anikethsaha / mern

:tada: This is boilerplate for MERN stack with integrations like Redux and SSR :tada:
https://mern.netlify.com
MIT License
98 stars 44 forks source link

Bump webpack from 4.31.0 to 4.33.0 #48

Closed dependabot-preview[bot] closed 5 years ago

dependabot-preview[bot] commented 5 years ago

Bumps webpack from 4.31.0 to 4.33.0.

Release notes *Sourced from [webpack's releases](https://github.com/webpack/webpack/releases).* > ## v4.33.0 > # Features > > * add `target: "electron-preload"` for electron 5 > * renderer should use `target: "web"` in electron 5 > > # Bugfixes > > * fix HMR rejection of removed and readded self-accepted modules > > ## v4.32.2 > # Bugfixes > > * fix some weird schema validation messages > * fix problem in production mode (sideEffects + concatenation) which caused reexported values to become undefined (bug since 4.32.0) > > ## v4.32.1 > # Bugfixes > > * reverts some changes from 4.32.0 which accidentally disabled some CommonJs features when using `node: false`. > > ## v4.32.0 > # Features > > * Added `this.mode` to the loader API, to allow loaders to choose defaults by `mode` similar to webpacks options > * Stack Trace for Errors in rejected Promises from `import()` now includes the stack from where the `import()` was called > > # Bugfixes > > * The Parser can now analyse identifiers in rest patterns too > * `const { a, ...rest } = obj`, where `rest` conflicts with an imported binding etc. > * `node: false` now correctly disables `__dirname` and `__filename` too > * `__dirname` and `__filename` now no longer evaluates to something when `node: false` or `node.__file/dirname: false` is set > * `if(__dirname !== "")` is no longer replaced with `if(true)` in such scenarios > * prefetching chunks is no executed **after** the initial module evaluation > * This allows to override i. e. `__webpack_public_path__` for prefetching too > * fixes a runtime crash when using side-effect-free modules with the DllPlugin > > # Contribute > > * CI tests node.js 12 now too > * webpack-bot now merges dependabot PRs automatically when status checks succeed >
Commits - [`d45bec3`](https://github.com/webpack/webpack/commit/d45bec3518f53153287ff2cad3cfae9d2b248d9a) 4.33.0 - [`96869d9`](https://github.com/webpack/webpack/commit/96869d959eee867f8ee01d1adaf35a1531b62546) Merge pull request [#9191](https://github-redirect.dependabot.com/webpack/webpack/issues/9191) from webpack/dependabot/npm_and_yarn/chrome-trace-ev... - [`e90cf7c`](https://github.com/webpack/webpack/commit/e90cf7c0c6f53fb0845cb89f8effdbd8a95cf44d) Merge pull request [#9190](https://github-redirect.dependabot.com/webpack/webpack/issues/9190) from webpack/dependabot/npm_and_yarn/terser-webpack-... - [`96b97b5`](https://github.com/webpack/webpack/commit/96b97b559a8c8361301bfd65e00f42a26d1b6628) Downstream bug fixed and we can remove workaround - [`31dae4d`](https://github.com/webpack/webpack/commit/31dae4ddf8e5e53e55cc7bd46dea1a6bbc6f6752) update snapshots - [`faba6e4`](https://github.com/webpack/webpack/commit/faba6e4b90764583cd652182f8d7844b4d387e00) Merge pull request [#9209](https://github-redirect.dependabot.com/webpack/webpack/issues/9209) from webpack/dependabot/npm_and_yarn/@types/node-10.... - [`f571d78`](https://github.com/webpack/webpack/commit/f571d78a2ca96343f5d2d7dc20079e8f3bed73ec) Merge pull request [#9205](https://github-redirect.dependabot.com/webpack/webpack/issues/9205) from webpack/dependabot/npm_and_yarn/typescript-3.5.1 - [`f59f31d`](https://github.com/webpack/webpack/commit/f59f31dc543c741642ebd1f83a35fbe9c6daaa7a) chore(deps-dev): bump @types/node from 10.14.7 to 10.14.8 - [`289c520`](https://github.com/webpack/webpack/commit/289c5207f956797f9f750df778a654940bb05cbd) chore(deps-dev): bump typescript from 3.4.5 to 3.5.1 - [`c408ff5`](https://github.com/webpack/webpack/commit/c408ff555556e1db4ec81e82a9a9e7449832bdc1) Merge pull request [#9202](https://github-redirect.dependabot.com/webpack/webpack/issues/9202) from webpack/bugfix/9198 - Additional commits viewable in [compare view](https://github.com/webpack/webpack/compare/v4.31.0...v4.33.0)


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Automerge options (never/patch/minor, and dev/runtime dependencies) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired) Finally, you can contact us by mentioning @dependabot.
dependabot-preview[bot] commented 5 years ago

Superseded by #53.