Skip to content

Bump webpack from 5.99.9 to 5.105.3 - #156

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-5.105.3
Closed

Bump webpack from 5.99.9 to 5.105.3#156
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/webpack-5.105.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 3, 2026

Copy link
Copy Markdown

Bumps webpack from 5.99.9 to 5.105.3.

Release notes

Sourced from webpack's releases.

v5.105.3

Patch Changes

  • Context modules now handle rejections correctly. (by @鈥媋lexander-akait in #20455)

  • Only mark asset modules as side-effect-free when experimental.futureDefaults is set to true, so asset-copying use cases (e.g. import "./x.png") won鈥檛 break unless the option is enabled. (by @鈥媓ai-x in #20535)

  • Add the missing webpack_exports declaration in certain cases when bundling a JS entry together with non-JS entries (e.g., CSS entry or asset module entry). (by @鈥媓ai-x in #20463)

  • Fixed HMR failure for CSS modules with @鈥媔mport when exportType !== "link". When exportType is not "link", CSS modules now behave like JavaScript modules and don't require special HMR handling, allowing @鈥媔mport CSS to work correctly during hot module replacement. (by @鈥媥iaoxiaojx in #20514)

  • Fixed an issue where empty JavaScript files were generated for CSS-only entry points. The code now correctly checks if entry modules have JavaScript source types before determining whether to generate a JS file. (by @鈥媥iaoxiaojx in #20454)

  • Do not crash when a referenced chunk is not a runtime chunk. (by @鈥媋lexander-akait in #20461)

  • Fix some types. (by @鈥媋lexander-akait in #20412)

  • Ensure that missing module error are thrown after the interception handler (if present), allowing module interception to customize the module factory. (by @鈥媓ai-x in #20510)

  • Added createRequire support for ECMA modules. (by @鈥媠tefanbinoj in #20497)

  • Added category for CJS reexport dependency to fix issues with ECMA modules. (by @鈥媓ai-x in #20444)

  • Implement immutable bytes for bytes import attribute to match tc39 spec. (by @鈥媋lexander-akait in #20481)

  • Fixed deterministic search for graph roots regardless of edge order. (by @鈥媣eeceey in #20452)

v5.105.2

Patch Changes

v5.105.1

Patch Changes

  • Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @鈥媥iaoxiaojx in #20424)

  • Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @鈥媓ai-x in #20433)

  • Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @鈥媓ai-x in #20433)

v5.105.0

Minor Changes

  • Allow resolving worker module by export condition name when using new Worker() (by @鈥媓ai-x in #20353)

  • Detect conditional imports to avoid compile-time linking errors for non-existent exports. (by @鈥媓ai-x in #20320)

  • Added the tsconfig option for the resolver options (replacement for tsconfig-paths-webpack-plugin). Can be false (disabled), true (use the default tsconfig.json file to search for it), a string path to tsconfig.json, or an object with configFile and references options. (by @鈥媋lexander-akait in #20400)

... (truncated)

Changelog

Sourced from webpack's changelog.

5.105.3

Patch Changes

  • Context modules now handle rejections correctly. (by @鈥媋lexander-akait in #20455)

  • Only mark asset modules as side-effect-free when experimental.futureDefaults is set to true, so asset-copying use cases (e.g. import "./x.png") won鈥檛 break unless the option is enabled. (by @鈥媓ai-x in #20535)

  • Add the missing webpack_exports declaration in certain cases when bundling a JS entry together with non-JS entries (e.g., CSS entry or asset module entry). (by @鈥媓ai-x in #20463)

  • Fixed HMR failure for CSS modules with @鈥媔mport when exportType !== "link". When exportType is not "link", CSS modules now behave like JavaScript modules and don't require special HMR handling, allowing @鈥媔mport CSS to work correctly during hot module replacement. (by @鈥媥iaoxiaojx in #20514)

  • Fixed an issue where empty JavaScript files were generated for CSS-only entry points. The code now correctly checks if entry modules have JavaScript source types before determining whether to generate a JS file. (by @鈥媥iaoxiaojx in #20454)

  • Do not crash when a referenced chunk is not a runtime chunk. (by @鈥媋lexander-akait in #20461)

  • Fix some types. (by @鈥媋lexander-akait in #20412)

  • Ensure that missing module error are thrown after the interception handler (if present), allowing module interception to customize the module factory. (by @鈥媓ai-x in #20510)

  • Added createRequire support for ECMA modules. (by @鈥媠tefanbinoj in #20497)

  • Added category for CJS reexport dependency to fix issues with ECMA modules. (by @鈥媓ai-x in #20444)

  • Implement immutable bytes for bytes import attribute to match tc39 spec. (by @鈥媋lexander-akait in #20481)

  • Fixed deterministic search for graph roots regardless of edge order. (by @鈥媣eeceey in #20452)

5.105.2

Patch Changes

5.105.1

Patch Changes

  • Fix VirtualUrlPlugin Windows compatibility by sanitizing cache keys and filenames. Cache keys now use toSafePath to replace colons (:) with double underscores (__) and sanitize other invalid characters, ensuring compatibility with Windows filesystem restrictions. (by @鈥媥iaoxiaojx in #20424)

  • Revert part of the createRequire generation behavior for require("node:...") to keep compatibility with those modules exports, e.g. const EventEmitter = require("node:events");. (by @鈥媓ai-x in #20433)

  • Skip guard collection when exports-presence mode is disabled to improve parsing performance. (by @鈥媓ai-x in #20433)

5.105.0

Minor Changes

  • Allow resolving worker module by export condition name when using new Worker() (by @鈥媓ai-x in #20353)

... (truncated)

Commits
  • 714a0e3 chore(release): new release (#20448)
  • c323b39 chore(deps-dev): bump nyc from 17.1.0 to 18.0.0 (#20539)
  • 8a01dfe refactor: deduplicate export presence logic in Harmony dependency classes (#2...
  • b9fc7b3 chore(deps): bump test/test262-cases in the dependencies group (#20541)
  • f8a5ac3 test: add coverage for nwjs exports condition and CSS modules with webworker ...
  • 59bf024 test: add coverage for external script in EnvironmentNotSupportAsyncWarning (...
  • 4c79ac2 test: add missing coverage for formatLocation and formatSize (#20534)
  • 4f5c0a8 fix: mark asset module as side-effect-free when futureDefaults (#20535)
  • 87987ca test: add test
  • 67c5aae test: add configCase for ESM prefetch/preload under neutral target (#20524)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for webpack since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [webpack](https://github.com/webpack/webpack) from 5.99.9 to 5.105.3.
- [Release notes](https://github.com/webpack/webpack/releases)
- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)
- [Commits](webpack/webpack@v5.99.9...v5.105.3)

---
updated-dependencies:
- dependency-name: webpack
  dependency-version: 5.105.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 3, 2026
@dependabot @github

dependabot Bot commented on behalf of github Mar 10, 2026

Copy link
Copy Markdown
Author

Superseded by #159.

@dependabot dependabot Bot closed this Mar 10, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/webpack-5.105.3 branch March 10, 2026 04:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants