Bump sha.js and webpack
Open
Number: #41
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Contributor
Comments: 0
![dependabot[bot]](https://github.com/dependabot.png)
Association: Contributor
Comments: 0
Created:
August 22, 2025 at 04:01 AM UTC
(16 days ago)
(16 days ago)
Updated:
August 22, 2025 at 04:01 AM UTC
(16 days ago)
(16 days ago)
Labels:
dependencies javascript
dependencies javascript
Description:
Removes sha.js. It's no longer used after updating ancestor dependency webpack. These dependencies need to be updated together.
Removes sha.js
Updates webpack
from 1.15.0 to 5.101.3
Release notes
Sourced from webpack's releases.
v5.101.3
Fixes
- Fixed resolve execution order issue from extra await in async modules
- Avoid empty block for unused statement
- Collect only specific expressions for destructuring assignment
v5.101.2
Fixes
- Fixed syntax error when comment is on the last line
- Handle var declaration for
createRequire
- Distinguish free variable and tagged variable
v5.101.1
Fixes
- Filter deleted assets in
processAdditionalAssets
hook- HMR failure in defer module
- Emit assets even if invalidation occurs again
- Export types for serialization and deserialization in plugins and export the
ModuleFactory
class- Fixed the failure export of internal function for ES module chunk format
- Fixed
GetChunkFilename
failure caused bydependOn
entry- Fixed the import of missing dependency chunks
- Fixed when entry chunk depends on the runtime chunk hash
- Fixed
module.exports
bundle to ESM library- Adjusted the time of adding a group depending on the fragment of execution time
- Fixed circle dependencies when require
RawModule
and condition ofisDeferred
- Tree-shakable module library should align preconditions of
allowInlineStartup
v5.101.0
Fixes
- Fixed concatenate optimization for ESM that caused undefined export
- Respect the
output.environment.nodePrefixForCoreModules
option everywhere- Respect the
output.importMetaName
option everywhere- Fixed await async dependencies when accepting them during HMR
- Better typescript types
Features
- Added colors helpers for CLI
- Enable tree-shaking for ESM external modules with named imports
- Added the
deferImport
option to parser optionsPerformance Improvements
- Fixed a regression in module concatenation after implementing deferred import support
- Fixed a potential performance issue in CleanPlugin
- Avoid extra
require
in some places
... (truncated)
Commits
07b1ac0
chore(release): 5.101.38d7efb8
chore(deps-dev): bump the dependencies group with 2 updates (#19816)935cbd8
docs: update examples (#19812)dc79e95
fix: collect only specific expressions for destructuring assignment90ae8af
fix: avoid empty block for unused statement8db97f8
fix: resolve execution order issue from extra await in async modulesc92deaf
ci: pin Node.js 24.x to 24.5.0 in CI workflow (#19813)c50930b
refactor(test): correct the value retrieval613a5ad
chore(deps-dev): bump@babel/core
in the dependencies group (#19807)1d9cc24
chore(release): 5.101.2- Additional commits viewable in compare view
Maintainer changes
This version was pushed to npm by evilebottnawi, a new releaser for webpack since your current version.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore this major version
will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor version
will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependency
will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
Commits:
1
1
Files Changed:
2
2
Additions:
+9886
+9886
Deletions:
-7077
-7077
Technical Details
ID: | 5622526 |
UUID: | 2765065971 |
Node ID: | PR_kwDODihtXc6kz47z |
Host: | GitHub |
Repository: | csancor/javascript-env |
Merge State: | Unknown |