Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Upgrade webpack from 5.11.0 to 5.89.0 #1629

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

Tanver-Hasan
Copy link
Owner

This PR was automatically created by Snyk using the credentials of a real user.


Snyk has created this PR to upgrade webpack from 5.11.0 to 5.89.0.

As this is a private repository, Snyk-bot does not have access. Therefore, this PR has been created automatically, but appears to have been created by a real user.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 136 versions ahead of your current version.
  • The recommended version was released a month ago, on 2023-10-13.

The recommended version fixes:

Severity Issue PriorityScore (*) Exploit Maturity
Sandbox Bypass
SNYK-JS-WEBPACK-3358798
736/1000
Why? Proof of Concept exploit, Has a fix available, CVSS 8.3
Proof of Concept

(*) Note that the real score may have changed since the PR was raised.

Release notes
Package name: webpack
  • 5.89.0 - 2023-10-13

    New Features

    Dependencies & Maintenance

    Full Changelog: v5.88.2...v5.89.0

  • 5.88.2 - 2023-07-18

    Bug Fixes

    • Fixed a bug where unused identifiers should retain names when using css modules by @ burhanuday in #17444

    Full Changelog: v5.88.1...v5.88.2

  • 5.88.1 - 2023-06-28

    Developer Experience

    Full Changelog: v5.88.0...v5.88.1

  • 5.88.0 - 2023-06-21

    New Features

    Bug Fixes

    Developer Experience

    Dependencies & Maintenance

    New Contributors

    Full Changelog: v5.87.0...v5.88.0

  • 5.87.0 - 2023-06-14
    Read more
  • 5.86.0 - 2023-06-07
    Read more
  • 5.85.1 - 2023-06-05

    Bug Fixes

    • Fix bug in handling barrel imports (#17305) by @ bworline in #17307 - NOTE: An internal API BasicEvaluatedExpression.getMemberRangeStarts has been changed to BasicEvaluatedExpression.getMemberRanges, please see type definition changes and the pull request for more information.

    Dependencies & Maintenance

    Full Changelog: v5.85.0...v5.85.1

  • 5.85.0 - 2023-05-31
    Read more
  • 5.84.1 - 2023-05-25

    Bug Fixes

    Dependencies & Maintenance

    Full Changelog: v5.84.0...v5.84.1

  • 5.84.0 - 2023-05-24
  • 5.83.1 - 2023-05-17
  • 5.83.0 - 2023-05-17
  • 5.82.1 - 2023-05-10
  • 5.82.0 - 2023-05-03
  • 5.81.0 - 2023-04-26
  • 5.80.0 - 2023-04-19
  • 5.79.0 - 2023-04-12
  • 5.78.0 - 2023-04-05
  • 5.77.0 - 2023-03-29
  • 5.76.3 - 2023-03-22
  • 5.76.2 - 2023-03-15
  • 5.76.1 - 2023-03-10
  • 5.76.0 - 2023-03-08
  • 5.75.0 - 2022-11-09
  • 5.74.0 - 2022-07-25
  • 5.73.0 - 2022-06-02
  • 5.72.1 - 2022-05-10
  • 5.72.0 - 2022-04-07
  • 5.71.0 - 2022-04-01
  • 5.70.0 - 2022-03-03
  • 5.69.1 - 2022-02-17
  • 5.69.0 - 2022-02-15
  • 5.68.0 - 2022-01-31
  • 5.67.0 - 2022-01-21
  • 5.66.0 - 2022-01-12
  • 5.65.0 - 2021-12-06
  • 5.64.4 - 2021-11-25
  • 5.64.3 - 2021-11-24
  • 5.64.2 - 2021-11-20
  • 5.64.1 - 2021-11-15
  • 5.64.0 - 2021-11-11
  • 5.63.0 - 2021-11-09
  • 5.62.2 - 2021-11-09
  • 5.62.1 - 2021-11-05
  • 5.62.0 - 2021-11-05
  • 5.61.0 - 2021-10-29
  • 5.60.0 - 2021-10-25
  • 5.59.1 - 2021-10-20
  • 5.59.0 - 2021-10-19
  • 5.58.2 - 2021-10-13
  • 5.58.1 - 2021-10-08
  • 5.58.0 - 2021-10-07
  • 5.57.1 - 2021-10-05
  • 5.57.0 - 2021-10-05
  • 5.56.1 - 2021-10-04
  • 5.56.0 - 2021-10-01
  • 5.55.1 - 2021-09-29
  • 5.55.0 - 2021-09-28
  • 5.54.0 - 2021-09-24
  • 5.53.0 - 2021-09-16
  • 5.52.1 - 2021-09-10
  • 5.52.0 - 2021-09-03
  • 5.51.2 - 2021-09-02
  • 5.51.1 - 2021-08-19
  • 5.51.0 - 2021-08-19
  • 5.50.0 - 2021-08-10
  • 5.49.0 - 2021-08-06
  • 5.48.0 - 2021-08-02
  • 5.47.1 - 2021-07-29
  • 5.47.0 - 2021-07-27
  • 5.46.0 - 2021-07-22
  • 5.45.1 - 2021-07-16
  • 5.45.0 - 2021-07-16
  • 5.44.0 - 2021-07-08
  • 5.43.0 - 2021-07-06
  • 5.42.1 - 2021-07-05
  • 5.42.0 - 2021-07-02
  • 5.41.1 - 2021-06-29
  • 5.41.0 - 2021-06-28
  • 5.40.0 - 2021-06-21
  • 5.39.1 - 2021-06-17
  • 5.39.0 - 2021-06-14
  • 5.38.1 - 2021-05-27
  • 5.38.0 - 2021-05-27
  • 5.37.1 - 2021-05-19
  • 5.37.0 - 2021-05-10
  • 5.36.2 - 2021-04-30
  • 5.36.1 - 2021-04-28
  • 5.36.0 - 2021-04-27
  • 5.35.1 - 2021-04-23
  • 5.35.0 - 2021-04-21
  • 5.34.0 - 2021-04-19
  • 5.33.2 - 2021-04-14
  • 5.33.1 - 2021-04-14
  • 5.33.0 - 2021-04-14
  • 5.32.0 - 2021-04-12
  • 5.31.2 - 2021-04-09
  • 5.31.1 - 2021-04-09
  • 5.31.0 - 2021-04-07
  • 5.30.0 - 2021-04-01
  • 5.29.0 - 2021-04-01
  • 5.28.0 - 2021-03-24
  • 5.27.2 - 2021-03-22
  • 5.27.1 - 2021-03-20
  • 5.27.0 - 2021-03-19
  • 5.26.3 - 2021-03-17
  • 5.26.2 - 2021-03-16
  • 5.26.1 - 2021-03-16
  • 5.26.0 - 2021-03-15
  • 5.25.1 - 2021-03-14
  • 5.25.0 - 2021-03-12
  • 5.24.4 - 2021-03-08
  • 5.24.3 - 2021-03-03
  • 5.24.2 - 2021-02-24
  • 5.24.1 - 2021-02-23
  • 5.24.0 - 2021-02-22
  • 5.23.0 - 2021-02-18
  • 5.22.0 - 2021-02-15
  • 5.21.2 - 2021-02-07
  • 5.21.1 - 2021-02-06
  • 5.21.0 - 2021-02-05
  • 5.20.2 - 2021-02-04
  • 5.20.1 - 2021-02-03
  • 5.20.0 - 2021-02-02
  • 5.19.0 - 2021-01-29
  • 5.18.0 - 2021-01-26
  • 5.17.0 - 2021-01-22
  • 5.16.0 - 2021-01-19
  • 5.15.0 - 2021-01-15
  • 5.14.0 - 2021-01-13
  • 5.13.0 - 2021-01-11
  • 5.12.3 - 2021-01-10
  • 5.12.2 - 2021-01-09
  • 5.12.1 - 2021-01-08
  • 5.12.0 - 2021-01-08
  • 5.11.1 - 2020-12-28
  • 5.11.0 - 2020-12-17
from webpack GitHub release notes
Commit messages
Package name: webpack
  • 8766092 5.89.0
  • 21c80e4 Merge pull request #17718 from bworline/require-preserve-chains
  • b14922c Refactor shared code
  • dc66572 update types
  • d36804e update types
  • d4e8485 initial
  • 1f13ff9 Merge pull request #17666 from webpack/dependabot/npm_and_yarn/types/node-20.6.0
  • f00e6e2 chore(deps-dev): bump @ types/node from 20.4.9 to 20.6.0
  • 853bfda Merge pull request #17427 from webpack/dependabot/npm_and_yarn/simple-git-3.19.1
  • 64707c9 Merge pull request #17483 from webpack/dependabot/npm_and_yarn/semver-5.7.2
  • ac7e531 Merge pull request #17580 from webpack/dependabot/npm_and_yarn/less-4.2.0
  • 44244e7 Merge pull request #17583 from webpack/dependabot/npm_and_yarn/types/node-20.4.9
  • c628be0 chore(deps-dev): bump @ types/node from 20.4.8 to 20.4.9
  • 70ec865 chore(deps-dev): bump less from 4.1.3 to 4.2.0
  • e341b58 Merge pull request #17536 from webpack/dependabot/npm_and_yarn/pretty-format-29.6.2
  • 86227f5 Merge pull request #17539 from webpack/dependabot/npm_and_yarn/core-js-3.32.0
  • 71e073d Merge pull request #17426 from ersachin3112/stats-normal
  • 9bde319 Merge pull request #17420 from ersachin3112/stats-detailed
  • 4938e77 Merge pull request #17568 from webpack/dependabot/npm_and_yarn/types/node-20.4.8
  • 8eae585 chore(deps-dev): bump @ types/node from 20.3.1 to 20.4.8
  • 7ad5456 chore(deps-dev): bump core-js from 3.31.0 to 3.32.0
  • ac53f1b chore(deps-dev): bump pretty-format from 29.5.0 to 29.6.2
  • 1f99ad6 5.88.2
  • 066cd49 Merge pull request #17444 from burhanuday/fix/css-unused-identifiers

Compare


Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants