search

DeviaVir / zenbot

Zenbot is a command-line cryptocurrency trading bot using Node.js and MongoDB.
MIT License
8.22k stars 2.04k forks source link

[Snyk] Upgrade webpack from 5.15.0 to 5.16.0 #2622

Closed DeviaVir closed 3 years ago

DeviaVir commented 3 years ago

Snyk has created this PR to upgrade webpack from 5.15.0 to 5.16.0.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Release notes
Package name: webpack
  • 5.16.0 - 2021-01-19

    Features

    • add __webpack_is_included__("./some-module") which returns true when the module is bundled and false when not
    • priorize eager shared modules over normal shared modules (with the same version), as they are loaded anyway
    • add library.type: "assign-properties" which merges all exports into a global variable
    • allow optimization.innerGraph for new URL()
      • This allows to detect which URLs are used and drop the module and asset when they are not.

    Bugfixes

    • only return exports from runtime when needed
      • This allows to use experiments.outputModule: true with optimization.runtimeChunk
    • fix a bug that splitChunk.reuseExistingChunk doesn't work for entrypoints
      • This optimized an edge case where a nearly empty entrypoint is created when an entrypoint contains only vendor modules

    Developer Experience

    • include plugin names in deprecation message for "NormalModuleFactory.xxx is no longer a waterfall hook"
    • improve error message when passing an invalid library name
  • 5.15.0 - 2021-01-15

    Features

    • add getResolve method to data object when using function externals
    • externals function may return a promise now

    Bugfixes

    • fix define("local-module", expr) generating invalid syntax
    • fix resolving bug when resolving build dependencies
    • add chunkModulesSpace to schema
    • fix rebuildModule api

    Performance

    • improve performance of build dependencies resolving
from webpack GitHub release notes
Commit messages
Package name: webpack
  • 56246f0 5.16.0
  • 8d2c2f4 Merge pull request #12453 from webpack/bugfix/reuse-vendor-entry
  • 8dc85ae Merge pull request #12432 from webpack/dependabot/npm_and_yarn/husky-4.3.8
  • 76d28de Merge pull request #12424 from webpack/dependabot/npm_and_yarn/types/node-14.14.21
  • 7ee3f25 Merge pull request #12448 from webpack/dependabot/npm_and_yarn/core-js-3.8.3
  • 2752f6c Merge pull request #12451 from webpack/bugfix/tree-shake-url
  • 2b3489d reuseExistingChunk is able to reuse an entry chunk when it's the only selected chunk
  • 4ec418c allow inner graph shaking for new URL()
  • 4aa650d chore(deps-dev): bump core-js from 3.8.2 to 3.8.3
  • 8918ab1 Merge pull request #12431 from webpack/dependabot/npm_and_yarn/eslint-7.18.0
  • 185986b chore(deps-dev): bump eslint from 7.17.0 to 7.18.0
  • 9277043 Merge pull request #12443 from webpack/dependabot/npm_and_yarn/eslint-config-prettier-7.2.0
  • b7cbe9d Merge pull request #11913 from snitin315/fix/error-message
  • f28abd8 Merge pull request #12442 from webpack/bugfix/12244
  • 5687a60 chore(deps-dev): bump eslint-config-prettier from 7.1.0 to 7.2.0
  • dfe9cd3 Merge pull request #11629 from xiaoxiaojx/feat/issue_11571
  • e9183f9 only return result of startup when needed
  • a08eca7 Merge pull request #12132 from jakenorthey/feature/prioritize-eager-shared-modules
  • 2f6bf31 workaround for typescript bug
  • 1e988a1 Merge branch 'master' into feat/issue_11571
  • 1ca9f85 improve and align error message
  • ea9f5c4 tests: for invalid library name error message
  • b5b62c4 AssignLibraryPlugin: improve error message for invalid library name
  • ed60667 Merge pull request #12440 from webpack/dependabot/npm_and_yarn/eslint-plugin-jsdoc-31.0.7
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

stale[bot] commented 3 years ago

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.