codecov[bot]
commented
5 years ago Codecov Report
Merging #501 into master will not change coverage. The diff coverage is
n/a.
@@ Coverage Diff @@
## master #501 +/- ##
=======================================
Coverage 71.13% 71.13%
=======================================
Files 240 240
Lines 4320 4320
Branches 902 902
=======================================
Hits 3073 3073
Misses 1124 1124
Partials 123 123Continue to review full report at Codecov.
Legend - Click here to learn more
Δ = absolute <relative> (impact),ø = not affected,? = missing dataPowered by Codecov. Last update edc7cc6...c896e29. Read the comment docs.
renovate[bot]
This PR contains the following updates:
^2.13.1->^3.0.0GitHub Vulnerability Alerts
GHSA-pgr8-jg6h-8gw6
Versions of
webpack-bundle-analyzerprior to 3.3.2 are vulnerable to Cross-Site Scripting. The package usesJSON.stringify()without properly escaping input which may lead to Cross-Site Scripting.Recommendation
Upgrade to version 3.3.2 or later.
Release Notes
webpack-contrib/webpack-bundle-analyzer
### [`v3.3.2`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#332) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.3.1...v3.3.2) - **Bug Fix** - Fix regression with escaping internal assets ([#264](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/264), fixes [#263](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/issues/263)) ### [`v3.3.1`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#331) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.3.0...v3.3.1) - **Improvements** - Use relative links for serving internal assets ([#261](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/261), fixes [#254](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/issues/254)) - Properly escape embedded JS/JSON ([#262](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/262)) - **Bug Fix** - Fix showing help message on `-h` flag ([#260](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/260), fixes [#239](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/issues/239)) ### [`v3.3.0`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#330) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.2.0...v3.3.0) - **New Feature** - Show/hide chunks using context menu ([#246](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/246), [@bregenspan](https://togithub.com/bregenspan)) - **Internal** - Updated dev dependencies ### [`v3.2.0`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#320) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.1.0...v3.2.0) - **Improvements** - Add support for .mjs output files ([#252](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/252), [@jlopezxs](https://togithub.com/jlopezxs)) ### [`v3.1.0`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#310) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.0.4...v3.1.0) - **Bug Fix** - Properly determine the size of the modules containing special characters ([#223](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/223), [@hulkish](https://togithub.com/hulkish)) - Update acorn to v6 ([#248](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/248), [@realityking](https://togithub.com/realityking)) ### [`v3.0.4`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#304) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.0.3...v3.0.4) - **Bug Fix** - Make webpack's done hook wait until analyzer writes report or stat file ([#247](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/247), [@mareolan](https://togithub.com/mareolan)) ### [`v3.0.3`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#303) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.0.2...v3.0.3) - **Bug Fix** - Disable viewer websocket connection when report is generated in `static` mode ([#215](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/215), [@sebastianhaeni](https://togithub.com/sebastianhaeni)) ### [`v3.0.2`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#302) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.0.1...v3.0.2) - **Improvements** - Drop `@babel/runtime` dependency ([#209](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/209), [@realityking](https://togithub.com/realityking)) - Properly specify minimal Node.js version in `.babelrc` ([#209](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/209), [@realityking](https://togithub.com/realityking)) - **Bug Fix** - Move some "dependencies" to "devDependencies" ([#209](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/pull/209), [@realityking](https://togithub.com/realityking)) ### [`v3.0.1`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#301) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v3.0.0...v3.0.1) - **Bug Fix** - Small UI fixes ### [`v3.0.0`](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/blob/HEAD/CHANGELOG.md#300) [Compare Source](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/compare/v2.13.1...v3.0.0) - **Breaking change** - Dropped support for Node.js v4. Minimal required version now is v6.14.4 - Contents of concatenated modules are now hidden by default because of a number of related issues ([details](https://togithub.com/webpack-contrib/webpack-bundle-analyzer/issues/188)), but can be shown using a new checkbox in the sidebar. - **New Feature** - Added modules search - Added ability to pin and resize the sidebar - Added button to toggle the sidebar - Added checkbox to show/hide contents of concatenated modules - **Improvements** - Nested folders that contain only one child folder are now visually merged i.e. `folder1 => folder2 => file1` is now shown like `folder1/folder2 => file1` (thanks to [@varun-singh-1](https://togithub.com/varun-singh-1) for the idea) - **Internal** - Dropped support for Node.js v4 - Using MobX for state management - Updated dependenciesConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.