[Snyk] Upgrade webpack from 5.33.2 to 5.65.0

[snyk-bot]

Snyk has created this PR to upgrade webpack from 5.33.2 to 5.65.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 57 versions ahead of your current version.
• The recommended version was released 23 days ago, on 2021-12-06.

Release notes

Package name: webpack

• 5.65.0 - 2021-12-06
  

  Features

  • static evaluation understands undefined now
  • reduce container entry code by a few chars
  • use template literals when available and they make sense

  Bugfixes

  • handle singleton flag without requiredVersion in Module Federation
  • upgrade watchpack for context time info bugfix

  Performance

  • improve RegExp in error message formating for non-quadratic performance

  Developer Experience

  • automatically insert brackets when output.globalObject contains a non-trival expression
  • show error when using script type external with invalid syntax
  • expose types for Resolver, StatsOptions and ResolvePluginInstance

  Preparations for the future

  • hashDigestLength will default to 16 in webpack 6 (experiments.futureDefaults)
• 5.64.4 - 2021-11-25
  

  Bugfixes

  • fix tagged template literal evaluation
  • fix ModuleFederation with ESM
  • fix outputModule with intial splitChunks

  Performance

  • upgrade watchpack for faster watcher updating
  • track file and directory timestamps separately in watchpack and webpack

  Developer Experience

  • show origin of singleton shared module in mismatch warning
• 5.64.3 - 2021-11-24
  

  Performance

  • allow to use pre-compiled schema when Infinity is used in configuration
  • allow to use pre-compiled schema for configuration arrays
• 5.64.2 - 2021-11-20
  

  Bugfixes

  • avoid double initial compilation due to invalid dependencies with managedPaths
• 5.64.1 - 2021-11-15
  

  Bugfixes

  • fix regexp in managedPaths to exclude additional slash
  • make module.accept errorHandler optional in typings
  • correctly create an async chunk when using a require(...).property in require.ensure
  • fix cleaning of symlinks in output.clean: true
  • fix change detection with unsafeCache within managedPaths (node_modules)
  • bump webpack-sources for Stack Overflow bugfix
• 5.64.0 - 2021-11-11
  

  Features

  • add asyncChunks: boolean option to disable creation of async chunks

  Bugfixes

  • fix ProfilingPlugin for experiments.backCompat: false

  Performance

  • avoid running regexp twice over the file list
• 5.63.0 - 2021-11-09
  

  Features

  • allow passing chunkLoading: false to disable on-demand loading

  Bugfixes

  • fix import 'single-quote' in esm build dependencies
• 5.62.2 - 2021-11-09
  

  Bugfixes

  • fix __system_context__ injection when using the library option on entrypoint
  • enable exportsPresence: "error" by default in futureDefaults
  • fix bad performance for a RegExp in Stats printing (with large error messages)
  • fix exportPresence -> exportsPresence typo
  • fix a bug with module invalidation when only module id changes with experiments.cacheUnaffected
• 5.62.1 - 2021-11-05
  

  Bugfix

  • fix invalid generated code when omitting ;
• 5.62.0 - 2021-11-05
  

  Features

  • add options to configure export presence checking
    • parser.javascript.reexportExportsPresence: false allows to disable warnings for non-existing exports during the migration from export ... from "..." to export type ... from "..." for type reexports in TypeScript
  • add experiments.backCompat: false to disable some expensive deprecations for better performance

  Bugfixes

  • use ['catch'] instead of .catch for better ES3 support
  • fix removed parentheses when using new (require("...")).Something()
  • fix { require } object literals
  • splitChunks.chunks option is now correctly used for splitChunks.fallbackCacheGroup.maxSize too
  • fix schema of listen option, allow to omit port
  • add better support for Promises from different isolates

  Developer Experience

  • add typings for the webpack API that is available within modules
    • use /// <reference types="webpack/module" /> to use the typings in typescript modules
    • or "types": [..., "webpack/module"] in tsconfig
• 5.61.0 - 2021-10-29
• 5.60.0 - 2021-10-25
• 5.59.1 - 2021-10-20
• 5.59.0 - 2021-10-19
• 5.58.2 - 2021-10-13
• 5.58.1 - 2021-10-08
• 5.58.0 - 2021-10-07
• 5.57.1 - 2021-10-05
• 5.57.0 - 2021-10-05
• 5.56.1 - 2021-10-04
• 5.56.0 - 2021-10-01
• 5.55.1 - 2021-09-29
• 5.55.0 - 2021-09-28
• 5.54.0 - 2021-09-24
• 5.53.0 - 2021-09-16
• 5.52.1 - 2021-09-10
• 5.52.0 - 2021-09-03
• 5.51.2 - 2021-09-02
• 5.51.1 - 2021-08-19
• 5.51.0 - 2021-08-19
• 5.50.0 - 2021-08-10
• 5.49.0 - 2021-08-06
• 5.48.0 - 2021-08-02
• 5.47.1 - 2021-07-29
• 5.47.0 - 2021-07-27
• 5.46.0 - 2021-07-22
• 5.45.1 - 2021-07-16
• 5.45.0 - 2021-07-16
• 5.44.0 - 2021-07-08
• 5.43.0 - 2021-07-06
• 5.42.1 - 2021-07-05
• 5.42.0 - 2021-07-02
• 5.41.1 - 2021-06-29
• 5.41.0 - 2021-06-28
• 5.40.0 - 2021-06-21
• 5.39.1 - 2021-06-17
• 5.39.0 - 2021-06-14
• 5.38.1 - 2021-05-27
• 5.38.0 - 2021-05-27
• 5.37.1 - 2021-05-19
• 5.37.0 - 2021-05-10
• 5.36.2 - 2021-04-30
• 5.36.1 - 2021-04-28
• 5.36.0 - 2021-04-27
• 5.35.1 - 2021-04-23
• 5.35.0 - 2021-04-21
• 5.34.0 - 2021-04-19
• 5.33.2 - 2021-04-14

from webpack GitHub release notes

Commit messages

Package name: webpack

• 323d65e 5.65.0
• f3423df Merge pull request #14912 from webpack/deps/watchpack
• 0abc39c Merge pull request #14908 from webpack/dependabot/npm_and_yarn/prettier-2.5.1
• b09c45a upgrade watchpack for bugfix
• adeb73a chore(deps-dev): bump prettier from 2.5.0 to 2.5.1
• 0bc3a2e Merge pull request #14884 from colacadstink/main
• bbe72b3 Added testing for new singleton logic (and caught a typo in the process!)
• dc70535 Merge pull request #14855 from webpack/rebase/12875
• c9ffb83 Merge pull request #14861 from webpack/fix-runtime-template
• 4127edb Merge pull request #14886 from webpack/dependabot/npm_and_yarn/simple-git-2.48.0
• 4bc95f2 Merge pull request #14879 from webpack/dependabot/npm_and_yarn/date-fns-2.27.0
• ec5f53c chore(deps-dev): bump simple-git from 2.47.0 to 2.48.0
• 92e3730 Proposed fix to module federation to stop ignoring the singleton flag when requiredVersion is false
• 1a56941 chore(deps-dev): bump date-fns from 2.26.0 to 2.27.0
• f07a3b8 Merge pull request #14860 from webpack/feature-future-hash-digest-length
• c106e43 fix RuntimeTemplate
• 3feab5b set hashDigestLength=16 for futureDefaults
• 791347f Adding types
• f1e9221 Merge pull request #14844 from webpack/fix-14678
• a7bba26 Merge pull request #14781 from tanhauhau/tanhauhau/add-validation-to-remotes
• 40be69b feat: throw error for invalid remotes
• a8afd23 fix regexp in DefaultStatsPrinterPlugin
• bb51f18 Merge pull request #14784 from webpack/improve-runtime-template
• 200c9e0 Merge pull request #14779 from webpack/dependabot/npm_and_yarn/date-fns-2.26.0

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs