deriv-com / deriv-api

Websocket API for deriv.app
MIT License
56 stars 97 forks source link

Bump webpack from 5.90.1 to 5.95.0 #270

Open dependabot[bot] opened 1 week ago

dependabot[bot] commented 1 week ago

Bumps webpack from 5.90.1 to 5.95.0.

Release notes

Sourced from webpack's releases.

v5.95.0

Bug Fixes

  • Fixed hanging when attempting to read a symlink-like file that it can't read
  • Handle default for import context element dependency
  • Merge duplicate chunks call after split chunks
  • Generate correctly code for dynamically importing the same file twice and destructuring
  • Use content hash as [base] and [name] for extracted DataURI's
  • Distinguish module and import in module-import for externals import's
  • [Types] Make EnvironmentPlugin default values types less strict
  • [Types] Typescript 5.6 compatibility

New Features

  • Add new optimization.entryIife option (true by default for the production mode)
  • Pass output.hash* options to loader context

Performance

  • Avoid unneeded re-visit in build chunk graph

v5.94.0

Bug Fixes

  • Added runtime condition for harmony reexport checked
  • Handle properly data/http/https protocols in source maps
  • Make bigint optimistic when browserslist not found
  • Move @​types/eslint-scope to dev deps
  • Related in asset stats is now always an array when no related found
  • Handle ASI for export declarations
  • Mangle destruction incorrect with export named default properly
  • Fixed unexpected asi generation with sequence expression
  • Fixed a lot of types

New Features

  • Added new external type "module-import"
  • Support webpackIgnore for new URL() construction
  • [CSS] @import pathinfo support

Security

  • Fixed DOM clobbering in auto public path

v5.93.0

Bug Fixes

  • Generate correct relative path to runtime chunks
  • Makes DefinePlugin quieter under default log level
  • Fixed mangle destructuring default in namespace import

... (truncated)

Commits
  • e20fd63 chore(release): 5.95.0
  • 4866b0d feat: added new optimization.entryIife option
  • d90f692 fix: merge duplicate chunks after split chunks
  • 90dec30 fix(externals): distinguish “module” and “import” in “module-import”
  • c1a0a46 fix(externals): distinguish “module” and “import” in “module-import”
  • 14d8fa8 fix: all tests cases
  • dae16ad feat: pass output.hash* options to loader context
  • 75d185d feat: pass output.hash* options to loader context
  • 46e0b9c test: update
  • 8e62f9f test
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
github-actions[bot] commented 1 week ago

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails

Scanned Manifest Files

package-lock.json
  • webpack@5.90.1
  • @types/estree@1.0.6
  • @webassemblyjs/ast@1.12.1
  • @webassemblyjs/helper-buffer@1.12.1
  • @webassemblyjs/helper-wasm-section@1.12.1
  • @webassemblyjs/wasm-edit@1.12.1
  • @webassemblyjs/wasm-gen@1.12.1
  • @webassemblyjs/wasm-opt@1.12.1
  • @webassemblyjs/wasm-parser@1.12.1
  • @webassemblyjs/wast-printer@1.12.1
  • acorn-import-attributes@1.9.5
  • enhanced-resolve@5.17.1
  • graceful-fs@4.2.11
  • watchpack@2.4.2
  • webpack@5.95.0
  • @types/eslint@8.4.1
  • @types/eslint-scope@3.7.3
  • @types/estree@1.0.5
  • @webassemblyjs/ast@1.11.6
  • @webassemblyjs/helper-buffer@1.11.6
  • @webassemblyjs/helper-wasm-section@1.11.6
  • @webassemblyjs/wasm-edit@1.11.6
  • @webassemblyjs/wasm-gen@1.11.6
  • @webassemblyjs/wasm-opt@1.11.6
  • @webassemblyjs/wasm-parser@1.11.6
  • @webassemblyjs/wast-printer@1.11.6
  • acorn-import-assertions@1.9.0
  • enhanced-resolve@5.15.0
  • graceful-fs@4.2.9
  • watchpack@2.4.0