jmannau
commented
3 years ago @dependabot merge
On Thu, 1 Jul 2021 at 18:16, dependabot-preview[bot] < @.***> wrote:
Bumps webpack https://github.com/webpack/webpack from 5.36.2 to 5.41.1. Release notes
Sourced from webpack's releases https://github.com/webpack/webpack/releases.
v5.41.1 Bugfixes
- add missing types about experimental esm support to schema
- avoid slicing large Buffers as that doesn't always work for unknown reasons
Performance
- avoid slicing Buffers unnecessarily
v5.41.0 Features
- Persist cache faster when large changes are detected
- new option cache.idleTimeoutAfterLargeChanges to control that
Bugfixes
- shutdown lazy compilation server correctly
Experiments
- EcmaScript modules support (experiments.outputModule: true)
- output.library.type: "module": very basic support, no live bindings, unnecessary runtime code
- output.chunkLoading: "import"
- output.chunkFormat: "module"
- externalsType: "module" generates now import * as X from "..." (in a module) or import("...") (in a script)
- Node.js commonjs externals use import { createRequire } from "module" in a module
- new Worker etc. sets `type: "module"
v5.40.0 Features
- accept node: prefixed requests as node.js externals
- avoid instanceof Promise in favor of p && typeof p.then === "function" to allow mixing different Promise implementions
Bugfixes
- fix usage analysis of class properties
Performance
- improve LazySet memory usage by shortcircuiting empty sets
- reduce algorithmic complexity of the structure analysis for plain objects serialization
Developer Experience
- allow Buffer in this.emitFile typings (loader context)
- improve reset cli argument description
... (truncated) Commits
- 9ed05af https://github.com/webpack/webpack/commit/9ed05afbeaf87442d86863a20a6c30b0ab437fb5 5.41.1
- 74a16d0 https://github.com/webpack/webpack/commit/74a16d080717f43c2cced3b7252d1fbf2a4eb4ee Merge pull request #13662 https://github-redirect.dependabot.com/webpack/webpack/issues/13662 from webpack/perf/avoid-splitting-buffer
- 563a28d https://github.com/webpack/webpack/commit/563a28dd0f952ff845649ca743dfadf60d2d4994 fix toString for large positions
- d2640d3 https://github.com/webpack/webpack/commit/d2640d347e2e18692463d0d17673fe8595d15063 Merge pull request #13652 https://github-redirect.dependabot.com/webpack/webpack/issues/13652 from webpack/dependabot/npm_and_yarn/mini-css-extra...
- 07d6d54 https://github.com/webpack/webpack/commit/07d6d541aec9cd32a4b6a137e036a1a480af95cf Merge pull request #13656 https://github-redirect.dependabot.com/webpack/webpack/issues/13656 from webpack/dependabot/npm_and_yarn/jest-diff-27.0.6
- c409811 https://github.com/webpack/webpack/commit/c409811f13d6faca6c5348f454279e5c6ae9e98b Merge pull request #13659 https://github-redirect.dependabot.com/webpack/webpack/issues/13659 from yiminghe/use-es5
- 18f54b7 https://github.com/webpack/webpack/commit/18f54b7d0649898918f15ff0b97dcc7b08c3ebc5 Merge pull request #13653 https://github-redirect.dependabot.com/webpack/webpack/issues/13653 from webpack/dependabot/npm_and_yarn/terser-5.7.1
- 3863b42 https://github.com/webpack/webpack/commit/3863b42686755bfceda98185e0f08abe2da00a15 Merge pull request #13660 https://github-redirect.dependabot.com/webpack/webpack/issues/13660 from chenxsan/bugfix/update-webpack-options
- b76c5c4 https://github.com/webpack/webpack/commit/b76c5c4c9b59c3eefa484e7352b68f3aa44582b6 fix linting
- 0433e0b https://github.com/webpack/webpack/commit/0433e0b0e96f530a73ebf40ec214551309d52e19 join sections
- Additional commits viewable in compare view https://github.com/webpack/webpack/compare/v5.36.2...v5.41.1
[image: Dependabot compatibility score] https://dependabot.com/compatibility-score/?dependency-name=webpack&package-manager=npm_and_yarn&previous-version=5.36.2&new-version=5.41.1
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- @dependabot rebase will rebase this PR
- @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
- @dependabot merge will merge this PR after your CI passes on it
- @dependabot squash and merge will squash and merge this PR after your CI passes on it
- @dependabot cancel merge will cancel a previously requested merge and block automerging
- @dependabot reopen will reopen this PR if it is closed
- @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
- @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
- @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
- @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
- @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme
Additionally, you can set the following in your Dependabot dashboard https://app.dependabot.com:
- Update frequency (including time of day and day of week)
- Pull request limits (per update run and/or open at any time)
- Out-of-range updates (receive only lockfile updates, if desired)
- Security updates (receive only security updates, if desired)
You can view, comment on, or merge this pull request online at:
https://github.com/jmannau/serverless-ts-template/pull/335 Commit Summary
- Bump webpack from 5.36.2 to 5.41.1
File Changes
- M package-lock.json https://github.com/jmannau/serverless-ts-template/pull/335/files#diff-053150b640a7ce75eff69d1a22cae7f0f94ad64ce9a855db544dda0929316519 (124)
- M package.json https://github.com/jmannau/serverless-ts-template/pull/335/files#diff-7ae45ad102eab3b6d7e7896acd08c427a9b25b346470d7bc6507b6481575d519 (2)
Patch Links:
- https://github.com/jmannau/serverless-ts-template/pull/335.patch
- https://github.com/jmannau/serverless-ts-template/pull/335.diff
— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/jmannau/serverless-ts-template/pull/335, or unsubscribe https://github.com/notifications/unsubscribe-auth/AABK6JML4OMBGBJAU4D3K3DTVQP53ANCNFSM47T7GNCQ .
Bumps webpack from 5.36.2 to 5.41.1.
Release notes
Sourced from webpack's releases.
... (truncated)
Commits
9ed05af5.41.174a16d0Merge pull request #13662 from webpack/perf/avoid-splitting-buffer563a28dfix toString for large positionsd2640d3Merge pull request #13652 from webpack/dependabot/npm_and_yarn/mini-css-extra...07d6d54Merge pull request #13656 from webpack/dependabot/npm_and_yarn/jest-diff-27.0.6c409811Merge pull request #13659 from yiminghe/use-es518f54b7Merge pull request #13653 from webpack/dependabot/npm_and_yarn/terser-5.7.13863b42Merge pull request #13660 from chenxsan/bugfix/update-webpack-optionsb76c5c4fix linting0433e0bjoin sectionsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) - `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language - `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language - `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language - `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language - `@dependabot badge me` will comment on this PR with code to add a "Dependabot enabled" badge to your readme Additionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com): - Update frequency (including time of day and day of week) - Pull request limits (per update run and/or open at any time) - Out-of-range updates (receive only lockfile updates, if desired) - Security updates (receive only security updates, if desired)