dependabot[bot] opened a new pull request, #9062: URL: https://github.com/apache/storm/pull/9062
Bumps [webpack](https://github.com/webpack/webpack) from 5.109.2 to 5.110.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/releases";>webpack's releases</a>.</em></p> <blockquote> <h2>v5.110.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>Fix a capture-group-less <code>snapshot.managedPaths</code> RegExp; speed up cache writes. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21843";>#21843</a>)</p> </li> <li> <p>Throw <code>SyntaxError</code>, or <code>WebAssembly.CompileError</code>, from an unparsable module. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21847";>#21847</a>)</p> </li> <li> <p>Accept the <code>optimization.minimize: true</code> shorthand set by a plugin in <code>apply()</code>. (by <a href="https://github.com/AgentEnder";><code>@AgentEnder</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21845";>#21845</a>)</p> </li> </ul> <h2>v5.110.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>Wrap concatenated modules in lazy <code>__webpack_require__.cw</code> accessors and inline <code>require()</code>, keeping a wrapped body's names and side effects intact. (by <a href="https://github.com/hai-x";><code>@hai-x</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21519";>#21519</a>)</p> </li> <li> <p>Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, <code>eval</code>, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends <code>optimization.runtimeChunk</code>. Enable every check not set individually with <code>performance.all</code>, report hints in stats only with <code>performance.hints: "stats"</code>, and get them in a stable order that leaves the build hashes unchanged. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> <li> <p>Add the <code>descriptionRelativePath</code> module rule condition. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21705";>#21705</a>)</p> </li> <li> <p>Add OS-independent <code>glob</code> matching to module rules. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21771";>#21771</a>)</p> </li> <li> <p>Report inner-graph, AMD and bare <code>module</code> bailouts in <code>optimizationBailout</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21740";>#21740</a>)</p> </li> <li> <p>Allow marking externals as side-effect-free with a <code>sideEffects</code> flag. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21712";>#21712</a>)</p> </li> <li> <p>Give externals the original request of a context module element. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21780";>#21780</a>)</p> </li> <li> <p>Add the <code>externalsPresets.nodeModules</code> preset with an <code>allowlist</code> option to externalize installed packages, replacing the <code>webpack-node-externals</code> plugin. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21569";>#21569</a>)</p> </li> <li> <p>Add <code>output.library.umdAmdContainer</code> for an AMD-style loader branch in UMD. (by <a href="https://github.com/hai-x";><code>@hai-x</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21770";>#21770</a>)</p> </li> <li> <p>Resolve <code>@custom-media</code> values that are <code>true</code> / <code>false</code> or name another custom media. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21624";>#21624</a>)</p> </li> <li> <p>Add the <code>__webpack_css_server_styles__</code> module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21576";>#21576</a>)</p> </li> <li> <p>Patch the HTML <code><head></code> in place on hot update instead of forcing a full reload, including when a <code><script></code> that never executed is removed. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21624";>#21624</a>)</p> </li> <li> <p>Scope counter names in CSS modules; fix the <code>counter()</code> counter-style and <code>animation</code> timeline keywords. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21600";>#21600</a>)</p> </li> <li> <p>Derive <code>import defer</code> / <code>import source</code> from the target and fix the source phase. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21810";>#21810</a>)</p> </li> <li> <p>Emit analyzable ESM urls for chunks, assets, styles, workers and wasm. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21788";>#21788</a>)</p> </li> <li> <p>Tree shake CommonJS: <code>module.exports</code> object literals, exports destructured from a <code>require()</code> binding, unused method requires, and unused side-effect-free <code>require()</code> calls and reexports. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> <li> <p>Resolve relative entry <code>baseUri</code> values and bake one side of a hash cycle. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21750";>#21750</a>)</p> </li> <li> <p>Minify CSS further, only where the document is unchanged: shorthands and box longhands, <code>font-weight</code>, <code><position></code> and <code>font-stretch</code> keywords, colors (polar, Lab and <code>hsl()</code> converted to hex), numbers, times, zero units, <code>calc()</code> and every math function the spec names folded over constants, selector lists, An+B, keyframe selectors, media-feature ranges, <code>unicode-range</code>, <code>transition</code> layers, <code>display</code>, transforms, gradients, font families, identical repeated declarations, and rules an identical later one makes dead. Abilities are read off the target browsers, <code>vendorPrefixes</code> adds and drops vendor prefixes for them, and <code>rewriteCustomProperties</code> shortens custom property values. Minification never changes whether a declaration parses, and beautifying keeps every rule. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href= "https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> <li> <p>Safely minify CSS (with source maps) and HTML assets when <code>optimization.minimize</code> is enabled, unless a minimizer is already configured for them, making only transformations an engine cannot tell apart. Every rewrite is named as an option, so it can be switched off. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/webpack/webpack/blob/main/CHANGELOG.md";>webpack's changelog</a>.</em></p> <blockquote> <h2>5.110.1</h2> <h3>Patch Changes</h3> <ul> <li> <p>Fix a capture-group-less <code>snapshot.managedPaths</code> RegExp; speed up cache writes. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21843";>#21843</a>)</p> </li> <li> <p>Throw <code>SyntaxError</code>, or <code>WebAssembly.CompileError</code>, from an unparsable module. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21847";>#21847</a>)</p> </li> <li> <p>Accept the <code>optimization.minimize: true</code> shorthand set by a plugin in <code>apply()</code>. (by <a href="https://github.com/AgentEnder";><code>@AgentEnder</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21845";>#21845</a>)</p> </li> </ul> <h2>5.110.0</h2> <h3>Minor Changes</h3> <ul> <li> <p>Wrap concatenated modules in lazy <code>__webpack_require__.cw</code> accessors and inline <code>require()</code>, keeping a wrapped body's names and side effects intact. (by <a href="https://github.com/hai-x";><code>@hai-x</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21519";>#21519</a>)</p> </li> <li> <p>Add performance hints reporting what a build costs: duplicate packages and modules, circular dependencies, broad contexts, large modules and chunks, hotspots, <code>eval</code>, missing PURE annotations, polyfills, redundant dynamic imports, OS-dependent rules, cache effectiveness, how chunks load, what splitting refused, why an optimization was skipped, and rules, defines, externals, aliases and barrel reexports nothing uses. An oversized asset names its largest modules, and an entrypoint carrying the runtime recommends <code>optimization.runtimeChunk</code>. Enable every check not set individually with <code>performance.all</code>, report hints in stats only with <code>performance.hints: "stats"</code>, and get them in a stable order that leaves the build hashes unchanged. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> <li> <p>Add the <code>descriptionRelativePath</code> module rule condition. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21705";>#21705</a>)</p> </li> <li> <p>Add OS-independent <code>glob</code> matching to module rules. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21771";>#21771</a>)</p> </li> <li> <p>Report inner-graph, AMD and bare <code>module</code> bailouts in <code>optimizationBailout</code>. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21740";>#21740</a>)</p> </li> <li> <p>Allow marking externals as side-effect-free with a <code>sideEffects</code> flag. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21712";>#21712</a>)</p> </li> <li> <p>Give externals the original request of a context module element. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21780";>#21780</a>)</p> </li> <li> <p>Add the <code>externalsPresets.nodeModules</code> preset with an <code>allowlist</code> option to externalize installed packages, replacing the <code>webpack-node-externals</code> plugin. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21569";>#21569</a>)</p> </li> <li> <p>Add <code>output.library.umdAmdContainer</code> for an AMD-style loader branch in UMD. (by <a href="https://github.com/hai-x";><code>@hai-x</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21770";>#21770</a>)</p> </li> <li> <p>Resolve <code>@custom-media</code> values that are <code>true</code> / <code>false</code> or name another custom media. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21624";>#21624</a>)</p> </li> <li> <p>Add the <code>__webpack_css_server_styles__</code> module variable to read the CSS collected while rendering without a DOM, and keep that CSS in the order the styles were applied. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21576";>#21576</a>)</p> </li> <li> <p>Patch the HTML <code><head></code> in place on hot update instead of forcing a full reload, including when a <code><script></code> that never executed is removed. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21624";>#21624</a>)</p> </li> <li> <p>Scope counter names in CSS modules; fix the <code>counter()</code> counter-style and <code>animation</code> timeline keywords. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21600";>#21600</a>)</p> </li> <li> <p>Derive <code>import defer</code> / <code>import source</code> from the target and fix the source phase. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21810";>#21810</a>)</p> </li> <li> <p>Emit analyzable ESM urls for chunks, assets, styles, workers and wasm. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21788";>#21788</a>)</p> </li> <li> <p>Tree shake CommonJS: <code>module.exports</code> object literals, exports destructured from a <code>require()</code> binding, unused method requires, and unused side-effect-free <code>require()</code> calls and reexports. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> <li> <p>Resolve relative entry <code>baseUri</code> values and bake one side of a hash cycle. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href="https://redirect.github.com/webpack/webpack/pull/21750";>#21750</a>)</p> </li> <li> <p>Minify CSS further, only where the document is unchanged: shorthands and box longhands, <code>font-weight</code>, <code><position></code> and <code>font-stretch</code> keywords, colors (polar, Lab and <code>hsl()</code> converted to hex), numbers, times, zero units, <code>calc()</code> and every math function the spec names folded over constants, selector lists, An+B, keyframe selectors, media-feature ranges, <code>unicode-range</code>, <code>transition</code> layers, <code>display</code>, transforms, gradients, font families, identical repeated declarations, and rules an identical later one makes dead. Abilities are read off the target browsers, <code>vendorPrefixes</code> adds and drops vendor prefixes for them, and <code>rewriteCustomProperties</code> shortens custom property values. Minification never changes whether a declaration parses, and beautifying keeps every rule. (by <a href="https://github.com/alexander-akait";><code>@alexander-akait</code></a> in <a href= "https://redirect.github.com/webpack/webpack/pull/21841";>#21841</a>)</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/webpack/webpack/commit/0b2952e15bb1aa9a198acbbfdcb9a0dc1aabb5af";><code>0b2952e</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack/issues/21846";>#21846</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/2a1fda482086a8d10383554da7a47944c74e2755";><code>2a1fda4</code></a> fix: throw a SyntaxError from a module that failed to parse (<a href="https://redirect.github.com/webpack/webpack/issues/21847";>#21847</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/281efa6d141274fe5ede946fa49fe81a94b010ce";><code>281efa6</code></a> test(css): cover a loader-added BOM in the css pipeline (<a href="https://redirect.github.com/webpack/webpack/issues/21848";>#21848</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/36ded2cbb1d490282675f69c05bafc5e57bef3ed";><code>36ded2c</code></a> fix: accept the optimization.minimize true shorthand after normalization (<a href="https://redirect.github.com/webpack/webpack/issues/21";>#21</a>...</li> <li><a href="https://github.com/webpack/webpack/commit/c15022531a28f2e41c93ac896d3a2c36e3e79116";><code>c150225</code></a> fix(cache): accept a managedPaths RegExp without a capture group, and speed u...</li> <li><a href="https://github.com/webpack/webpack/commit/3a7c0e6e27f90f9c5e407c18506a5034aabcf27d";><code>3a7c0e6</code></a> chore(release): new release (<a href="https://redirect.github.com/webpack/webpack/issues/21545";>#21545</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/75891c89c212ec5e5ebbb3d13fba67192ddba678";><code>75891c8</code></a> chore(changesets): union same-subject entries (<a href="https://redirect.github.com/webpack/webpack/issues/21841";>#21841</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/6b96de733ff1957f599c0c702273c66618027c68";><code>6b96de7</code></a> feat(config): emit no development source map for library builds (<a href="https://redirect.github.com/webpack/webpack/issues/21839";>#21839</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/ff0c83234322f051b7f509a7176243356f9b9346";><code>ff0c832</code></a> feat(css,html): reach embedded source from cssMinify and htmlMinify (<a href="https://redirect.github.com/webpack/webpack/issues/21838";>#21838</a>)</li> <li><a href="https://github.com/webpack/webpack/commit/06bedfbd2a8b0c63078b6e1789b5f769174acfb6";><code>06bedfb</code></a> chore(deps): bump test/wpt in the dependencies group (<a href="https://redirect.github.com/webpack/webpack/issues/21836";>#21836</a>)</li> <li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.109.2...v5.110.1";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
