jmannau
commented
3 years ago @dependabot merge
On Fri, 1 Jan 2021 at 18:05, dependabot-preview[bot] < notifications@github.com> wrote:
Bumps webpack https://github.com/webpack/webpack from 5.9.0 to 5.11.1. Release notes
Sourced from webpack's releases https://github.com/webpack/webpack/releases.
v5.11.1 Bugfixes
- ignore cloned ExportInfo during hashing
- fixes a problem where changing modules affects hashes in some other part of the application during development
- fixes compileBooleanMatcher when prefix and suffix overlap
- fixes invalidate code generated when generating properties access
- fix object types in typings
- expose more types regarding Stats
v5.11.0 Features
- update typings to include undefined/null types (for strict type)
- export WebpackError
- export Asset and AssetInfo types
- allow error configuration for validateSchema function
Bugfixes
- fix typings for SourceMapSource
- allow custom properties in AssetInfo
- handle undefined values for rule conditions like empty strings
v5.10.3 Bugfixes
- errors in initial cache no longer cause build dependencies to be ignored
- manual side effects flagging should override automatic analysis
- modules in dlls without entryOnly will no longer be dropped because of no side effects
v5.10.2 Bugfixes
- add a few missing node.js libraries as externals in target: "node"
- improve cache (de)serialization to allow larger cache files (>2GB) and increase performance for them
v5.10.1 Bugfixes
- avoid duplicating chunk info in chunk loading global
- allow executing chunks before runtime is loaded
- avoid error when emitting assets with different query string but identical filename and content
- fix duplicated asset name in processAssets with additionalAssets
- add missing \ in module info header comment
v5.10.0 Bugfixes
- Multiple fixes regarding the side effects optimization ("sideEffects": false) when reexports and concatenated modules are combined
Commits
- 98bcf44 https://github.com/webpack/webpack/commit/98bcf44a43d0109ac2680487fddf3c3262395e1f 5.11.1
- 2fcb50c https://github.com/webpack/webpack/commit/2fcb50cf0fdca6651ffbc15f79b984b6f07f4651 Merge pull request #12266 https://github-redirect.dependabot.com/webpack/webpack/issues/12266 from webpack/bugfix/flanky-hash
- 6ac0aa5 https://github.com/webpack/webpack/commit/6ac0aa5f57ecd89177f7ee3fc120bb31c1f119a4 Merge pull request #12256 https://github-redirect.dependabot.com/webpack/webpack/issues/12256 from izaera/issue-12255
- 63856cc https://github.com/webpack/webpack/commit/63856cc01714dca2b5302e6a92c55c4ccad77cc6 get only readonly version of ExportInfo when determining module export type
- 07fc323 https://github.com/webpack/webpack/commit/07fc32368472490bd559bf6ef0777590a577a211 ignore cloned ExportInfo during hashing
- d1bc21b https://github.com/webpack/webpack/commit/d1bc21bdd72b3f8616ce315c1de0ad7a7059c875 Merge pull request #12247 https://github-redirect.dependabot.com/webpack/webpack/issues/12247 from webpack/dependabot/npm_and_yarn/enhanced-resol...
- a46d781 https://github.com/webpack/webpack/commit/a46d7817649e55e86b9491a377c34c4028a2c7d1 Merge pull request #12249 https://github-redirect.dependabot.com/webpack/webpack/issues/12249 from webpack/dependabot/npm_and_yarn/node-notifier-...
- 8b68563 https://github.com/webpack/webpack/commit/8b685637e18139b7c5d19fb1742971781e132ddc slice instead of substring
- 39adecf https://github.com/webpack/webpack/commit/39adecf568429750c94fb1ca8990f682c0ac4cd8 fix #12255 https://github-redirect.dependabot.com/webpack/webpack/issues/12255
- ae6eaea https://github.com/webpack/webpack/commit/ae6eaea553f8df4130a4e40f0e265ec9c4013782 chore(deps): [security] bump node-notifier from 8.0.0 to 8.0.1
- Additional commits viewable in compare view https://github.com/webpack/webpack/compare/v5.9.0...v5.11.1
[image: Dependabot compatibility score] https://dependabot.com/compatibility-score/?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.9.0&new-version=5.11.1
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
- @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot dashboard https://app.dependabot.com:
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
You can view, comment on, or merge this pull request online at:
https://github.com/jmannau/serverless-ts-template/pull/292 Commit Summary
- Bump webpack from 5.9.0 to 5.11.1
File Changes
- M package-lock.json https://github.com/jmannau/serverless-ts-template/pull/292/files#diff-053150b640a7ce75eff69d1a22cae7f0f94ad64ce9a855db544dda0929316519 (295)
- M package.json https://github.com/jmannau/serverless-ts-template/pull/292/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519 (2)
Patch Links:
- https://github.com/jmannau/serverless-ts-template/pull/292.patch
- https://github.com/jmannau/serverless-ts-template/pull/292.diff
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/jmannau/serverless-ts-template/pull/292, or unsubscribe https://github.com/notifications/unsubscribe-auth/AABK6JKIZFC2B3ITOBXNBNTSXVX5DANCNFSM4VQB7HPA .
Bumps webpack from 5.9.0 to 5.11.1.
Release notes
Sourced from webpack's releases.
Commits
98bcf445.11.12fcb50cMerge pull request #12266 from webpack/bugfix/flanky-hash6ac0aa5Merge pull request #12256 from izaera/issue-1225563856ccget only readonly version of ExportInfo when determining module export type07fc323ignore cloned ExportInfo during hashingd1bc21bMerge pull request #12247 from webpack/dependabot/npm_and_yarn/enhanced-resol...a46d781Merge pull request #12249 from webpack/dependabot/npm_and_yarn/node-notifier-...8b68563slice instead of substring39adecffix #12255ae6eaeachore(deps): [security] bump node-notifier from 8.0.0 to 8.0.1Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)