Bump webpack from 5.89.0 to 5.102.0
Open
Number: #215
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: None
Comments: 0
Association: None
Comments: 0
Created:
September 30, 2025 at 08:11 AM UTC
(about 2 months ago)
(about 2 months ago)
Updated:
September 30, 2025 at 08:11 AM UTC
(about 2 months ago)
(about 2 months ago)
Labels:
dependencies javascript
dependencies javascript
Description:
Bumps webpack from 5.89.0 to 5.102.0.
Release notes
Sourced from webpack's releases.
v5.102.0
Features
- Added static analyze for dynamic imports
- Added support for
import file from "./file.ext" with { type: "bytes" }to get the content asUint8Array(look at example)- Added support for
import file from "./file.ext" with { type: "text" }to get the content as text (look at example)- Added the
snapshot.contextModuleto configure snapshots options for context modules- Added the
extractSourceMapoption to implement the capabilities of loading source maps by comment, you don't needsource-map-loader(look at example)- The
topLevelAwaitexperiment is now stable (you can removeexperiments.topLevelAwaitfrom yourwebpack.config.js)- The
layersexperiment is now stable (you can removeexperiments.layersfrom yourwebpack.config.js)- Added function matcher support in rule options
Fixes
- Fixed conflicts caused by multiple concatenate modules
- Ignore import failure during HMR update with ES modules output
- Keep render module order consistent
- Prevent inlining modules that have
thisexports- Removed unused
timeoutattribute of script tag- Supported UMD chunk format to work in web workers
- Improved CommonJs bundle to ES module library
- Use
es-lexerformjsfiles for build dependencies- Fixed support
__non_webpack_require__for ES modules- Properly handle external modules for CSS
- AssetsByChunkName included assets from
chunk.auxiliaryFiles- Use
createRequireonly when output is ES module and target is node- Typescript types
Performance Improvements
- Avoid extra calls for snapshot
- A avoid extra jobs for build dependencies
- Move import attributes to own dependencies
v5.101.3
Fixes
- Fixed resolve execution order issue from extra await in async modules
- Avoid empty block for unused statement
- Collect only specific expressions for destructuring assignment
v5.101.2
Fixes
- Fixed syntax error when comment is on the last line
- Handle var declaration for
createRequire- Distinguish free variable and tagged variable
v5.101.1
Fixes
... (truncated)
Commits
14c813achore(release): 5.102.0761b153feat: support function matcher in rule options (#19952)8c0fa9efeat: tree shaking nested exports for destructuring assignment (#19955)0a58530chore(deps): bump actions/dependency-review-action from 4.7.3 to 4.8.0 (#19958)042bf86fix: integrity in http-url test (#19954)d9121b3docs: use markdown instead html (#19938)3f00777docs: remove unused files (#19937)3cf0d95chore: add lfx badge (#19934)84e5c12fix: should analyze correct variable for dynamic import (#19936)44cf16fdocs: Revise security policy and reporting guidelines (#19886)- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Pull Request Statistics
Commits:
1
1
Files Changed:
2
2
Additions:
+623
+623
Deletions:
-392
-392
Package Dependencies
Technical Details
| ID: | 8835726 |
| UUID: | 2873372453 |
| Node ID: | PR_kwDOKrVUDs6rRC8l |
| Host: | GitHub |
| Repository: | GleapSDK/JavaScript-AdminHelper-SDK |
| Merge State: | Unknown |