 1/3/2023 **Status:** ✅ Merged **Merged:** 1/3/2023 **Merged by:** [@AchoArnold](https://github.com/AchoArnold) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/web/webpack-5.75.0` --- ### 📝 Commits (1) - [`6058554`](https://github.com/NdoleStudio/httpsms/commit/6058554f47e509e2d5709ea25137331e8fb2f6db) fix(deps): bump webpack from 4.46.0 to 5.75.0 in /web ### 📊 Changes **3 files changed** (+2723 additions, -1673 deletions) <details> <summary>View changed files</summary> 📝 `web/package-lock.json` (+2417 -1644) 📝 `web/package.json` (+1 -1) 📝 `web/yarn.lock` (+305 -28) </details> ### 📄 Description Bumps [webpack](https://github.com/webpack/webpack) from 4.46.0 to 5.75.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p> <blockquote> <h2>v5.75.0</h2> <h1>Bugfixes</h1> <ul> <li><code>experiments.*</code> normalize to <code>false</code> when opt-out</li> <li>avoid <code>NaN%</code></li> <li>show the correct error when using a conflicting chunk name in code</li> <li>HMR code tests existance of <code>window</code> before trying to access it</li> <li>fix <code>eval-nosources-*</code> actually exclude sources</li> <li>fix race condition where no module is returned from processing module</li> <li>fix position of standalong semicolon in runtime code</li> </ul> <h1>Features</h1> <ul> <li>add support for <code>@import</code> to extenal CSS when using experimental CSS in node</li> <li>add <code>i64</code> support to the deprecated WASM implementation</li> </ul> <h1>Developer Experience</h1> <ul> <li>expose <code>EnableWasmLoadingPlugin</code></li> <li>add more typings</li> <li>generate getters instead of readonly properties in typings to allow overriding them</li> </ul> <h2>v5.74.0</h2> <h1>Features</h1> <ul> <li>add <code>resolve.extensionAlias</code> option which allows to alias extensions <ul> <li>This is useful when you are forced to add the <code>.js</code> extension to imports when the file really has a <code>.ts</code> extension (typescript + <code>"type": "module"</code>)</li> </ul> </li> <li>add support for ES2022 features like static blocks</li> <li>add Tree Shaking support for <code>ProvidePlugin</code></li> </ul> <h1>Bugfixes</h1> <ul> <li>fix persistent cache when some build dependencies are on a different windows drive</li> <li>make order of evaluation of side-effect-free modules deterministic between concatenated and non-concatenated modules</li> <li>remove left-over from debugging in TLA/async modules runtime code</li> <li>remove unneeded extra 1s timestamp offset during watching when files are actually untouched <ul> <li>This sometimes caused an additional second build which are not really needed</li> </ul> </li> <li>fix <code>shareScope</code> option for <code>ModuleFederationPlugin</code></li> <li>set <code>"use-credentials"</code> also for same origin scripts</li> </ul> <h1>Performance</h1> <ul> <li>Improve memory usage and performance of aggregating needed files/directories for watching <ul> <li>This affects rebuild performance</li> </ul> </li> </ul> <h1>Extensibility</h1> <ul> <li>export <code>HarmonyImportDependency</code> for plugins</li> </ul> <h2>v5.73.0</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack/commit/8241da7f1e75c5581ba535d127fa66aeb9eb2ac8"><code>8241da7</code></a> 5.75.0</li> <li><a href="https://github.com/webpack/webpack/commit/a91d9232ea87eedbe9077366395748f156730a2d"><code>a91d923</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16458">#16458</a> from webpack/bugfix/semi</li> <li><a href="https://github.com/webpack/webpack/commit/4608b114168f25eef4cfe9a27645cec40e7a68b5"><code>4608b11</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16457">#16457</a> from webpack/tooling/update</li> <li><a href="https://github.com/webpack/webpack/commit/dfdd0b0e42a479f60c1f84ced2fc4e3bdb2b2456"><code>dfdd0b0</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16122">#16122</a> from AnmolBansalDEV/bug/compilationCallback</li> <li><a href="https://github.com/webpack/webpack/commit/23b9a1c01ff5bb4570aece5a99d703aa564a8f3a"><code>23b9a1c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16167">#16167</a> from exposir/fixts</li> <li><a href="https://github.com/webpack/webpack/commit/6f2c5e852a502a049ed8e37cfdc428305573b6b1"><code>6f2c5e8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16257">#16257</a> from alexzhang1030/calc_deterministic_verbose</li> <li><a href="https://github.com/webpack/webpack/commit/f7f36ad412760c29cf727a4e952eeeba23570d36"><code>f7f36ad</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16339">#16339</a> from Liamolucko/wasm-i64</li> <li><a href="https://github.com/webpack/webpack/commit/761a54285e7b4e24727e7bb17e9291e264fe5351"><code>761a542</code></a> fix semicolon position</li> <li><a href="https://github.com/webpack/webpack/commit/2403a36326248f7f515959a479baa257288bef4d"><code>2403a36</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/16345">#16345</a> from ahabhgk/fix-eval-nosources</li> <li><a href="https://github.com/webpack/webpack/commit/c18203c89447cd6728aa1f9d77b03aff7ae6e03f"><code>c18203c</code></a> update tooling</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v4.46.0...v5.75.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=4.46.0&new-version=5.75.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>