Bumps [webpack](https://github.com/webpack/webpack) from 5.69.1 to 5.70.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.70.0</h2>
<h1>Features</h1>
<ul>
<li>update node.js version constraints for ESM support</li>
<li>add <code>baseUri</code> to <code>entry</code> options to configure a static base uri (the base of <code>new URL()</code>)</li>
<li>alphabetically sort exports in namespace objects when possible</li>
<li>add <code>__webpack_exports_info__.name.canMangle</code></li>
<li>add proxy support to <code>experiments.buildHttp</code></li>
<li><code>import.meta.webpackContext</code> as ESM alternative to <code>require.context</code></li>
<li>handle multiple alternative directories (e. g. due to resolve.alias or resolve.modules) when creating an context module</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix problem when assigning <code>global</code> to a variable</li>
<li>fix crash when using <code>experiments.outputModule</code> and <code>loaderContext.importModule</code> with multiple chunks</li>
<li>avoid generating progress output before the compilation has started (ProgressPlugin)</li>
<li>fix handling of non-static-ESM dependencies with using TLA and HMR in the same module</li>
<li>include the asset module filename in hashing</li>
<li><code>output.clean</code> will keep HMR assets for at least 10s to allow HMR to access them even when compilation is faster then the browser</li>
</ul>
<h1>Performance</h1>
<ul>
<li>fix asset caching when using the BannerPlugin</li>
</ul>
<h1>Developer Experience</h1>
<ul>
<li>improve typings</li>
</ul>
<h1>Contributing</h1>
<ul>
<li>capture caching errors when running the test suite</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="5a26b7c4a9"><code>5a26b7c</code></a> 5.70.0</li>
<li><a href="870fcadfd0"><code>870fcad</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15423">#15423</a> from webpack/fix/issue-15409</li>
<li><a href="cbfea7605d"><code>cbfea76</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15463">#15463</a> from webpack/fix/add-missing-option</li>
<li><a href="f51e099a2d"><code>f51e099</code></a> add parserOptions.importMetaContext option</li>
<li><a href="75383c93d2"><code>75383c9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15454">#15454</a> from webpack/fix/issue-15447</li>
<li><a href="b53fe2f630"><code>b53fe2f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15446">#15446</a> from webpack/feature/import-meta-webpack-context</li>
<li><a href="0fe44700f7"><code>0fe4470</code></a> up enhanced-resolve version</li>
<li><a href="12ecab44fc"><code>12ecab4</code></a> use cache in BannerPlugin</li>
<li><a href="d3c5d357cc"><code>d3c5d35</code></a> add ImportMetaContextPlugin</li>
<li><a href="b89f397e3c"><code>b89f397</code></a> handle more options</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.69.1...v5.70.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
This Pull Request fixes/closes #1670.
It changes the following:
- Removes the "js" feature by default from getrandom for wasm (still there for boa_wasm)
- Updates dependencies
Note that this change was introduced in #1521, after #1475. We must make sure that the issue doesn't come back.
Bumps [webpack](https://github.com/webpack/webpack) from 5.69.0 to 5.69.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.69.1</h2>
<h1>Revert</h1>
<ul>
<li>revert "handle multiple alternative directories (e. g. due to resolve.alias or resolve.modules) when creating an context module"</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="dfdc8b133d"><code>dfdc8b1</code></a> 5.69.1</li>
<li><a href="dd53923cd0"><code>dd53923</code></a> Revert "Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15332">#15332</a> from webpack/fix/context-resolve-issue-11335"</li>
<li>See full diff in <a href="https://github.com/webpack/webpack/compare/v5.69.0...v5.69.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.68.0 to 5.69.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.69.0</h2>
<h1>Features</h1>
<ul>
<li>automatically switch to an ESM compatible environment when enabling ESM output mode</li>
<li>handle multiple alternative directories (e. g. due to <code>resolve.alias</code> or <code>resolve.modules</code>) when creating an context module</li>
<li>add <code>util/types</code> to node.js built-in modules</li>
<li>add <code>__webpack_exports_info__.<name>.canMangle</code> api</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix bug in chunk graph generation which leads to modules being included in chunk desprite them being already included in parent chunks</li>
<li>avoid writing more than 2GB at once during cache serialization (as workaround for node.js/libuv bug on MacOS)</li>
<li>fix handling of whitespaces in semver ranges when using Module Federation</li>
<li>avoid generating hashes which contain only numbers as they likely conflict with module ids</li>
<li>fix resource name based placeholders for data uris</li>
<li>fix cache serialization for context elements</li>
<li>fix passing of <code>stage</code> option when instrumenting plugins for the ProfilingPlugin</li>
<li>fix tracking of declarations in concatenated modules to avoid conflicts</li>
<li>fix unstable mangling of exports</li>
<li>fix handling of <code>#</code> in paths of loaders</li>
<li>avoid unnecessary cache update when using <code>experiments.buildHttp</code></li>
</ul>
<h1>Contributing</h1>
<ul>
<li>update typescript and jest</li>
</ul>
<h1>Developer Experience</h1>
<ul>
<li>expose some additional typings for usage in webpack-cli</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="9d21401151"><code>9d21401</code></a> 5.69.0</li>
<li><a href="ba4e83c3a9"><code>ba4e83c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15373">#15373</a> from webpack/fix/issue-14907</li>
<li><a href="7badefda01"><code>7badefd</code></a> remove big assets case from allowlist</li>
<li><a href="06c8b81531"><code>06c8b81</code></a> Merge remote-tracking branch 'origin/main' into fix/issue-14907</li>
<li><a href="4a53e9af65"><code>4a53e9a</code></a> limit writes to</li>
<li><a href="18c3590b28"><code>18c3590</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15315">#15315</a> from webpack/fix/issue-13022</li>
<li><a href="4edf949da3"><code>4edf949</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15370">#15370</a> from webpack/fix/partial-15366</li>
<li><a href="02332b9c3d"><code>02332b9</code></a> Merge branch 'main' into fix/partial-15366</li>
<li><a href="f52b8c572c"><code>f52b8c5</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14757">#14757</a> from webpack/fix-14755</li>
<li><a href="896efde07d"><code>896efde</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15367">#15367</a> from webpack/fix/issues-15214</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.68.0...v5.69.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.7 to 1.14.8.
<details>
<summary>Commits</summary>
<ul>
<li><a href="3d81dc3237"><code>3d81dc3</code></a> Release version 1.14.8 of the npm package.</li>
<li><a href="62e546a99c"><code>62e546a</code></a> Drop confidential headers across schemes.</li>
<li>See full diff in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.14.7...v1.14.8">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts).
</details>
This PR boxes the `Try` and `TaggedTemplate` nodes reducing the size of the `Node` structure from 88 to 56 bytes. This should improve performance in most cases, by adding another indirection with code with `try` and templates.
This commit selects the production build (instead of development) for the WebAssembly compilation with Webpack, used in our playground. This might make things a bit faster and smaller.
I also took the opportunity to update all the dependencies and the Test262 suite, but unfortunately this doesn't solve #1824.
Bumps [webpack](https://github.com/webpack/webpack) from 5.67.0 to 5.68.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.68.0</h2>
<h1>Features</h1>
<ul>
<li>allow to disable compile time evaluation of import.meta.url</li>
<li>add <code>__webpack_module__</code> and <code>__webpack_module__.id</code> to the api</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix handling of errors thrown in async modules</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="f593d98453"><code>f593d98</code></a> 5.68.0</li>
<li><a href="6f3735c548"><code>6f3735c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15279">#15279</a> from taranek/docs/array-helpers-docs</li>
<li><a href="04039ca99c"><code>04039ca</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15284">#15284</a> from webpack/feature/<strong>webpack_module</strong></li>
<li><a href="d7a87ab5bc"><code>d7a87ab</code></a> change <strong>webpack_module_id</strong> to <strong>webpack_module</strong>.id</li>
<li><a href="612de998f1"><code>612de99</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15282">#15282</a> from webpack/feature/<strong>webpack_module</strong></li>
<li><a href="a962d2cedd"><code>a962d2c</code></a> add <strong>webpack_module</strong> and <strong>webpack_module_id</strong> to the api</li>
<li><a href="5a3760e6d4"><code>5a3760e</code></a> docs(util): added jsdoc annotations for ArrayHelpers.js</li>
<li><a href="46e8639a6a"><code>46e8639</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15246">#15246</a> from pavelsavara/import_meta_url</li>
<li><a href="1e73ca79c4"><code>1e73ca7</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15266">#15266</a> from webpack/bugfix/throwing-in-async-modules</li>
<li><a href="232403c5e8"><code>232403c</code></a> fix discussions</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.67.0...v5.68.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) from 10.2.2 to 10.2.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/copy-webpack-plugin/releases">copy-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v10.2.3</h2>
<h3><a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v10.2.2...v10.2.3">10.2.3</a> (2022-01-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>async <code>to</code> support (<a href="fd095fb793">fd095fb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md">copy-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h3><a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v10.2.2...v10.2.3">10.2.3</a> (2022-01-29)</h3>
<h3>Bug Fixes</h3>
<ul>
<li>async <code>to</code> support (<a href="fd095fb793">fd095fb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="9a5a4c44ef"><code>9a5a4c4</code></a> chore(release): 10.2.3</li>
<li><a href="fd095fb793"><code>fd095fb</code></a> fix: async <code>to</code> support</li>
<li>See full diff in <a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v10.2.2...v10.2.3">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
The main idea behind this is to upgrade the Unicode version from 13 to 14. I also upgraded the rest of the dependencies, so this closes#1802, #1800 and #1799.
This builds on top of #1758 to try to bring #1763 to life.
Something that should probably be done here would be to convert `JsString` to a `Sym` internally. Then, further optimizations could be done adding common strings to a custom interner type (those that we know statically).
This is definitely work in progress, but I would like to have feedback on the API, and feel free to contribute.
Co-authored-by: raskad <32105367+raskad@users.noreply.github.com>
This Pull Request is part of #279.
It adds a string interner to Boa, which allows many types to not contain heap-allocated strings, and just contain a `NonZeroUsize` instead. This can move types to the stack (hopefully I'll be able to move `Token`, for example, maybe some `Node` types too.
Note that the internet is for now only available in the lexer. Next steps (in this PR or future ones) would include also using interning in the parser, and finally in execution. The idea is that strings should be represented with a `Sym` until they are displayed.
Talking about display. I have changed the `ParseError` type in order to not contain anything that could contain a `Sym` (basically tokens), which might be a bit faster, but what is important is that we don't depend on the interner when displaying errors.
The issue I have now is in order to display tokens. This requires the interner if we want to know identifiers, for example. The issue here is that Rust doesn't allow using a `fmt::Formatter` (only in nightly), which is making my head hurt. Maybe someone of you can find a better way of doing this.
Then, about `cursor.expect()`, this is the only place where we don't have the expected token type as a static string, so it's failing to compile. We have the option of changing the type definition of `ParseError` to contain an owned string, but maybe we can avoid this by having a `&'static str` come from a `TokenKind` with the default values, such as "identifier" for an identifier. I wanted for you to think about it and maybe we can just add that and avoid allocations there.
Oh, and this depends on the VM-only branch, so that has to be merged before :)
Another thing to check: should the interner be in its own module?
Bumps [follow-redirects](https://github.com/follow-redirects/follow-redirects) from 1.14.6 to 1.14.7.
<details>
<summary>Commits</summary>
<ul>
<li><a href="2ede36d7c6"><code>2ede36d</code></a> Release version 1.14.7 of the npm package.</li>
<li><a href="8b347cbcef"><code>8b347cb</code></a> Drop Cookie header across domains.</li>
<li>See full diff in <a href="https://github.com/follow-redirects/follow-redirects/compare/v1.14.6...v1.14.7">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/boa-dev/boa/network/alerts).
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.65.0 to 5.66.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.66.0</h2>
<h1>Features</h1>
<ul>
<li>add <code>output.library.type: "commonjs-static"</code> to emit a statically analyse-able commonjs module (for node.js esm interop support)</li>
<li>add <code>experiments.css</code> (very experimental)
<ul>
<li>see <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14893">webpack/webpack#14893</a></li>
</ul>
</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix CORS headers for <code>experiments.lazyCompilation</code></li>
<li>fix <code>[absolute-resource-path]</code> for SourceMap module naming</li>
<li>avoid stack overflow when accessing many memory cached cache values in series</li>
</ul>
<h1>Performance</h1>
<ul>
<li>reduce default <code>watchOptions.aggregateTimeout</code> to 20ms</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="0105bc1f00"><code>0105bc1</code></a> 5.66.0</li>
<li><a href="753fdea847"><code>753fdea</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15047">#15047</a> from dtanders/Fix-MultiItemCache-Stack-Exhaustion</li>
<li><a href="149333f210"><code>149333f</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14998">#14998</a> from JakobJingleheimer/support-cjs-static-named-exp...</li>
<li><a href="016ec7bcdb"><code>016ec7b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15010">#15010</a> from webpack/test/large-cache-file</li>
<li><a href="83a0e611c4"><code>83a0e61</code></a> update cli snapshot</li>
<li><a href="2f2991a967"><code>2f2991a</code></a> Merge branch 'main' into support-cjs-static-named-exports</li>
<li><a href="102014bf54"><code>102014b</code></a> fix target expression</li>
<li><a href="5929bfcf35"><code>5929bfc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/15041">#15041</a> from markjm/markjm/aggregate-timeout</li>
<li><a href="b54f2ac65c"><code>b54f2ac</code></a> use forEachBail from enhanced-resolve</li>
<li><a href="98887e42fc"><code>98887e4</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14434">#14434</a> from buzuosheng/fix-chunkId</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.65.0...v5.66.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [monaco-editor](https://github.com/microsoft/monaco-editor) from 0.31.0 to 0.31.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md">monaco-editor's changelog</a>.</em></p>
<blockquote>
<h2>[0.31.1] (14.12.2021)</h2>
<ul>
<li>Fixes <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/2822">a problem with missing colors</a></li>
<li>Fixes <a href="https://github-redirect.dependabot.com/microsoft/vscode/issues/138887">a problem with scheduling background tokenization</a></li>
<li>Improves TypeScript's ESM worker.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a href="https://github.com/microsoft/monaco-editor/commits">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.64.4 to 5.65.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.65.0</h2>
<h1>Features</h1>
<ul>
<li>static evaluation understands <code>undefined</code> now</li>
<li>reduce container entry code by a few chars</li>
<li>use template literals when available and they make sense</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>handle <code>singleton</code> flag without <code>requiredVersion</code> in Module Federation</li>
<li>upgrade <code>watchpack</code> for context time info bugfix</li>
</ul>
<h1>Performance</h1>
<ul>
<li>improve RegExp in error message formating for non-quadratic performance</li>
</ul>
<h1>Developer Experience</h1>
<ul>
<li>automatically insert brackets when <code>output.globalObject</code> contains a non-trival expression</li>
<li>show error when using <code>script</code> type external with invalid syntax</li>
<li>expose types for <code>Resolver</code>, <code>StatsOptions</code> and <code>ResolvePluginInstance</code></li>
</ul>
<h1>Preparations for the future</h1>
<ul>
<li><code>hashDigestLength</code> will default to 16 in webpack 6 (<code>experiments.futureDefaults</code>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="323d65e2b1"><code>323d65e</code></a> 5.65.0</li>
<li><a href="f3423dfcf1"><code>f3423df</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14912">#14912</a> from webpack/deps/watchpack</li>
<li><a href="0abc39cefa"><code>0abc39c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14908">#14908</a> from webpack/dependabot/npm_and_yarn/prettier-2.5.1</li>
<li><a href="b09c45aa74"><code>b09c45a</code></a> upgrade watchpack for bugfix</li>
<li><a href="adeb73a2ad"><code>adeb73a</code></a> chore(deps-dev): bump prettier from 2.5.0 to 2.5.1</li>
<li><a href="0bc3a2ea02"><code>0bc3a2e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14884">#14884</a> from colacadstink/main</li>
<li><a href="bbe72b3eae"><code>bbe72b3</code></a> Added testing for new singleton logic (and caught a typo in the process!)</li>
<li><a href="dc70535ef8"><code>dc70535</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14855">#14855</a> from webpack/rebase/12875</li>
<li><a href="c9ffb83327"><code>c9ffb83</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14861">#14861</a> from webpack/fix-runtime-template</li>
<li><a href="4127edba92"><code>4127edb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14886">#14886</a> from webpack/dependabot/npm_and_yarn/simple-git-2.48.0</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.64.4...v5.65.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.64.2 to 5.64.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.64.4</h2>
<h1>Bugfixes</h1>
<ul>
<li>fix tagged template literal evaluation</li>
<li>fix ModuleFederation with ESM</li>
<li>fix outputModule with intial splitChunks</li>
</ul>
<h1>Performance</h1>
<ul>
<li>upgrade watchpack for faster watcher updating</li>
<li>track file and directory timestamps separately in watchpack and webpack</li>
</ul>
<h1>Developer Experience</h1>
<ul>
<li>show origin of singleton shared module in mismatch warning</li>
</ul>
<h2>v5.64.3</h2>
<h1>Performance</h1>
<ul>
<li>allow to use pre-compiled schema when <code>Infinity</code> is used in configuration</li>
<li>allow to use pre-compiled schema for configuration arrays</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="d3cd4cb6e3"><code>d3cd4cb</code></a> 5.64.4</li>
<li><a href="4f9fafc73e"><code>4f9fafc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14829">#14829</a> from webpack/bugfix/split-chunks-esm</li>
<li><a href="093eadfdb4"><code>093eadf</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14827">#14827</a> from webpack/bugfix/mf-module</li>
<li><a href="c69e37c39d"><code>c69e37c</code></a> fix outputModule with initial splitChunks</li>
<li><a href="041287ff58"><code>041287f</code></a> fix test problem</li>
<li><a href="c3691df740"><code>c3691df</code></a> fix CI problems</li>
<li><a href="d91248711b"><code>d912487</code></a> fix and test module federation with ESM</li>
<li><a href="ac9a2c87ed"><code>ac9a2c8</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14782">#14782</a> from tanhauhau/tanhauhau/show-which-container-loade...</li>
<li><a href="ce0f0b3a16"><code>ce0f0b3</code></a> update test case</li>
<li><a href="68c4a2a0a9"><code>68c4a2a</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14728">#14728</a> from markjm/markjm/context-timestamps</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.64.2...v5.64.4">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [copy-webpack-plugin](https://github.com/webpack-contrib/copy-webpack-plugin) from 9.1.0 to 10.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/copy-webpack-plugin/releases">copy-webpack-plugin's releases</a>.</em></p>
<blockquote>
<h2>v10.0.0</h2>
<h2><a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v9.1.0...v10.0.0">10.0.0</a> (2021-11-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>minimum supported <code>Node.js</code> version is <code>12.20.0</code></li>
<li>update <code>globby</code> to <code>12.0.2</code> version</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/copy-webpack-plugin/blob/master/CHANGELOG.md">copy-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v9.1.0...v10.0.0">10.0.0</a> (2021-11-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>minimum supported <code>Node.js</code> version is <code>12.20.0</code></li>
<li>update <code>globby</code> to <code>12.0.2</code> version</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="568a66ccca"><code>568a66c</code></a> chore(release): 10.0.0</li>
<li><a href="3a4d0ed959"><code>3a4d0ed</code></a> chore!: minimum supported <code>Node.js</code> version is <code>12.20.0</code></li>
<li><a href="23a43011f3"><code>23a4301</code></a> chore(deps): update globby (<a href="https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/641">#641</a>)</li>
<li><a href="5222a28ef5"><code>5222a28</code></a> chore(deps): update (<a href="https://github-redirect.dependabot.com/webpack-contrib/copy-webpack-plugin/issues/640">#640</a>)</li>
<li>See full diff in <a href="https://github.com/webpack-contrib/copy-webpack-plugin/compare/v9.1.0...v10.0.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.64.0 to 5.64.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.64.1</h2>
<h1>Bugfixes</h1>
<ul>
<li>fix regexp in managedPaths to exclude additional slash</li>
<li>make module.accept errorHandler optional in typings</li>
<li>correctly create an async chunk when using a <code>require(...).property</code> in <code>require.ensure</code></li>
<li>fix cleaning of symlinks in <code>output.clean: true</code></li>
<li>fix change detection with <code>unsafeCache</code> within <code>managedPaths</code> (node_modules)</li>
<li>bump webpack-sources for Stack Overflow bugfix</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="3d5503a5b5"><code>3d5503a</code></a> 5.64.1</li>
<li><a href="1f75ab01fe"><code>1f75ab0</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14737">#14737</a> from webpack/dependabot/npm_and_yarn/webpack-source...</li>
<li><a href="0f90f75a0e"><code>0f90f75</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14736">#14736</a> from webpack/dependabot/npm_and_yarn/terser-5.10.0</li>
<li><a href="0fd96aca4f"><code>0fd96ac</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14735">#14735</a> from webpack/bugfix/unsafe-cache-managed-paths</li>
<li><a href="cae22d1888"><code>cae22d1</code></a> fallback to normal snapshotting when managed path optimization fails</li>
<li><a href="98ea582bf0"><code>98ea582</code></a> watch package.json for managed directories</li>
<li><a href="bbd039a7ac"><code>bbd039a</code></a> update package.json</li>
<li><a href="5cba448bfb"><code>5cba448</code></a> update snapshot</li>
<li><a href="d73bd6996c"><code>d73bd69</code></a> chore(deps): bump webpack-sources from 3.2.1 to 3.2.2</li>
<li><a href="65d795e5a7"><code>65d795e</code></a> chore(deps-dev): bump terser from 5.9.0 to 5.10.0</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.64.0...v5.64.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.61.0 to 5.64.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.64.0</h2>
<h1>Features</h1>
<ul>
<li>add <code>asyncChunks: boolean</code> option to disable creation of async chunks</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix ProfilingPlugin for <code>experiments.backCompat: false</code></li>
</ul>
<h1>Performance</h1>
<ul>
<li>avoid running regexp twice over the file list</li>
</ul>
<h2>v5.63.0</h2>
<h1>Features</h1>
<ul>
<li>allow passing <code>chunkLoading: false</code> to disable on-demand loading</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix <code>import 'single-quote'</code> in esm build dependencies</li>
</ul>
<h2>v5.62.2</h2>
<h1>Bugfixes</h1>
<ul>
<li>fix <code>__system_context__</code> injection when using the <code>library</code> option on entrypoint</li>
<li>enable <code>exportsPresence: "error"</code> by default in <code>futureDefaults</code></li>
<li>fix bad performance for a RegExp in Stats printing (with large error messages)</li>
<li>fix <code>exportPresence</code> -> <code>exportsPresence</code> typo</li>
<li>fix a bug with module invalidation when only module id changes with <code>experiments.cacheUnaffected</code></li>
</ul>
<h2>v5.62.1</h2>
<h1>Bugfix</h1>
<ul>
<li>fix invalid generated code when omitting <code>;</code></li>
</ul>
<h2>v5.62.0</h2>
<h1>Features</h1>
<ul>
<li>add options to configure export presence checking
<ul>
<li><code>parser.javascript.reexportExportsPresence: false</code> allows to disable warnings for non-existing exports during the migration from <code>export ... from "..."</code> to <code>export type ... from "..."</code> for type reexports in TypeScript</li>
</ul>
</li>
<li>add <code>experiments.backCompat: false</code> to disable some expensive deprecations for better performance</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>use <code>['catch']</code> instead of <code>.catch</code> for better ES3 support</li>
<li>fix removed parentheses when using <code>new (require("...")).Something()</code></li>
<li>fix <code>{ require }</code> object literals</li>
<li><code>splitChunks.chunks</code> option is now correctly used for <code>splitChunks.fallbackCacheGroup.maxSize</code> too</li>
<li>fix schema of <code>listen</code> option, allow to omit <code>port</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="789e58514b"><code>789e585</code></a> 5.64.0</li>
<li><a href="d96f23e9b0"><code>d96f23e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14698">#14698</a> from webpack/bugfix/profiling-plugin-hook-check</li>
<li><a href="ac7bd40526"><code>ac7bd40</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14701">#14701</a> from webpack/feature/no-async-chunk-loading</li>
<li><a href="9bb5651e6a"><code>9bb5651</code></a> add <code>asyncChunks: boolean</code> option to disable creation of async chunks</li>
<li><a href="11bc877b42"><code>11bc877</code></a> add test case</li>
<li><a href="970b368bda"><code>970b368</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14686">#14686</a> from webpack/dependabot/npm_and_yarn/mime-types-2.1.34</li>
<li><a href="6a12794b11"><code>6a12794</code></a> check hooks for existance before using in ProfilingPlugin</li>
<li><a href="e6da1d4420"><code>e6da1d4</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14694">#14694</a> from markjm/markjm/double-regexp</li>
<li><a href="6d3cd42008"><code>6d3cd42</code></a> perf: Prevent running regexs over the same strings twice</li>
<li><a href="f011c70aac"><code>f011c70</code></a> 5.63.0</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.61.0...v5.64.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [monaco-editor](https://github.com/microsoft/monaco-editor) from 0.30.0 to 0.30.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md">monaco-editor's changelog</a>.</em></p>
<blockquote>
<h2>[0.30.1] (09.11.2021)</h2>
<ul>
<li>Fixes <a href="https://github-redirect.dependabot.com/microsoft/monaco-editor/issues/2750">a performance regression where all languages would be loaded when loading the first language</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="5a7ba61be9"><code>5a7ba61</code></a> 0.30.1</li>
<li><a href="5af2334c5e"><code>5af2334</code></a> Prepare for <code>0.30.1</code></li>
<li><a href="a6ebcecf27"><code>a6ebcec</code></a> Avoid loading the entire language service on the main thread code</li>
<li><a href="9eba6e70b8"><code>9eba6e7</code></a> Skip copying <code>monaco.d.ts</code> to the <code>release</code> folder</li>
<li><a href="13b1e47f23"><code>13b1e47</code></a> Combine <code>.gitignore</code> files</li>
<li><a href="953db09db8"><code>953db09</code></a> Move <code>settings.json</code> up to root</li>
<li><a href="1a21834a97"><code>1a21834</code></a> Simplify paths in <code>metadata.js</code></li>
<li><a href="a155838b58"><code>a155838</code></a> Restore editor release task</li>
<li><a href="f21d9494a2"><code>f21d949</code></a> Fix compilation errors</li>
<li><a href="84bdc31efe"><code>84bdc31</code></a> run <code>prettier</code></li>
<li>Additional commits viewable in <a href="https://github.com/microsoft/monaco-editor/compare/v0.30.0...v0.30.1">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.60.0 to 5.61.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.61.0</h2>
<h1>Bugfixes</h1>
<ul>
<li>use a wasm md4 implementation for node 17 support</li>
<li>include the <code>path</code> submodules in the node.js default externals</li>
</ul>
<h1>Performance</h1>
<ul>
<li>improve string to binary conversion performance for hashing</li>
</ul>
<h1>Contribution</h1>
<ul>
<li>CI runs on node.js 17</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="0306510f7d"><code>0306510</code></a> 5.61.0</li>
<li><a href="42b4ffb01a"><code>42b4ffb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14594">#14594</a> from webpack/ci/node-17</li>
<li><a href="c2b6f7866e"><code>c2b6f78</code></a> fix test cases for node 17</li>
<li><a href="1d7f6da416"><code>1d7f6da</code></a> run CI on node 17</li>
<li><a href="1992e9ce2b"><code>1992e9c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14583">#14583</a> from juanrgm/fix/path-submodules-14582</li>
<li><a href="0f6c78cca1"><code>0f6c78c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14584">#14584</a> from webpack/hash/md4</li>
<li><a href="a6bb3e58ec"><code>a6bb3e5</code></a> default to the default hash function</li>
<li><a href="205d3a05ee"><code>205d3a0</code></a> add support for additional digest types</li>
<li><a href="d806cf5294"><code>d806cf5</code></a> use correct batch size for BatchedHash</li>
<li><a href="7afc833092"><code>7afc833</code></a> improve micro benchmarks</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.60.0...v5.61.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [css-loader](https://github.com/webpack-contrib/css-loader) from 6.4.0 to 6.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/releases">css-loader's releases</a>.</em></p>
<blockquote>
<h2>v6.5.0</h2>
<h2><a href="https://github.com/webpack-contrib/css-loader/compare/v6.4.0...v6.5.0">6.5.0</a> (2021-10-26)</h2>
<h3>Features</h3>
<ul>
<li>support absolute URL in <code>url()</code> when <code>experiments.buildHttp</code> enabled (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1389">#1389</a>) (<a href="8946be4d0f">8946be4</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>respect <code>nosources</code> in the <code>devtool</code> option (<a href="c60eff2123">c60eff2</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/webpack-contrib/css-loader/blob/master/CHANGELOG.md">css-loader's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/webpack-contrib/css-loader/compare/v6.4.0...v6.5.0">6.5.0</a> (2021-10-26)</h2>
<h3>Features</h3>
<ul>
<li>support absolute URL in <code>url()</code> when <code>experiments.buildHttp</code> enabled (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1389">#1389</a>) (<a href="8946be4d0f">8946be4</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>respect <code>nosources</code> in the <code>devtool</code> option (<a href="c60eff2123">c60eff2</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="86d77cadf9"><code>86d77ca</code></a> chore(release): 6.5.0</li>
<li><a href="c60eff2123"><code>c60eff2</code></a> fix: respect <code>nosources</code> in the <code>devtool</code> option</li>
<li><a href="897e7dd250"><code>897e7dd</code></a> refactor: future build <code>@import</code> (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1390">#1390</a>)</li>
<li><a href="8946be4d0f"><code>8946be4</code></a> feat: support absolute URL in <code>url()</code> when <code>experiments.buildHttp</code> enabled (#...</li>
<li><a href="fee058293e"><code>fee0582</code></a> refactor: use new API (<a href="https://github-redirect.dependabot.com/webpack-contrib/css-loader/issues/1387">#1387</a>)</li>
<li>See full diff in <a href="https://github.com/webpack-contrib/css-loader/compare/v6.4.0...v6.5.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [html-webpack-plugin](https://github.com/jantimon/html-webpack-plugin) from 5.4.0 to 5.5.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jantimon/html-webpack-plugin/blob/main/CHANGELOG.md">html-webpack-plugin's changelog</a>.</em></p>
<blockquote>
<h2><a href="https://github.com/jantimon/html-webpack-plugin/compare/v5.4.0...v5.5.0">5.5.0</a> (2021-10-25)</h2>
<h3>Features</h3>
<ul>
<li>Support type=module via scriptLoading option (<a href="1e4262528f">1e42625</a>), closes <a href="https://github-redirect.dependabot.com/jantimon/html-webpack-plugin/issues/1663">#1663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="873d75bbcb"><code>873d75b</code></a> chore(release): 5.5.0</li>
<li><a href="ddeb77414e"><code>ddeb774</code></a> chore: update examples</li>
<li><a href="1e4262528f"><code>1e42625</code></a> feat: Support type=module via scriptLoading option</li>
<li><a href="7d3645b01a"><code>7d3645b</code></a> Bump pretty-error to 4.0.0 to fix transitive vuln for ansi-regex CVE-2021-3807</li>
<li><a href="79be7799c9"><code>79be779</code></a> [chore] changes actions to run on pull_requests</li>
<li><a href="b7e5859db3"><code>b7e5859</code></a> [chore] fixes CI to avoid race conditions</li>
<li>See full diff in <a href="https://github.com/jantimon/html-webpack-plugin/compare/v5.4.0...v5.5.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
Bumps [webpack](https://github.com/webpack/webpack) from 5.59.1 to 5.60.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/webpack/webpack/releases">webpack's releases</a>.</em></p>
<blockquote>
<h2>v5.60.0</h2>
<h1>Features</h1>
<ul>
<li>Allow to pass more options to <code>experiments.lazyCompilation</code>. e. g. port, https stuff</li>
</ul>
<h1>Bugfixes</h1>
<ul>
<li>fix <code>output.hashFunction</code> used to persistent caching too</li>
<li>Initialize <code>buildDependencies</code> Set correctly when loaders are added in <code>beforeLoaders</code> hook</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="f0298fe46f"><code>f0298fe</code></a> 5.60.0</li>
<li><a href="c55dbcb5e4"><code>c55dbcb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14236">#14236</a> from cgatian/feat/lazy-compilation-backend-https-su...</li>
<li><a href="866e674114"><code>866e674</code></a> update Cli snapshots</li>
<li><a href="691e37b6f1"><code>691e37b</code></a> add missing descriptions to schema</li>
<li><a href="a8b00f864c"><code>a8b00f8</code></a> nitpicks</li>
<li><a href="4a1d4e6dba"><code>4a1d4e6</code></a> Merge branch 'main' into feat/lazy-compilation-backend-https-support</li>
<li><a href="ba154bc741"><code>ba154bc</code></a> refactor and add test case</li>
<li><a href="b865ecb2db"><code>b865ecb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/webpack/webpack/issues/14557">#14557</a> from JonnyBurger/patch-1</li>
<li><a href="92d5266d22"><code>92d5266</code></a> Update PackFileCacheStrategy.js</li>
<li><a href="6776595f40"><code>6776595</code></a> Honor <code>hashFunction</code> option for createFileSerializer</li>
<li>Additional commits viewable in <a href="https://github.com/webpack/webpack/compare/v5.59.1...v5.60.0">compare view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
</details>
dependabot[bot]
Iban Eguia