[PR #1894] [MERGED] Bump webpack from 5.103.0 to 5.104.0 #3627

New issue

Closed

opened 2026-03-07 20:14:41 +03:00 by kerem · 0 comments

kerem commented

2026-03-07 20:14:41 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/DavidAnson/markdownlint/pull/1894
Author: @dependabot[bot]
Created: 12/17/2025
Status: ✅ Merged
Merged: 12/17/2025
Merged by: @DavidAnson

Base: next ← Head: dependabot/npm_and_yarn/next/webpack-5.104.0

📝 Commits (1)

d084fe6 Bump webpack from 5.103.0 to 5.104.0

📊 Changes

1 file changed (+1 additions, -1 deletions)

View changed files

📝 package.json (+1 -1)

📄 Description

Bumps webpack from 5.103.0 to 5.104.0.

Release notes

Sourced from webpack's releases.

v5.104.0

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.

d3dd841: Enhance import.meta.env to support object access.

4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.

04cd530: Handle more at-rules for CSS modules.

cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.

d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.

5983843: Provide a stable runtime function variable __webpack_global__.

d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.

50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.

d3dd841: Support universal lazy compilation.

d3dd841: Fixed module library export definitions when multiple runtimes.

d3dd841: Fixed CSS nesting and CSS custom properties parsing.

d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.

aab1da9: Fixed bugs for css/global type.

d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.

d3dd841: Handle nested __webpack_require__.

728ddb7: The speed of identifier parsing has been improved.

0f8b31b: Improve types.

d3dd841: Don't corrupt debugId injection when hidden-source-map is used.

2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.

d3dd841: Serialize HookWebpackError.

d3dd841: Added ability to use built-in properties in dotenv and define plugin.

3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.

d3dd841: Reduce collision for local indent name in CSS.

d3dd841: Remove CSS link tags when CSS imports are removed.

Changelog

Sourced from webpack's changelog.

5.104.0

Minor Changes

d3dd841: Use method shorthand to render module content in __webpack_modules__ object.

d3dd841: Enhance import.meta.env to support object access.

4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.

04cd530: Handle more at-rules for CSS modules.

cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.

d3dd841: Added base64url, base62, base58, base52, base49, base36, base32 and base25 digests.

5983843: Provide a stable runtime function variable __webpack_global__.

d3dd841: Improved localIdentName hashing for CSS.

Patch Changes

22c48fb: Added module existence check for informative error message in development mode.

50689e1: Use the fully qualified class name (or export name) for [fullhash] placeholder in CSS modules.

d3dd841: Support universal lazy compilation.

d3dd841: Fixed module library export definitions when multiple runtimes.

d3dd841: Fixed CSS nesting and CSS custom properties parsing.

d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.

aab1da9: Fixed bugs for css/global type.

d3dd841: Compatibility import.meta.filename and import.meta.dirname with eval devtools.

d3dd841: Handle nested __webpack_require__.

728ddb7: The speed of identifier parsing has been improved.

0f8b31b: Improve types.

d3dd841: Don't corrupt debugId injection when hidden-source-map is used.

2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.

d3dd841: Serialize HookWebpackError.

d3dd841: Added ability to use built-in properties in dotenv and define plugin.

3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.

d3dd841: Reduce collision for local indent name in CSS.

d3dd841: Remove CSS link tags when CSS imports are removed.

Commits

505a5e7 chore(release): new release (#20188)
0c06680 refactor: update eslint configuration
2eb0d6a ci: release announcement (#20238)
b2b2459 ci: cancel in progress (#20239)
918a2cb chore(deps): update (#20237)
cafae23 feat: added options to control renaming of identifiers in CSS modules
e8dca82 chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (#20236)
2179fdb fix(security): re-validate HttpUriPlugin redirects against allowedUris; enfor...
512a32f docs: update examples (#20233)
3c4319f fix: optimize regex character class with ranges for runtime code
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/DavidAnson/markdownlint/pull/1894 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 12/17/2025 **Status:** ✅ Merged **Merged:** 12/17/2025 **Merged by:** [@DavidAnson](https://github.com/DavidAnson) **Base:** `next` ← **Head:** `dependabot/npm_and_yarn/next/webpack-5.104.0` --- ### 📝 Commits (1) - [`d084fe6`](https://github.com/DavidAnson/markdownlint/commit/d084fe69cf4d08d2ba3ec24938f9946c02926bd1) Bump webpack from 5.103.0 to 5.104.0 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `package.json` (+1 -1) </details> ### 📄 Description Bumps [webpack](https://github.com/webpack/webpack) from 5.103.0 to 5.104.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p> <blockquote> <h2>v5.104.0</h2> <h2>5.104.0</h2> <h3>Minor Changes</h3> <ul> <li>d3dd841: Use method shorthand to render module content in <code>__webpack_modules__</code> object.</li> <li>d3dd841: Enhance <code>import.meta.env</code> to support object access.</li> <li>4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.</li> <li>04cd530: Handle more at-rules for CSS modules.</li> <li>cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.</li> <li>d3dd841: Added <code>base64url</code>, <code>base62</code>, <code>base58</code>, <code>base52</code>, <code>base49</code>, <code>base36</code>, <code>base32</code> and <code>base25</code> digests.</li> <li>5983843: Provide a stable runtime function variable <code>__webpack_global__</code>.</li> <li>d3dd841: Improved <code>localIdentName</code> hashing for CSS.</li> </ul> <h3>Patch Changes</h3> <ul> <li>22c48fb: Added module existence check for informative error message in development mode.</li> <li>50689e1: Use the fully qualified class name (or export name) for <code>[fullhash]</code> placeholder in CSS modules.</li> <li>d3dd841: Support universal lazy compilation.</li> <li>d3dd841: Fixed module library export definitions when multiple runtimes.</li> <li>d3dd841: Fixed CSS nesting and CSS custom properties parsing.</li> <li>d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.</li> <li>aab1da9: Fixed bugs for <code>css/global</code> type.</li> <li>d3dd841: Compatibility <code>import.meta.filename</code> and <code>import.meta.dirname</code> with <code>eval</code> devtools.</li> <li>d3dd841: Handle nested <code>__webpack_require__</code>.</li> <li>728ddb7: The speed of identifier parsing has been improved.</li> <li>0f8b31b: Improve types.</li> <li>d3dd841: Don't corrupt <code>debugId</code> injection when <code>hidden-source-map</code> is used.</li> <li>2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.</li> <li>d3dd841: Serialize <code>HookWebpackError</code>.</li> <li>d3dd841: Added ability to use built-in properties in dotenv and define plugin.</li> <li>3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.</li> <li>d3dd841: Reduce collision for local indent name in CSS.</li> <li>d3dd841: Remove CSS link tags when CSS imports are removed.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md">webpack's changelog</a>.</em></p> <blockquote> <h2>5.104.0</h2> <h3>Minor Changes</h3> <ul> <li>d3dd841: Use method shorthand to render module content in <code>__webpack_modules__</code> object.</li> <li>d3dd841: Enhance <code>import.meta.env</code> to support object access.</li> <li>4baab4e: Optimize dependency sorting in updateParent: sort each module only once by deferring to finishUpdateParent(), and reduce traversal count in sortWithSourceOrder by caching WeakMap values upfront.</li> <li>04cd530: Handle more at-rules for CSS modules.</li> <li>cafae23: Added options to control the renaming of at-rules and various identifiers in CSS modules.</li> <li>d3dd841: Added <code>base64url</code>, <code>base62</code>, <code>base58</code>, <code>base52</code>, <code>base49</code>, <code>base36</code>, <code>base32</code> and <code>base25</code> digests.</li> <li>5983843: Provide a stable runtime function variable <code>__webpack_global__</code>.</li> <li>d3dd841: Improved <code>localIdentName</code> hashing for CSS.</li> </ul> <h3>Patch Changes</h3> <ul> <li>22c48fb: Added module existence check for informative error message in development mode.</li> <li>50689e1: Use the fully qualified class name (or export name) for <code>[fullhash]</code> placeholder in CSS modules.</li> <li>d3dd841: Support universal lazy compilation.</li> <li>d3dd841: Fixed module library export definitions when multiple runtimes.</li> <li>d3dd841: Fixed CSS nesting and CSS custom properties parsing.</li> <li>d3dd841: Don't write fragment from URL to filename and apply fragment to module URL.</li> <li>aab1da9: Fixed bugs for <code>css/global</code> type.</li> <li>d3dd841: Compatibility <code>import.meta.filename</code> and <code>import.meta.dirname</code> with <code>eval</code> devtools.</li> <li>d3dd841: Handle nested <code>__webpack_require__</code>.</li> <li>728ddb7: The speed of identifier parsing has been improved.</li> <li>0f8b31b: Improve types.</li> <li>d3dd841: Don't corrupt <code>debugId</code> injection when <code>hidden-source-map</code> is used.</li> <li>2179fdb: Re-validate HttpUriPlugin redirects against allowedUris, restrict to http(s) and add a conservative redirect limit to prevent SSRF and untrusted content inclusion. Redirects failing policy are rejected before caching/lockfile writes.</li> <li>d3dd841: Serialize <code>HookWebpackError</code>.</li> <li>d3dd841: Added ability to use built-in properties in dotenv and define plugin.</li> <li>3c4319f: Optimizing the regular expression character class by specifying ranges for runtime code.</li> <li>d3dd841: Reduce collision for local indent name in CSS.</li> <li>d3dd841: Remove CSS link tags when CSS imports are removed.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack/commit/505a5e744fbcf4471ddb534bf1d4aebea9643c1b"><code>505a5e7</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack/issues/20188">#20188</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/0c066808d59e4f9406e11bab4ffa2e0feacbd0e2"><code>0c06680</code></a> refactor: update eslint configuration</li> <li><a href="https://github.com/webpack/webpack/commit/2eb0d6a410513960bd7d65bf15baf15704a612eb"><code>2eb0d6a</code></a> ci: release announcement (<a href="https://redirect.github.com/webpack/webpack/issues/20238">#20238</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/b2b24590a08755b706d2009ca97a226addf9e83b"><code>b2b2459</code></a> ci: cancel in progress (<a href="https://redirect.github.com/webpack/webpack/issues/20239">#20239</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/918a2cb057ee193e8e8e93ca4935b1493ae243ab"><code>918a2cb</code></a> chore(deps): update (<a href="https://redirect.github.com/webpack/webpack/issues/20237">#20237</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/cafae2379c3af9e22e69dd309d7a36c57fe54c09"><code>cafae23</code></a> feat: added options to control renaming of identifiers in CSS modules</li> <li><a href="https://github.com/webpack/webpack/commit/e8dca82532e95d293af655362acdf1852e214c1a"><code>e8dca82</code></a> chore(deps): bump actions/cache from 5.0.0 to 5.0.1 (<a href="https://redirect.github.com/webpack/webpack/issues/20236">#20236</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/2179fdbcb34fba57acc51377a5ff6ddecc97ac7f"><code>2179fdb</code></a> fix(security): re-validate HttpUriPlugin redirects against allowedUris; enfor...</li> <li><a href="https://github.com/webpack/webpack/commit/512a32f8727875563fa3fb060625502d8c52c59b"><code>512a32f</code></a> docs: update examples (<a href="https://redirect.github.com/webpack/webpack/issues/20233">#20233</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/3c4319f30f573d68ef2e63826b4abcb6114886df"><code>3c4319f</code></a> fix: optimize regex character class with ranges for runtime code</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.103.0...v5.104.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.103.0&new-version=5.104.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>