Bump webpack, webpack-assets-manifest and webpack-cli

[dependabot]

Bumps webpack, webpack-assets-manifest and webpack-cli. These dependencies needed to be updated together.
Updates webpack from 4.46.0 to 5.33.2

Release notes

Sourced from webpack's releases.

v5.33.2

Bugfix

• handle falsy entry options correctly

v5.33.1

Bugfix

• fix passing publicPath to this.importModule

v5.33.0

Features

• adds support for specifying a publicPath per entrypoint
  • add entry.xxx.publicPath option

Bugfix

• disable injection of chunk loading logic for executeModule

Performance

• performance improvements for export * and reexports

v5.32.0

Features

• add support for a pseudo extensions .webpack[type] (e. g. .webpack[javascript/auto]) to specify the default module type when no other module type is specified
  • to be used with !=! inline syntax

Bugfixes

• fixes incorrect cache invalidation when new properties are added to the DefinePlugin

Experiments

• add experiments.executeModule to allow build-time execution of modules of the module graph
  • add this.importModule(request, options, [callback]): Promise to the loader context
  • add compilation.executeModule(request, options, callback) for plugins

v5.31.2

Bugfixes

• revert disposing of CodeGenerationResults since some plugins rely on the fact that they are still accessible after the compilation

v5.31.1

Bugfixes

• invalid hooks is no longer called twice for a compiler in a MultiCompiler

... (truncated)

Commits

• 93ce24d 5.33.2
• 45fac7d Merge pull request #13143 from webpack/bugfix/falsy-entry-options
• 2df8267 handle falsy entry options correctly
• 7a7d3be 5.33.1
• fbe2a59 Merge pull request #13142 from webpack/bugfix/publicPath-importModule
• 8d3a230 fix passing publicPath to this.importModule
• 7ee3bab 5.33.0
• aca0ee5 Merge pull request #13137 from webpack/feature/public-path-entry
• 52178a5 Merge pull request #13134 from webpack/bugfix/hmr-in-execute-module
• 38de0db allow to specify publicPath for each entrypoint
• Additional commits viewable in compare view

Updates webpack-assets-manifest from 4.0.4 to 5.0.5

Release notes

Sourced from webpack-assets-manifest's releases.

5.0.5

Allow options.space to be a string.

5.0.4

• Updated hook being used to process assets. Use processAssets hook instead of afterProcessAssets so that async lock/unlock functions can be used.
• Updated getLockFilename() to use hash of dirname.
• Removed lockSync and unlockSync functions.
• Updated min webpack version to 5.2.

5.0.3

Use asset.info.hotModuleReplacement to identify HMR files.

5.0.2

• Improved entrypoints handling. #140
• Updated inDevServer() to not use WEBPACK_DEV_SERVER / WEBPACK_SERVE env vars. #125
• Improved writeToDisk: 'auto' behavior
• Updated dependencies

5.0.1

Fixes for #115 and #116

• Improved finding asset modules
• Updated hooks for watch mode
• Use public path with entrypoints
• Updated dependencies

5.0.0

• Compatible with webpack 5 only (5.1+ required).
• Supports finding asset modules.
• Updated options schema to prevent additional properties. This helps with catching typos in option names.
• ⚠️ Updated default value of the output option to be assets-manifest.json. This is to prevent confusion when working with Web app manifests or WebExtension manifests.

4.0.5

Allow options.space to be a string.

Commits

• b5a53ae 5.0.5
• 874266e Allow options.space to be a string (#151)
• f188c8e 5.0.4
• 1da69ba Lockfile improvements (#148)
• 4f8042f Updated dev dependencies
• 60af212 Updated eslint config
• cbc15ca Removed @​types/lodash.escaperegexp
• 745fcca 5.0.3
• c55add7 Use asset.info.hotModuleReplacement to identify HMR files (#145)
• 098dc5c 5.0.2
• Additional commits viewable in compare view

Updates webpack-cli from 3.3.12 to 4.6.0

Release notes

Sourced from webpack-cli's releases.

v4.6.0

4.6.0 (2021-03-27)

Bug Fixes

• negative options (#2555) (f26ebc1)
• improve error message for help (#2482) (99ae2a3)
• show --node-env in minimum help output (#2411) (f5fc302)

Features

• added WEBPACK_PACKAGE env var to use custom webpack package (#2556) (3d1e485)
• added WEBPACK_CLI_SKIP_IMPORT_LOCAL env var to skip local import (#2546) (e130822)
• allow string value for the --hot option (#2444) (8656e78)
• display used config path when logging level=log (#2431) (f8406e1)

v4.5.0

4.5.0 (2021-02-02)

Notes

• now you can use webpack.config.mjs and webpack.config.js with { "type": "module" } in package.json
• you can avoid using the cross-env package:

Before:

{
    "scripts": {
        "build": "cross-env NODE_ENV=production webpack --config build/webpack.config.js"
    }
}

Now (you can remove the cross-env if you don't use it somewhere else):

{
    "scripts": {
        "build": "webpack --node-env=production --config build/webpack.config.js"
    }
}

• the mode option respect the --node-env option if you don't set the mode option explicit using CLI options or in configuration(s), i.e. --node-env production set process.env.NODE_ENV and mode to production

Bug Fixes

• avoid deprecation message (9d6dbda)
• error message on invalid plugin options (#2380) (f9ce1d3)

... (truncated)

Changelog

Sourced from webpack-cli's changelog.

4.6.0 (2021-03-27)

Bug Fixes

• negative options (#2555) (f26ebc1)
• improve error message for help (#2482) (99ae2a3)
• show --node-env in minimum help output (#2411) (f5fc302)

Features

• added WEBPACK_PACKAGE env var to use custom webpack package (#2556) (3d1e485)
• added WEBPACK_CLI_SKIP_IMPORT_LOCAL env var to skip local import (#2546) (e130822)
• allow string value for the --hot option (#2444) (8656e78)
• display used config path when logging level=log (#2431) (f8406e1)

4.5.0 (2021-02-02)

Notes

• now you can use webpack.config.mjs and webpack.config.js with { "type": "module" } in package.json
• you can avoid using the cross-env package:

Before:

{
    "scripts": {
        "build": "cross-env NODE_ENV=production webpack --config build/webpack.config.js"
    }
}

Now (you can remove the cross-env if you don't use it somewhere else):

{
    "scripts": {
        "build": "webpack --node-env=production --config build/webpack.config.js"
    }
}

• the mode option respect the --node-env option if you don't set the mode option explicit using CLI options or in configuration(s), i.e. --node-env production set process.env.NODE_ENV and mode to production

Bug Fixes

• avoid deprecation message (9d6dbda)
• error message on invalid plugin options (#2380) (f9ce1d3)
• improve description for 'configtest' command (#2379) (311bae3)

... (truncated)

Commits

• b7b0852 chore(release): publish new version
• a8afb64 chore(deps-dev): bump @​types/node
• 7ff723c chore(deps-dev): bump @​types/jest
• 9d296df chore(deps-dev): bump eslint from 7.22.0 to 7.23.0 (#2564)
• f8d6606 chore: ignore tests from npm (#2563)
• f26ebc1 fix: generation of negative flags (#2555)
• 3d1e485 feat: add WEBPACK_PACKAGE env var to use custom webpack package (#2556)
• d039472 test: update snapshots (#2557)
• 5c96b69 ci: add bootstrap step in workflow (#2553)
• a141bbb feat: allow all css possibilities for default template (#2544)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #656.