Commit 7440037
authored
chore: bump webpack from 5.103.0 to 5.104.1 (#363)
Bumps [webpack](https://github.com/webpack/webpack) from 5.103.0 to
5.104.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/releases">webpack's
releases</a>.</em></p>
<blockquote>
<h2>v5.104.1</h2>
<h2>5.104.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>2efd21b: Reexports runtime calculation should not accessing
<strong>WEBPACK_IMPORT_KEY</strong> decl with var.</li>
<li>c510070: Fixed a user information bypass vulnerability in the
HttpUriPlugin plugin.</li>
</ul>
<h2>v5.104.0</h2>
<h2>5.104.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>d3dd841: Use method shorthand to render module content in
<code>__webpack_modules__</code> object.</li>
<li>d3dd841: Enhance <code>import.meta.env</code> to support object
access.</li>
<li>4baab4e: Optimize dependency sorting in updateParent: sort each
module only once by deferring to finishUpdateParent(), and reduce
traversal count in sortWithSourceOrder by caching WeakMap values
upfront.</li>
<li>04cd530: Handle more at-rules for CSS modules.</li>
<li>cafae23: Added options to control the renaming of at-rules and
various identifiers in CSS modules.</li>
<li>d3dd841: Added <code>base64url</code>, <code>base62</code>,
<code>base58</code>, <code>base52</code>, <code>base49</code>,
<code>base36</code>, <code>base32</code> and <code>base25</code>
digests.</li>
<li>5983843: Provide a stable runtime function variable
<code>__webpack_global__</code>.</li>
<li>d3dd841: Improved <code>localIdentName</code> hashing for CSS.</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>22c48fb: Added module existence check for informative error message
in development mode.</li>
<li>50689e1: Use the fully qualified class name (or export name) for
<code>[fullhash]</code> placeholder in CSS modules.</li>
<li>d3dd841: Support universal lazy compilation.</li>
<li>d3dd841: Fixed module library export definitions when multiple
runtimes.</li>
<li>d3dd841: Fixed CSS nesting and CSS custom properties parsing.</li>
<li>d3dd841: Don't write fragment from URL to filename and apply
fragment to module URL.</li>
<li>aab1da9: Fixed bugs for <code>css/global</code> type.</li>
<li>d3dd841: Compatibility <code>import.meta.filename</code> and
<code>import.meta.dirname</code> with <code>eval</code> devtools.</li>
<li>d3dd841: Handle nested <code>__webpack_require__</code>.</li>
<li>728ddb7: The speed of identifier parsing has been improved.</li>
<li>0f8b31b: Improve types.</li>
<li>d3dd841: Don't corrupt <code>debugId</code> injection when
<code>hidden-source-map</code> is used.</li>
<li>2179fdb: Re-validate HttpUriPlugin redirects against allowedUris,
restrict to http(s) and add a conservative redirect limit to prevent
SSRF and untrusted content inclusion. Redirects failing policy are
rejected before caching/lockfile writes.</li>
<li>d3dd841: Serialize <code>HookWebpackError</code>.</li>
<li>d3dd841: Added ability to use built-in properties in dotenv and
define plugin.</li>
<li>3c4319f: Optimizing the regular expression character class by
specifying ranges for runtime code.</li>
<li>d3dd841: Reduce collision for local indent name in CSS.</li>
<li>d3dd841: Remove CSS link tags when CSS imports are removed.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md">webpack's
changelog</a>.</em></p>
<blockquote>
<h2>5.104.1</h2>
<h3>Patch Changes</h3>
<ul>
<li>2efd21b: Reexports runtime calculation should not accessing
<strong>WEBPACK_IMPORT_KEY</strong> decl with var.</li>
<li>c510070: Fixed a user information bypass vulnerability in the
HttpUriPlugin plugin.</li>
</ul>
<h2>5.104.0</h2>
<h3>Minor Changes</h3>
<ul>
<li>d3dd841: Use method shorthand to render module content in
<code>__webpack_modules__</code> object.</li>
<li>d3dd841: Enhance <code>import.meta.env</code> to support object
access.</li>
<li>4baab4e: Optimize dependency sorting in updateParent: sort each
module only once by deferring to finishUpdateParent(), and reduce
traversal count in sortWithSourceOrder by caching WeakMap values
upfront.</li>
<li>04cd530: Handle more at-rules for CSS modules.</li>
<li>cafae23: Added options to control the renaming of at-rules and
various identifiers in CSS modules.</li>
<li>d3dd841: Added <code>base64url</code>, <code>base62</code>,
<code>base58</code>, <code>base52</code>, <code>base49</code>,
<code>base36</code>, <code>base32</code> and <code>base25</code>
digests.</li>
<li>5983843: Provide a stable runtime function variable
<code>__webpack_global__</code>.</li>
<li>d3dd841: Improved <code>localIdentName</code> hashing for CSS.</li>
</ul>
<h3>Patch Changes</h3>
<ul>
<li>22c48fb: Added module existence check for informative error message
in development mode.</li>
<li>50689e1: Use the fully qualified class name (or export name) for
<code>[fullhash]</code> placeholder in CSS modules.</li>
<li>d3dd841: Support universal lazy compilation.</li>
<li>d3dd841: Fixed module library export definitions when multiple
runtimes.</li>
<li>d3dd841: Fixed CSS nesting and CSS custom properties parsing.</li>
<li>d3dd841: Don't write fragment from URL to filename and apply
fragment to module URL.</li>
<li>aab1da9: Fixed bugs for <code>css/global</code> type.</li>
<li>d3dd841: Compatibility <code>import.meta.filename</code> and
<code>import.meta.dirname</code> with <code>eval</code> devtools.</li>
<li>d3dd841: Handle nested <code>__webpack_require__</code>.</li>
<li>728ddb7: The speed of identifier parsing has been improved.</li>
<li>0f8b31b: Improve types.</li>
<li>d3dd841: Don't corrupt <code>debugId</code> injection when
<code>hidden-source-map</code> is used.</li>
<li>2179fdb: Re-validate HttpUriPlugin redirects against allowedUris,
restrict to http(s) and add a conservative redirect limit to prevent
SSRF and untrusted content inclusion. Redirects failing policy are
rejected before caching/lockfile writes.</li>
<li>d3dd841: Serialize <code>HookWebpackError</code>.</li>
<li>d3dd841: Added ability to use built-in properties in dotenv and
define plugin.</li>
<li>3c4319f: Optimizing the regular expression character class by
specifying ranges for runtime code.</li>
<li>d3dd841: Reduce collision for local indent name in CSS.</li>
<li>d3dd841: Remove CSS link tags when CSS imports are removed.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/webpack/webpack/commit/24e3c2d2c9f8c6d60810302b2ea70ed86e2863dc"><code>24e3c2d</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack/issues/20253">#20253</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/2efd21b0b06baa9b1a7f009b336379dcef24c1a5"><code>2efd21b</code></a>
fix(re-exports): reexports runtime calculation should not accessing
`__WEBPAC...</li>
<li><a
href="https://github.com/webpack/webpack/commit/c5100702335a9cdcb75558ccd80def2329bd4abf"><code>c510070</code></a>
fix(security): userinfo bypass vulnerability in HttpUriPlugin
allowedUris</li>
<li><a
href="https://github.com/webpack/webpack/commit/4b0501c69700963bad1285b56f9cfa74704cb963"><code>4b0501c</code></a>
ci: fix release (<a
href="https://redirect.github.com/webpack/webpack/issues/20252">#20252</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/0c213cecf2906bc41102c3a4cfdd1ad3522d0171"><code>0c213ce</code></a>
ci: use <code>\<@&1450591255485743204></code> over
<code>@here</code> for discord notificationw</li>
<li><a
href="https://github.com/webpack/webpack/commit/5bf8bc51bcfb49d25b73aae450b246cd8b8b423a"><code>5bf8bc5</code></a>
refactor: types for benchmarks and tests</li>
<li><a
href="https://github.com/webpack/webpack/commit/505a5e744fbcf4471ddb534bf1d4aebea9643c1b"><code>505a5e7</code></a>
chore(release): new release (<a
href="https://redirect.github.com/webpack/webpack/issues/20188">#20188</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/0c066808d59e4f9406e11bab4ffa2e0feacbd0e2"><code>0c06680</code></a>
refactor: update eslint configuration</li>
<li><a
href="https://github.com/webpack/webpack/commit/2eb0d6a410513960bd7d65bf15baf15704a612eb"><code>2eb0d6a</code></a>
ci: release announcement (<a
href="https://redirect.github.com/webpack/webpack/issues/20238">#20238</a>)</li>
<li><a
href="https://github.com/webpack/webpack/commit/b2b24590a08755b706d2009ca97a226addf9e83b"><code>b2b2459</code></a>
ci: cancel in progress (<a
href="https://redirect.github.com/webpack/webpack/issues/20239">#20239</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/webpack/webpack/compare/v5.103.0...v5.104.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent 863d2ae commit 7440037
2 files changed
Lines changed: 50 additions & 50 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
106 | 106 | | |
107 | 107 | | |
108 | 108 | | |
109 | | - | |
| 109 | + | |
110 | 110 | | |
111 | 111 | | |
112 | 112 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
2130 | 2130 | | |
2131 | 2131 | | |
2132 | 2132 | | |
2133 | | - | |
2134 | | - | |
2135 | | - | |
2136 | | - | |
| 2133 | + | |
| 2134 | + | |
| 2135 | + | |
| 2136 | + | |
2137 | 2137 | | |
2138 | 2138 | | |
2139 | 2139 | | |
| |||
2207 | 2207 | | |
2208 | 2208 | | |
2209 | 2209 | | |
2210 | | - | |
2211 | | - | |
2212 | | - | |
2213 | | - | |
| 2210 | + | |
| 2211 | + | |
| 2212 | + | |
| 2213 | + | |
2214 | 2214 | | |
2215 | | - | |
2216 | | - | |
2217 | | - | |
2218 | | - | |
2219 | | - | |
| 2215 | + | |
| 2216 | + | |
| 2217 | + | |
| 2218 | + | |
| 2219 | + | |
2220 | 2220 | | |
2221 | 2221 | | |
2222 | 2222 | | |
| |||
2281 | 2281 | | |
2282 | 2282 | | |
2283 | 2283 | | |
2284 | | - | |
2285 | | - | |
2286 | | - | |
2287 | | - | |
| 2284 | + | |
| 2285 | + | |
| 2286 | + | |
| 2287 | + | |
2288 | 2288 | | |
2289 | 2289 | | |
2290 | 2290 | | |
| |||
2713 | 2713 | | |
2714 | 2714 | | |
2715 | 2715 | | |
2716 | | - | |
2717 | | - | |
2718 | | - | |
2719 | | - | |
| 2716 | + | |
| 2717 | + | |
| 2718 | + | |
| 2719 | + | |
2720 | 2720 | | |
2721 | 2721 | | |
2722 | 2722 | | |
| |||
2735 | 2735 | | |
2736 | 2736 | | |
2737 | 2737 | | |
2738 | | - | |
2739 | | - | |
2740 | | - | |
2741 | | - | |
| 2738 | + | |
| 2739 | + | |
| 2740 | + | |
| 2741 | + | |
2742 | 2742 | | |
2743 | 2743 | | |
2744 | 2744 | | |
| |||
2774 | 2774 | | |
2775 | 2775 | | |
2776 | 2776 | | |
2777 | | - | |
2778 | | - | |
2779 | | - | |
2780 | | - | |
| 2777 | + | |
| 2778 | + | |
| 2779 | + | |
| 2780 | + | |
2781 | 2781 | | |
2782 | 2782 | | |
2783 | 2783 | | |
| |||
4922 | 4922 | | |
4923 | 4923 | | |
4924 | 4924 | | |
4925 | | - | |
4926 | | - | |
4927 | | - | |
4928 | | - | |
| 4925 | + | |
| 4926 | + | |
| 4927 | + | |
| 4928 | + | |
4929 | 4929 | | |
4930 | 4930 | | |
4931 | 4931 | | |
| |||
5885 | 5885 | | |
5886 | 5886 | | |
5887 | 5887 | | |
5888 | | - | |
5889 | | - | |
5890 | | - | |
5891 | | - | |
| 5888 | + | |
| 5889 | + | |
| 5890 | + | |
| 5891 | + | |
5892 | 5892 | | |
5893 | 5893 | | |
5894 | 5894 | | |
| |||
6173 | 6173 | | |
6174 | 6174 | | |
6175 | 6175 | | |
6176 | | - | |
6177 | | - | |
6178 | | - | |
6179 | | - | |
| 6176 | + | |
| 6177 | + | |
| 6178 | + | |
| 6179 | + | |
6180 | 6180 | | |
6181 | 6181 | | |
6182 | 6182 | | |
| |||
6394 | 6394 | | |
6395 | 6395 | | |
6396 | 6396 | | |
6397 | | - | |
6398 | | - | |
6399 | | - | |
6400 | | - | |
| 6397 | + | |
| 6398 | + | |
| 6399 | + | |
| 6400 | + | |
6401 | 6401 | | |
6402 | 6402 | | |
6403 | 6403 | | |
| |||
6407 | 6407 | | |
6408 | 6408 | | |
6409 | 6409 | | |
6410 | | - | |
| 6410 | + | |
6411 | 6411 | | |
6412 | | - | |
6413 | | - | |
| 6412 | + | |
| 6413 | + | |
6414 | 6414 | | |
6415 | 6415 | | |
6416 | 6416 | | |
| |||
6421 | 6421 | | |
6422 | 6422 | | |
6423 | 6423 | | |
6424 | | - | |
| 6424 | + | |
6425 | 6425 | | |
6426 | 6426 | | |
6427 | 6427 | | |
| |||
0 commit comments