Skip to content

build(deps-dev): bump webpack from 5.42.0 to 5.51.0#473

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-5.51.0
Closed

build(deps-dev): bump webpack from 5.42.0 to 5.51.0#473
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-5.51.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2021

Copy link
Copy Markdown
Contributor

Bumps webpack from 5.42.0 to 5.51.0.

Release notes

Sourced from webpack's releases.

v5.51.0

Bugfixes

  • correctly keep chunk loading state when the chunk loading logic is HMR updated
    • This fixes some edge cases that e. g. occur when using lazy compilation for entrypoints. It is now able to HMR update that instead of needing a manual reload. Also see fixes in webpack-dev-server@4.
  • track and resolve symlinks for filesystem snapshotting
    • This fixes some cases of circular yarn linking of dependencies.
    • It also fixes some problems when using package managers that use symlinks to deduplicate (e. g. cnpm or pnpm)
  • pass the resulting module in the callbacks of Compilation.addModuleChain and Compilation.addModuleTree

v5.50.0

Features

Performance

  • disable cache compression by default as it tend to make performance worse
    • I could still be enabled again for specific scenarios
  • reduce the number of allocations during cache serialization
    • This improves performance and memory usage

v5.49.0

Features

  • add experiments.buildHttp to build http(s):// imports instead of keeping them external
    • keeps a webpack.lock file with integrity and webpack.lock.data with cached content that should be committed
    • Automatically upgrades lockfile during development when remote resources change (might be disabled with experiments.buildHttp.upgrade: false)
    • Lockfile is frozen during production builds and usually no network requests are made (exception: Cache-Control: no-cache).
    • The webpack.lock.data persisting can be disabled with experiments.buildHttp.cacheLocation: false. That will will introduce a availability risk. (webpack cache will be used to cache network responses)

Bugfixes

  • fix HMR infinite loop (again)
  • fix rare non-determinism with splitChunks.maxSize introduces in the last release
  • optional modules no longer cause the module to fail when bail is set
  • fix typo in records format: chunkHashs -> chunkHashes

Performance

  • limit the number of parallel generated chunks for memory reasons

v5.48.0

Features

... (truncated)

Commits
  • bd7cb37 5.51.0
  • 1a06a45 update lazy-compilation example for webpack-dev-server@4
  • 4e5e0ac Merge pull request #14009 from henryqdineen/hqd-module-creation-callback
  • c61466e Merge pull request #14019 from webpack/bugfix/symlink-snapshot
  • 9577b88 track and resolve symlinks when reading context timestamps/hashes
  • 51637ae Merge pull request #14003 from webpack/dependabot/npm_and_yarn/simple-git-2.44.0
  • c3e4e17 Pass module to Compilation.addModuleChain callback when applicable
  • 9f40273 Merge pull request #14007 from webpack/bugfix/runtime-module-hmr
  • 08ea146 keep state of chunk loading during hmr updates
  • c66914a Merge pull request #13992 from snitin315/rm-deprecated-loaders
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [webpack](https://github.com/webpack/webpack) from 5.42.0 to 5.51.0.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Commits](webpack/webpack@v5.42.0...v5.51.0)

---
updated-dependencies:
- dependency-name: webpack
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 19, 2021
@dependabot @github

dependabot Bot commented on behalf of github Aug 20, 2021

Copy link
Copy Markdown
Contributor Author

Superseded by #475.

@dependabot dependabot Bot closed this Aug 20, 2021
@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/webpack-5.51.0 branch August 20, 2021 14:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants